Google vulnerabilities
9,028 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-56943In multiple locations, there is a possible way to trigger an out of bounds read via an attestation comparison oracle due to an incorrect…
- CVE-2026-56938In port_shutdown of ipc.c, there is a possible Use After Free due to a race condition.
- CVE-2026-56935In km_os_regen_salt of storage.c, there is a possible way to recover deleted keys due to a logic error.
- CVE-2026-56934In arm_lpae_split_blk_unmap of drivers/iommu/io-pgtable-arm-common.c, there is a possible Logic error due to a logic error in the code.
- CVE-2026-56933In RecordApTx of efw_ap_transport.c, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.
- CVE-2026-56930In smmu_find_ste of smmu.c, there is a possible way to retain stale translation lookaside buffer entries across stream identifiers due to…
- CVE-2026-56929In TrustyKeyMintManager::VerifyHat of trusty_keymint_manager.cc, there is a possible Security check bypass due to a logic error in the code.
- CVE-2026-56926In multiple functions of PssSubscriptionManager.java, there is a possible way to spoof subscription switch results and trigger a device…
- CVE-2026-56919In PackageSignatureChecker of SystemUIGoogleModule.java, there is a possible background activity launch due to a confused deputy.
- CVE-2026-56916In _vqueue_get_avail_buf_locked of trusty/kernel/lib/trusty/vqueue.c, there is a possible Double-read / TOCTOU due to a race condition.
- CVE-2026-56912In ac_remove_smmu_prot_internal of acfw_smmu.c, there is a possible Logic error due to a logic error in the code.
- CVE-2026-56911In handle_fips_hmac_req of hwcrypto_proxy.c, there is a possible heap buffer overflow due to missing bounds check.
- CVE-2026-56910In multiple locations, there is a possible way to trigger an out of bounds read and write in shared memory due to an incorrect bounds check.
- CVE-2026-56909In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify voltage control registers from non-secure software due to a…
- CVE-2026-56902In multiple locations, there is a possible information disclosure due to a logic error in the code.
- CVE-2026-56898In aes256_cmac_sw of aes.rs, there is a possible way to forge message authentication codes over multi-block messages due to improperly…
- CVE-2026-56897In multiple functions of attestation_object.c, there is a possible way to disclose uninitialized secure element stack memory in key…
- CVE-2026-56884In ac_set_ns_ipa_tbl of plat_trusty.c, there is a possible way to corrupt stream table entry configurations via unvalidated parameters due…
- CVE-2026-55362In multiple files, there is a possible out-of-bounds write due to a missing bounds check.
- CVE-2026-55360In secure_transport_usecase_handshake of secure_transport.c, there is a possible way to bypass secure transport channel encryption due to…
- CVE-2026-55348In GetSharedMemory of trusty_shared_memory_manager.cc, there is a possible way to trigger an out of bounds read via sign extension of a…
- CVE-2026-55346In km_read_data_response of keymaster.c, there is a possible way to trigger an out of bounds write on the heap due to a missing bounds…
- CVE-2026-55344In TzSharedMemory of TzSharedMemory.c, there is a possible Heap buffer overflow due to a logic error in the code.
- CVE-2026-55335In multiple locations, there is a possible use-after-free due to a logic error in the code.
- CVE-2026-55321In parse_prime256v1 of keymint_asn1.c, there is a possible Heap Buffer Overflow due to a logic error in the code.
- CVE-2026-55319In thread_free of thread.c, there is a possible way to corrupt kernel heap metadata on thread creation failure due to memory corruption.
- CVE-2026-55316In handle_dpm_image of seclib.rs, there is a possible Logic error due to a logic error in the code.
- CVE-2026-55312In insert_node of remap.c, there is a possible way to trigger an out of bounds write in the address remapping table due to a non-heap…
- CVE-2026-55311In N/A of gdmc/gsp/project/gdmc.mk, there is a possible Logic error due to a logic error in the code.
- CVE-2026-55309In multiple functions of verifier.rs, there is a possible way to bypass secure boot signature verification via fault injection due to a…