[ Vendor · 935 CVEs ]
CVEs affecting Google published in the last 30 days, plus any Google CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-113041 | 20 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-113042 | 20 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-113043 | 20 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via… | |
| CVE-2026-113044 | 20 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-113045 | 20 Oct 2026 | CVSS 6.5 | Google ChromeOut of bounds read in Offline in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the… | |
| CVE-2026-113046 | 20 Oct 2026 | CVSS 8.8 | Google ChromeImproper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside… | |
| CVE-2026-113047 | 20 Oct 2026 | CVSS 6.5 | Google ChromeMemory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a… | |
| CVE-2026-113031 | 20 Oct 2026 | CVSS 8.8 | Google ChromeMemory corruption in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the… | |
| CVE-2026-113032 | 20 Oct 2026 | CVSS 8.8 | Google ChromeMemory corruption in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the… | |
| CVE-2026-113033 | 20 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-113034 | 20 Oct 2026 | CVSS 8.8 | Google ChromeMemory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-113035 | 20 Oct 2026 | CVSS 6.5 | Google ChromeOut of bounds read in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a… | |
| CVE-2026-113036 | 20 Oct 2026 | CVSS 8.8 | Google ChromeMemory corruption in HTML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox… | |
| CVE-2026-113037 | 20 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-113038 | 20 Oct 2026 | CVSS 6.5 | Google ChromeMemory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a… | |
| CVE-2026-113039 | 20 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Bookmarks in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-113022 | 20 Oct 2026 | CVSS 8.8 | Google ChromeMemory corruption in PDFium in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the… | |
| CVE-2026-113023 | 20 Oct 2026 | CVSS 9.6 | Google ChromeImproper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code… | |
| CVE-2026-113024 | 20 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-113025 | 20 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-113026 | 20 Oct 2026 | CVSS 6.5 | Google ChromeMemory corruption in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the… | |
| CVE-2026-113027 | 20 Oct 2026 | CVSS 8.8 | Google ChromeMemory corruption in WebFonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the… | |
| CVE-2026-113028 | 20 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-113029 | 20 Oct 2026 | CVSS 8.8 | Google ChromeImproper access control in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the… | |
| CVE-2026-113030 | 20 Oct 2026 | CVSS 8.8 | Google ChromeImproper access control in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy via a crafted… | |
| CVE-2026-113014 | 20 Oct 2026 | CVSS 9.6 | Google ChromeUse after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the… | |
| CVE-2026-113015 | 20 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-113016 | 20 Oct 2026 | CVSS 8.8 | Google ChromeImproper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code… | |
| CVE-2026-113017 | 20 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-113018 | 20 Oct 2026 | CVSS 8.8 | Google ChromeMemory corruption in IME in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox… | |
| CVE-2026-113019 | 20 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-113020 | 20 Oct 2026 | CVSS 9.6 | Google ChromeImproper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the… | |
| CVE-2026-113021 | 20 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-113006 | 20 Oct 2026 | CVSS 8.8 | Google ChromeOut of bounds read in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the… | |
| CVE-2026-113007 | 20 Oct 2026 | CVSS 9.6 | Google ChromeMemory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the… | |
| CVE-2026-113008 | 20 Oct 2026 | CVSS 8.8 | Google ChromeMemory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code… | |
| CVE-2026-113009 | 20 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the… | |
| CVE-2026-113010 | 20 Oct 2026 | CVSS 6.5 | Google ChromeOut of bounds read in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted… | |
| CVE-2026-113011 | 20 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside… | |
| CVE-2026-113012 | 20 Oct 2026 | CVSS 8.8 | Google ChromeImproper input validation in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the… | |
| CVE-2026-113013 | 20 Oct 2026 | CVSS 8.8 | Google ChromeMemory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-112996 | 20 Oct 2026 | CVSS 8.8 | Google ChromeMemory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-112997 | 20 Oct 2026 | CVSS 8.8 | Google ChromeMemory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox… | |
| CVE-2026-112998 | 20 Oct 2026 | CVSS 8.8 | Google ChromeMemory corruption in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-112999 | 20 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-113000 | 20 Oct 2026 | CVSS 8.8 | Google ChromeMemory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-113001 | 20 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-113002 | 20 Oct 2026 | CVSS 6.5 | Google ChromeMemory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the… | |
| CVE-2026-113003 | 20 Oct 2026 | CVSS 8.8 | Google ChromeMemory corruption in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-113004 | 20 Oct 2026 | CVSS 8.8 | Google ChromeMemory corruption in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-113005 | 20 Oct 2026 | CVSS 8.8 | Google ChromeMemory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the… | |
| CVE-2026-112995 | 20 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-112992 | 20 Oct 2026 | CVSS 9.6 | Google ChromeMemory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the… | |
| CVE-2026-112993 | 20 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-112994 | 20 Oct 2026 | CVSS 8.8 | Google ChromeMemory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-105772 | 20 Oct 2026 | CVSS 9.1 | Google ADK TypeScript (@google/adk)Path Traversal (CWE-22) in FileArtifactService in Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0 allows a remote unauthenticated… | |
| CVE-2026-102503 | 19 Oct 2026 | CVSS 9.3 | Google SAMMissing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress server (StartIngressServer in… | |
| CVE-2026-103091 | 19 Oct 2026 | CVSS 9.3 | Google SAMMissing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MCP proxy (HandleStreamPassThrough in… | |
| CVE-2026-110917 | 15 Oct 2026 | CVSS 4.3 | Google ChromeMemory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security… | |
| CVE-2026-110918 | 15 Oct 2026 | CVSS 4.3 | Google ChromeMemory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium… | |
| CVE-2026-110919 | 15 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110920 | 15 Oct 2026 | CVSS 8.8 | Google ChromeMemory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110921 | 15 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110922 | 15 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-110913 | 15 Oct 2026 | CVSS 8.8 | Google ChromeMemory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110914 | 15 Oct 2026 | CVSS 8.8 | Google ChromeMemory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the… | |
| CVE-2026-110915 | 15 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-110916 | 15 Oct 2026 | CVSS 9.6 | Google ChromeImproper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside… | |
| CVE-2026-110170 | 13 Oct 2026 | CVSS 4.3 | Google ChromeUse after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML… | |
| CVE-2026-110171 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110172 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110161 | 13 Oct 2026 | CVSS 9.6 | Google ChromeUse after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted… | |
| CVE-2026-110162 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-110163 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110164 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via… | |
| CVE-2026-110165 | 13 Oct 2026 | CVSS 9.6 | Google ChromeUse after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside… | |
| CVE-2026-110166 | 13 Oct 2026 | CVSS 8.8 | Google ChromeBuffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-110167 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110168 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110169 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110152 | 13 Oct 2026 | CVSS 9.6 | Google ChromeBuffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code… | |
| CVE-2026-110153 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110154 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox… | |
| CVE-2026-110155 | 13 Oct 2026 | CVSS 8.8 | Google ChromeBuffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-110156 | 13 Oct 2026 | CVSS 8.3 | Google ChromeIncorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised the… | |
| CVE-2026-110157 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110158 | 13 Oct 2026 | CVSS 8.3 | Google ChromeUse after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute… | |
| CVE-2026-110159 | 13 Oct 2026 | CVSS 9.6 | Google ChromeIncorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via… | |
| CVE-2026-110160 | 13 Oct 2026 | CVSS 4.2 | Google ChromeMissing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and… | |
| CVE-2026-110143 | 13 Oct 2026 | CVSS 4.3 | Google ChromeUse of uninitialized variable in ThirdParty lmza_sdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory… | |
| CVE-2026-110144 | 13 Oct 2026 | CVSS 8.6 | Google ChromeIncorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code… | |
| CVE-2026-110145 | 13 Oct 2026 | CVSS 8.3 | Google ChromeUse after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute… | |
| CVE-2026-110146 | 13 Oct 2026 | CVSS 6.5 | Google ChromeInformation leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensitive… | |
| CVE-2026-110147 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110148 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110149 | 13 Oct 2026 | CVSS 9.6 | Google ChromeUse after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a… | |
| CVE-2026-110150 | 13 Oct 2026 | CVSS 5.5 | Google ChromePrivilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a… | |
| CVE-2026-110151 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110136 | 13 Oct 2026 | CVSS 9.6 | Google ChromeUse after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted… | |
| CVE-2026-110137 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… |
Page 4 of 10