Google Llc vulnerabilities

Products

• Asylo 16
• Dart Sdk 5
• Fscrypt 4
• Go-attestation 3
• Guest-oslogin 3
• Aws S3 Crypto Sdk For Golang 2
• Brotli 2
• Fuchsia 2
• Fuchsia Kernel 2
• Libjxl 2

Newest

• google go-attestation Denial of Service via Unbounded Recursion in go-attestation Windows SIPA Parser CVE-2026-19201 Fix available 6.6 MediumSeptember 8, 2026
• google go-attestation Go-Attestation: Hash injection into trusted measurement list via unskipped SignatureHeaderSize vendor bytes in parseEfiSignatureList() CVE-2026-12681 Fix available 8.9 HighJune 12, 2026
• andybalholm brotli, 7-zip p7zip, anthropic bun +39 more +41 more Out-of-Bounds Write in Google Brotli Decoder CVE-2026-111497 In KEVPublic exploitFix available EPSS 82.6% 9.2 CriticalApril 27, 2026
• flutter, google llc dart, dart software development kit +2 more Incorrect parsing of the backslash characters in Dart library CVE-2022-3095 9.8 CriticalOctober 27, 2022
• google bazel Bazel leaks user credentials through the remote assets API CVE-2022-3474 Fix available 5.1 MediumOctober 26, 2022
• google drive, google llc drive for desktop macos +1 more Privilege escalation in Google Drive for Desktop on MacOS CVE-2022-3421 5.6 MediumOctober 17, 2022
• google protobuf-java, protocolbuffers, fedoraproject fedora +4 more +6 more Memory handling vulnerability in ProtocolBuffers Java core and lite CVE-2022-3171 Fix available 4.3 MediumOctober 4, 2022
• google protobuf-cpp, protobuf-python, debian linux +1 more +3 more Out of Memory issue in ProtocolBuffers for cpp and python CVE-2022-1941 Fix available 7.5 HighSeptember 22, 2022
• google llc kubevirt Path Traversal vulnerability in Kubevirt CVE-2022-1798 Fix available 8.7 HighAugust 18, 2022
• google llc play services sdk, google play services software development kit +1 more Mutable pending intent in Google Play services SDK CVE-2022-2390 Fix available 6.1 MediumAugust 12, 2022
• google llc play services sdk, google play services software development kit +1 more Incorrect signature verification on Google play-services-basement in Google Play SDK CVE-2022-1799 5.7 MediumJuly 29, 2022
• google fuchsia, google llc fuchsia kernel +1 more Illegal access to Kernel log in Fuchsia CVE-2022-0882 5.3 MediumMay 3, 2022
• google fuchsia, google llc fuchsia kernel +1 more Integer Overflow in Fuchsia Kernel CVE-2021-22556 5.3 MediumMay 3, 2022
• google llc google-oauth-java-client, google oauth client library for java +1 more Incorrect signature verification on Google-oauth-java-client CVE-2021-22573 Fix available 8.7 HighMay 3, 2022
• google perfetto, google llc perfetto dev scripts +1 more Local Priviledge escalation in Perfetto Dev scripts CVE-2022-0343 3.3 LowMarch 29, 2022
• google llc data-transfer-project, google data transfer project +1 more Data-transfer-project information disclosure via tmp directory CVE-2021-22572 5.5 MediumMarch 29, 2022
• google sa360 webquery to bigquery exporter, google llc google/sa360-webquery-bigquery +1 more Information Leak in SA360-webquery-bigquery through read on /tmp CVE-2021-22571 5.5 MediumMarch 18, 2022
• google fuchsia Write access to VMO data through copy-on-write in Fuchsia CVE-2022-0247 7.5 HighFebruary 25, 2022
• google fscrypt Privilege escalation through command injection in fscrypt CVE-2022-25328 Fix available 5.0 MediumFebruary 25, 2022
• google fscrypt Local Denial of Service in fscrypt PAM module CVE-2022-25327 Fix available 5.5 MediumFebruary 25, 2022
• google fscrypt Denial of Service in fscrypt CVE-2022-25326 Fix available 5.5 MediumFebruary 25, 2022
• google llc dart sdk, dart software development kit +1 more Auth bypass in Dark SDK CVE-2022-0451 6.5 MediumFebruary 18, 2022
• google go-attestation Improper Input Validation in AKPublic.Verify in go-attestation CVE-2022-0317 Fix available 4.0 MediumFebruary 1, 2022
• google protobuf, debian linux, fedoraproject fedora +5 more +7 more Nullptr Dereference in Protobuf CVE-2021-22570 Fix available 6.5 MediumJanuary 26, 2022
• google fuchsia Incorrect mapping of Executable bits in Fuchsia Kernel CVE-2021-22566 5.1 MediumJanuary 18, 2022
• google protobuf-java, google-protobuf, google-protobuf [jruby gem] +5 more +7 more Denial of Service of protobuf-java parsing procedure CVE-2021-22569 Public exploitFix available 7.5 HighJanuary 7, 2022
• google llc dart sdk, dart software development kit +1 more Bidirectional Override in Dart SDK CVE-2021-22567 4.6 MediumJanuary 5, 2022
• dart software development kit, google llc dart sdk +1 more Dart - Publishing to third-party package repositories may expose pub.dev credentials CVE-2021-22568 8.8 HighDecember 9, 2021
• google exposure notification verification server, google llc exposure-notifications-verification-server +1 more Insufficient Granularity of Access Control in GAEN Notification Server CVE-2021-22565 Fix available 6.5 MediumNovember 10, 2021
• google libjxl Out of bounds Copy in Libjxl in large image groups CVE-2021-22564 4.5 MediumNovember 1, 2021
• google libjxl Memory Overread in libjxl CVE-2021-22563 4.5 MediumNovember 1, 2021
• google slo generator Code execution in SLO Generator via YAML Payload CVE-2021-22557 Public exploitFix available 5.3 MediumOctober 4, 2021
• google asylo Memory overread secure enclave in Asylo 0.6.2 CVE-2021-22552 5.3 MediumAugust 2, 2021
• google bindiff Use-after-free in BinDiff CVE-2021-22545 7.5 HighJune 29, 2021
• google asylo Enclave memory overwrite/overread vulnerability in Asylo UntrustedCacheMalloc::GetBuffer CVE-2021-22550 6.5 MediumJune 8, 2021
• google asylo Arbitrary enclave memory overwrite vulnerability in Asylo TrustedPrimitives::UntrustedCall CVE-2021-22549 6.5 MediumJune 8, 2021
• google asylo Arbitrary enclave memory overread vulnerability in Asylo TrustedPrimitives::UntrustedCall CVE-2021-22548 6.5 MediumJune 8, 2021
• google cloud iot device sdk for embedded c Buffer overrun in Google Cloud IoT Device SDK for Embedded C CVE-2021-22547 6.3 MediumMay 4, 2021
• google llc dart sdk, dart software development kit +1 more XSS in Dart SDK CVE-2021-22540 6.1 MediumApril 22, 2021
• google bazel, google llc vscode-bazel +1 more Code execution in VSCode-bazel via malicious Bazel config files CVE-2021-22539 8.2 HighApril 16, 2021
• google exposure notifications verification server Privilege escalation in RBAC system CVE-2021-22538 Fix available 6.3 MediumMarch 31, 2021
• google rendertron SSRF in Rendertron CVE-2020-8902 Fix available 3.5 LowFebruary 23, 2021
• gerrit Heap Memory exhaustion in Gerrit CVE-2021-22553 6.5 MediumFebruary 17, 2021
• google asylo Unchecked buffer overrun in ecall_restore CVE-2020-8944 5.3 MediumDecember 15, 2020
• google asylo Unchecked buffer overrun in enc_untrusted_recvfrom CVE-2020-8943 5.3 MediumDecember 15, 2020
• google asylo Unchecked buffer overrun in enc_untrusted_read CVE-2020-8942 5.3 MediumDecember 15, 2020
• google asylo Unchecked buffer overrun in enc_untrusted_inet_pton CVE-2020-8941 5.3 MediumDecember 15, 2020
• google asylo Unchecked buffer overrun in enc_untrusted_recvmsg CVE-2020-8940 5.3 MediumDecember 15, 2020
• google asylo Out of Bounds read in Asylo CVE-2020-8939 5.3 MediumDecember 15, 2020
• google asylo Arbitrary enclave memory location write from untrusted environment CVE-2020-8938 5.3 MediumDecember 15, 2020
• Show olderLoading…