Google CVEs
9,028 CVEs and advisories name Google as an affected vendor, 82 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-45520In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy.
- CVE-2026-45519In screenArgsForPermissionCheckIfAny of multiple locations there is a possible risk of unauthorized access due to a confused deputy.
- CVE-2026-45515In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overf
- CVE-2026-28671In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition.
- CVE-2026-28668In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error in the code.
- CVE-2026-28666In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check
- CVE-2026-28664In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error in the code.
- CVE-2026-28663In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass
- CVE-2026-28662In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow.
- CVE-2026-28660In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code.
- CVE-2026-28658In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code.
- CVE-2026-28657In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy.
- CVE-2026-28656In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack.
- CVE-2026-28655In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code.
- CVE-2026-28653In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow.
- CVE-2026-28652In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check.
- CVE-2026-28650In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code.
- CVE-2026-28644In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy.
- CVE-2026-28642In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code.
- CVE-2026-28639In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a logic error in the code.
- CVE-2026-28638In multiple functions of XmpDataParser.java, there is a possible improper data sanitization due to a logic error in the code.
- CVE-2026-28636In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due to a confused deputy.
- CVE-2026-28634In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error i
- CVE-2026-28633In initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denial of service due to resource exhaustion.
- CVE-2026-28631In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack.
- CVE-2026-28630In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking/overlay attack.
- CVE-2026-28627In btm_sec_encrypt_change of btm_sec.cc, there is a possible downgrade attack due to a logic error in the code.
- CVE-2026-28626In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection .
- CVE-2026-28624In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy.
- CVE-2026-28623In writeToParcel of BleRssiRangingCapabilities.java, there is a possible way to obtain the Bluetooth MAC address due to a missing permission