Skip to contentGoogle vulnerabilities
Products
Show 38 moreShow less
Newest
- google chromeUse after free in Fullscreen in Google Chrome on Android prior to 150.0.7871.47 allowed a remote...CVE-2026-13788Fix available8.8 High
- google chromeUse after free in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote...CVE-2026-13787Fix available8.1 High
- google chromeUse after free in Ozone in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...CVE-2026-13786Fix available8.8 High
- google chromeUse after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote...CVE-2026-13785Fix available9.6 Critical
- google chromeUse after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...CVE-2026-13784Fix available8.8 High
- google chromeUse after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...CVE-2026-13783Fix available8.8 High
- google chromeUse after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...CVE-2026-13782Fix available10.0 Critical
- google chromeInsufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47...CVE-2026-13781Fix available9.6 Critical
- google chromeInsufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47...CVE-2026-13780Fix available9.6 Critical
- google chromeUse after free in Chromoting in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote...CVE-2026-13779Fix available8.1 High
- google chromeUse after free in WebUSB in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker...CVE-2026-13778Fix available7.8 High
- google chromeInsufficient validation of untrusted input in iOSWeb in Google Chrome on iOS prior to 150.0.7871...CVE-2026-13777Fix available8.8 High
- google chromeType Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had...CVE-2026-13776Fix available9.8 Critical
- google chromeUse after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had...CVE-2026-13775Fix available9.8 Critical
- google chromeUse after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who...CVE-2026-13774Fix available8.1 High
- google mcp toolbox for databases (googleapis/mcp-toolbox), mcp toolbox for databases +1 morePath Traversal in googleapis/mcp-toolbox HTTP Tool URL BuilderCVE-2026-11720Fix available9.3 Critical
- google chromeUse after free in AdFilter in Google Chrome on Android prior to 149.0.7827.201 allowed a remote...CVE-2026-13283Fix available7.5 High
- google chromeUse after free in Payments in Google Chrome on Android prior to 149.0.7827.201 allowed a local...CVE-2026-13282Fix available6.8 Medium
- google chromeInteger overflow in Mojo in Google Chrome prior to 149.0.7827.201 allowed a remote attacker who...CVE-2026-13281Fix available8.3 High
- chromedevtools chrome-devtools-mcpchrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing rootsCVE-2026-53766Fix available6.1 Medium
- google chromeUse after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local...CVE-2026-13037Fix available7.8 High
- google chromeUse after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to...CVE-2026-13036Fix available8.8 High
- google chromeUse after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote...CVE-2026-13035Fix available8.8 High
- google chromeInappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.197 allowed a...CVE-2026-13034Fix available4.7 Medium
- google chromeUse after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to...CVE-2026-13031Fix available8.8 High
- google chromeUninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.197 allowed a remote...CVE-2026-13030Fix available5.3 Medium
- google chromeUse after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an attacker...CVE-2026-13029Fix available7.5 High
- google chromeUse after free in FileSystem in Google Chrome prior to 149.0.7827.197 allowed a remote attacker...CVE-2026-13027Fix available8.8 High
- google chromeUse after free in Digital Credentials in Google Chrome on Mac prior to 149.0.7827.197 allowed a...CVE-2026-13026Fix available8.8 High
- google chromeRace in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had...CVE-2026-13025Fix available8.3 High
- google chromeInsufficient validation of untrusted input in Navigation in Google Chrome prior to 149.0.7827.197...CVE-2026-13024Fix available4.2 Medium
- google chromeUninitialized Use in GPU in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who...CVE-2026-13023Fix available5.3 Medium
- google chromeUse after free in Autofill in Google Chrome on Windows prior to 149.0.7827.197 allowed a remote...CVE-2026-13038Fix available8.8 High
- google chromeInappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.197 allowed a...CVE-2026-13022Fix available6.5 Medium
- google chromeInappropriate implementation in DeviceBoundSessionCredentials in Google Chrome prior to 149.0...CVE-2026-13021Fix available4.3 Medium
- google chromeOut of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197...CVE-2026-13033Fix available8.8 High
- google chromeUse after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote...CVE-2026-13032Fix available9.6 Critical
- google chromeUse after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote...CVE-2026-13028Fix available9.6 Critical
- google site kit by googleSite Kit by Google < 1.176.0 - Editor+ Email Reporting Settings UpdateCVE-2026-107532.7 Low
- google mcp toolbox for databases, mcp toolbox for databases (googleapis/mcp-toolbox) +1 moreMCP Toolbox for Databases: authenticated authorization bypassCVE-2026-11719Fix available8.6 High
- google mcp toolbox for databases (googleapis/mcp-toolbox), mcp toolbox for databases +1 moregoogleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)CVE-2026-11718Fix available9.3 Critical
- google mcp toolbox for databases (googleapis/mcp-toolbox), mcp toolbox for databases +1 moregoogleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)CVE-2026-11717Fix available9.3 Critical
- google androidIn AndroidManifest.xml, there is a possible persistent denial of service due to a missing...CVE-2026-2857310.0 Critical
- chromedevtools chrome-devtools-mcpchrome-devtools-mcp: daemon.pid write follows symlinks in /tmp fallback runtime directoryCVE-2026-53765Fix available6.1 Medium
- google androidIn setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier...CVE-2026-006310.0 Critical
- google androidIn MmsSmsProvider of MmsSmsProvider.java, there is a possible way to retrieve sensitive...CVE-2026-2858710.0 Critical
- androidIn Contacts Provider, there is a possible way to access the contacts database due to SQL...CVE-2026-28576Public exploit10.0 Critical
- google androidIn Telecomm, there is a possible way to initiate an unauthorized phone call due to a permissions...CVE-2026-2861510.0 Critical
- google androidIn Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition....CVE-2026-008310.0 Critical
- google androidIn tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access...CVE-2026-008210.0 Critical
- Show moreLoading…