Skip to contentGoogle vulnerabilities
Products
Show 38 moreShow less
Newest
- google androidIn NFC, there is a possible way to spoof an NFC event due to a missing permission check. This...CVE-2026-008110.0 Critical
- google androidIn SettingsLib, there is a possible missing permission check due to a logic error in the code....CVE-2026-007110.0 Critical
- google androidIn PackageInstaller.Session#transfer of frameworks/base/services/core/java/com/android/server/pm...CVE-2026-2857510.0 Critical
- google androidIn multiple places, there is a possible persistent denial of service due to resource exhaustion....CVE-2026-006410.0 Critical
- google androidIn Package Manager, there is a possible device lock controller bypass due to a missing permission...CVE-2026-0092Public exploit10.0 Critical
- google androidIn createSessionInternal of PackageInstallerService.java, there is a possible method to remove a...CVE-2026-006810.0 Critical
- google androidIn Contacts Provider, there is a possible way to access an incoming call's phone number and...CVE-2026-00573.3 Low
- google androidIn SettingsLib, there is a possible way to disable system components due to a logic error in the...CVE-2026-00197.8 High
- google androidIn multiple locations there is a possible provisioning bypass due to improper input validation....CVE-2025-486437.8 High
- google androidIn multiple locations, there is a possible 3rd party passkey entry pairing approval due to a...CVE-2025-486408.0 High
- google androidIn overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to...CVE-2025-48617Public exploit7.8 High
- google androidIn multiple functions of btm_sec.cc, there is a possible way for an attacker to intercept SMS...CVE-2025-485714.3 Medium
- google chromeUninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.155 allowed a remote...CVE-2026-12469Fix available4.3 Medium
- google chromeRace in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had...CVE-2026-12468Fix available8.3 High
- google chromeUse after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote attacker...CVE-2026-12467Fix available8.3 High
- google chromeHeap buffer overflow in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a...CVE-2026-12466Fix available8.8 High
- google chromeObject lifecycle issue in Metrics in Google Chrome prior to 149.0.7827.155 allowed a remote...CVE-2026-12465Fix available8.3 High
- google chromeUse after free in Browser in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who...CVE-2026-12464Fix available8.3 High
- google chromeInappropriate implementation in Views in Google Chrome on Linux prior to 149.0.7827.155 allowed a...CVE-2026-12463Fix available4.7 Medium
- google chromeUse after free in Media in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who...CVE-2026-12462Fix available7.5 High
- google chromeOut of bounds read in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote...CVE-2026-12461Fix available6.5 Medium
- google chromeInsufficient policy enforcement in File System Access in Google Chrome prior to 149.0.7827.155...CVE-2026-12460Fix available4.2 Medium
- google chromeInappropriate implementation in Serial in Google Chrome prior to 149.0.7827.155 allowed a remote...CVE-2026-12459Fix available6.1 Medium
- google chromeInappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.155 allowed a...CVE-2026-12458Fix available3.1 Low
- google chromeInappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.155 allowed a...CVE-2026-12457Fix available4.2 Medium
- google chromeInappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.155 allowed an...CVE-2026-12456Fix available4.2 Medium
- google chromeUse after free in Tab Strip in Google Chrome prior to 149.0.7827.155 allowed a remote attacker...CVE-2026-12455Fix available7.5 High
- google chromeRace in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker...CVE-2026-12454Fix available8.3 High
- google chromeInsufficient validation of untrusted input in Input in Google Chrome prior to 149.0.7827.155...CVE-2026-12453Fix available4.2 Medium
- google chromeUse after free in Downloads in Google Chrome on Android prior to 149.0.7827.155 allowed a remote...CVE-2026-12452Fix available8.8 High
- google chromeUse after free in DigitalCredentials in Google Chrome prior to 149.0.7827.155 allowed a remote...CVE-2026-12451Fix available8.3 High
- google chromeInappropriate implementation in Media in Google Chrome prior to 149.0.7827.155 allowed a remote...CVE-2026-12450Fix available6.5 Medium
- google chromeUse after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local...CVE-2026-12449Fix available7.8 High
- google chromeInappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155...CVE-2026-12448Fix available8.8 High
- google chromeHeap buffer overflow in WebRTC in Google Chrome prior to 149.0.7827.155 allowed a remote attacker...CVE-2026-12447Fix available8.8 High
- google chromeInappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.155 allowed a...CVE-2026-12446Fix available4.3 Medium
- google chromeUse after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker who...CVE-2026-12445Fix available7.5 High
- google chromeOut of bounds read in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a...CVE-2026-12444Fix available5.5 Medium
- google chromeUse after free in Web Authentication in Google Chrome prior to 149.0.7827.155 allowed a remote...CVE-2026-12443Fix available8.8 High
- google chromeUse after free in Passwords in Google Chrome on Android prior to 149.0.7827.155 allowed a remote...CVE-2026-12442Fix available8.8 High
- google chromeUse after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote...CVE-2026-12441Fix available8.8 High
- google chromeUse after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed...CVE-2026-12440Fix available9.6 Critical
- google chromeUse after free in Digital Credentials in Google Chrome prior to 149.0.7827.155 allowed a remote...CVE-2026-12439Fix available8.8 High
- google chromeInappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155...CVE-2026-12438Fix available8.3 High
- google chromeUse after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote...CVE-2026-12437Fix available8.3 High
- elixir-grpc grpcRemote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpcCVE-2026-48853Fix available9.2 Critical
- elixir-grpc grpcgrpc gzip decompression bomb in GRPC.Compressor.Gzip.decompress/1CVE-2026-53430Fix available8.7 High
- elixir-grpc grpcAuthorization bypass via path binding override in elixir-grpc/grpc HTTP transcodingCVE-2026-48599Fix available7.6 High
- elixir-grpc grpcUnbounded request body accumulation causes memory exhaustion in elixir-grpc/grpcCVE-2026-48854Fix available8.7 High
- google mcp toolbox for databasesMCP Toolbox for Databases has an Origin Validation ErrorCVE-2026-11624Fix available9.4 Critical
- Show moreLoading…