[ Vendor · 935 CVEs ]
CVEs affecting Google published in the last 30 days, plus any Google CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-110138 | 13 Oct 2026 | CVSS 8.3 | Google ChromeUse after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-110139 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110140 | 13 Oct 2026 | CVSS 8.8 | Google ChromeType confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110141 | 13 Oct 2026 | CVSS 3.1 | Google ChromeObservable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page… | |
| CVE-2026-110142 | 13 Oct 2026 | CVSS 9.6 | Google ChromeUse after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a… | |
| CVE-2026-102554 | 9 Oct 2026 | CVSS 8.2 | Google GuavaAllocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows… | |
| CVE-2026-95702 | 9 Oct 2026 | CVSS 8.5 | Google gVisorUse-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container… | |
| CVE-2026-56936 | 6 Oct 2026 | CVSS 6.8 | Google AndroidIn wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to physical… | Fix |
| CVE-2026-56952 | 6 Oct 2026 | CVSS 6.7 | Google AndroidIn platform_msg_handler_init of default_msg_handlers.c, there is a possible permission bypass due to a missing permission check. This could lead to… | Fix |
| CVE-2026-55307 | 6 Oct 2026 | CVSS 4.4 | Google AndroidIn kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local… | Fix |
| CVE-2026-55330 | 6 Oct 2026 | CVSS 9.8 | Google AndroidIn BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to… | Fix |
| CVE-2026-56906 | 6 Oct 2026 | CVSS 7.0 | Google AndroidIn ep_free of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no… | Fix |
| CVE-2026-106422 | 6 Oct 2026 | CVSS 4.3 | Google ChromeIncorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page… | |
| CVE-2026-106423 | 6 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-106424 | 6 Oct 2026 | CVSS 4.0 | Google ChromeInformation leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory… | |
| CVE-2026-106425 | 6 Oct 2026 | CVSS 4.2 | Google ChromeMissing authorization in BrowserTag in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and… | |
| CVE-2026-106426 | 6 Oct 2026 | CVSS 8.3 | Google ChromeRace condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox… | |
| CVE-2026-106427 | 6 Oct 2026 | CVSS 5.4 | Google ChromeConfused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a… | |
| CVE-2026-106414 | 6 Oct 2026 | CVSS 9.6 | Google ChromeImproper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to… | |
| CVE-2026-106415 | 6 Oct 2026 | CVSS 4.3 | Google ChromeInformation leak in Enterprise in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML… | |
| CVE-2026-106416 | 6 Oct 2026 | CVSS 5.4 | Google ChromeCode injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via… | |
| CVE-2026-106417 | 6 Oct 2026 | CVSS 9.6 | Google ChromeInteger overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox… | |
| CVE-2026-106418 | 6 Oct 2026 | CVSS 6.5 | Google ChromeMissing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin… | |
| CVE-2026-106419 | 6 Oct 2026 | CVSS 9.6 | Google ChromeUse after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox… | |
| CVE-2026-106420 | 6 Oct 2026 | CVSS 5.4 | Google ChromeIncorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof… | |
| CVE-2026-106421 | 6 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-106405 | 6 Oct 2026 | CVSS 6.0 | Google ChromeRace condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass web origin policy via a… | |
| CVE-2026-106406 | 6 Oct 2026 | CVSS 5.4 | Google ChromeMissing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI… | |
| CVE-2026-106407 | 6 Oct 2026 | CVSS 6.5 | Google ChromeIncorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-106408 | 6 Oct 2026 | CVSS 6.5 | Google ChromeProtection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a… | |
| CVE-2026-106409 | 6 Oct 2026 | CVSS 8.3 | Google ChromeIncorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the… | |
| CVE-2026-106410 | 6 Oct 2026 | CVSS 4.2 | Google ChromeMissing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-106411 | 6 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-106412 | 6 Oct 2026 | CVSS 8.3 | Google ChromeRace condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and… | |
| CVE-2026-106413 | 6 Oct 2026 | CVSS 4.2 | Google ChromeRace condition in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI… | |
| CVE-2026-106396 | 6 Oct 2026 | CVSS 5.4 | Google ChromeImproper input validation in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to… | |
| CVE-2026-106397 | 6 Oct 2026 | CVSS 6.1 | Google ChromeIncorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass… | |
| CVE-2026-106398 | 6 Oct 2026 | CVSS 4.3 | Google ChromeIncorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page… | |
| CVE-2026-106399 | 6 Oct 2026 | CVSS 3.3 | Google ChromeOut of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially read memory… | |
| CVE-2026-106400 | 6 Oct 2026 | CVSS 5.4 | Google ChromeClickjacking in Messages in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI… | |
| CVE-2026-106401 | 6 Oct 2026 | CVSS 9.6 | Google ChromeOut of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the… | |
| CVE-2026-106402 | 6 Oct 2026 | CVSS 4.8 | Google ChromeIncorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI… | |
| CVE-2026-106403 | 6 Oct 2026 | CVSS 8.1 | Google ChromeIncorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process… | |
| CVE-2026-106404 | 6 Oct 2026 | CVSS 6.5 | Google ChromeIncorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-106388 | 6 Oct 2026 | CVSS 5.3 | Google ChromeMissing authorization in DataTransfer in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-106389 | 6 Oct 2026 | CVSS 6.5 | Google ChromeIncorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system… | |
| CVE-2026-106390 | 6 Oct 2026 | CVSS 4.3 | Google ChromeIncorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive… | |
| CVE-2026-106391 | 6 Oct 2026 | CVSS 4.2 | Google ChromeIncorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer… | |
| CVE-2026-106392 | 6 Oct 2026 | CVSS 4.3 | Google ChromeInformation leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted… | |
| CVE-2026-106393 | 6 Oct 2026 | CVSS 8.3 | Google ChromeUse after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute… | |
| CVE-2026-106394 | 6 Oct 2026 | CVSS 4.3 | Google ChromeIncomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data… | |
| CVE-2026-106395 | 6 Oct 2026 | CVSS 4.7 | Google ChromeUninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via… | |
| CVE-2026-106379 | 6 Oct 2026 | CVSS 4.3 | Google ChromeUninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page… | |
| CVE-2026-106380 | 6 Oct 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a… | |
| CVE-2026-106381 | 6 Oct 2026 | CVSS 6.5 | Google ChromeIncorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a… | |
| CVE-2026-106382 | 6 Oct 2026 | CVSS 9.6 | Google ChromeUse after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a… | |
| CVE-2026-106383 | 6 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-106384 | 6 Oct 2026 | CVSS 6.5 | Google ChromeMissing authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-106385 | 6 Oct 2026 | CVSS 5.3 | Google ChromeRace condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially bypass… | |
| CVE-2026-106386 | 6 Oct 2026 | CVSS 6.5 | Google ChromeUninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted… | |
| CVE-2026-106387 | 6 Oct 2026 | CVSS 8.8 | Google ChromeMissing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain… | |
| CVE-2026-106370 | 6 Oct 2026 | CVSS 4.7 | Google ChromeUninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer… | |
| CVE-2026-106371 | 6 Oct 2026 | CVSS 8.8 | Google ChromeIncorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive… | |
| CVE-2026-106372 | 6 Oct 2026 | CVSS 9.6 | Google ChromeIncorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the… | |
| CVE-2026-106373 | 6 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox… | |
| CVE-2026-106374 | 6 Oct 2026 | CVSS 8.8 | Google ChromeType confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-106375 | 6 Oct 2026 | CVSS 9.6 | Google ChromeIncomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the… | |
| CVE-2026-106376 | 6 Oct 2026 | CVSS 4.7 | Google ChromeUninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox… | |
| CVE-2026-106377 | 6 Oct 2026 | CVSS 8.3 | Google ChromeRace condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute… | |
| CVE-2026-106378 | 6 Oct 2026 | CVSS 8.3 | Google ChromePrivilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process… | |
| CVE-2026-106361 | 6 Oct 2026 | CVSS 6.5 | Google ChromeIncorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging… | |
| CVE-2026-106362 | 6 Oct 2026 | CVSS 6.5 | Google ChromeMissing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web… | |
| CVE-2026-106363 | 6 Oct 2026 | CVSS 8.3 | Google ChromeMissing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and… | |
| CVE-2026-106364 | 6 Oct 2026 | CVSS 5.3 | Google ChromeIncorrect authorization in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-106365 | 6 Oct 2026 | CVSS 6.5 | Google ChromeMissing authorization in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML… | |
| CVE-2026-106366 | 6 Oct 2026 | CVSS 5.4 | Google ChromeIncomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a… | |
| CVE-2026-106367 | 6 Oct 2026 | CVSS 8.4 | Google ChromeMissing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to… | |
| CVE-2026-106368 | 6 Oct 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML… | |
| CVE-2026-106369 | 6 Oct 2026 | CVSS 4.2 | Google ChromeMissing authorization in Translate in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-106352 | 6 Oct 2026 | CVSS 8.8 | Google ChromeIncorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain… | |
| CVE-2026-106353 | 6 Oct 2026 | CVSS 6.5 | Google ChromeImproper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to… | |
| CVE-2026-106354 | 6 Oct 2026 | CVSS 4.3 | Google ChromeImproper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted… | |
| CVE-2026-106355 | 6 Oct 2026 | CVSS 5.3 | Google ChromeMissing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer… | |
| CVE-2026-106356 | 6 Oct 2026 | CVSS 5.4 | Google ChromeClickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a… | |
| CVE-2026-106357 | 6 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-106358 | 6 Oct 2026 | CVSS 9.6 | Google ChromeUse after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a… | |
| CVE-2026-106359 | 6 Oct 2026 | CVSS 4.3 | Google ChromeConfused deputy in DeviceBoundSessionCredentials in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a… | |
| CVE-2026-106360 | 6 Oct 2026 | CVSS 4.3 | Google ChromeInformation leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page… | |
| CVE-2026-106345 | 6 Oct 2026 | CVSS 4.2 | Google ChromeUse of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-106346 | 6 Oct 2026 | CVSS 8.8 | Google ChromeImproper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside… | |
| CVE-2026-106347 | 6 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-106348 | 6 Oct 2026 | CVSS 6.5 | Google ChromeInformation leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML… | |
| CVE-2026-106349 | 6 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-106350 | 6 Oct 2026 | CVSS 8.8 | Google ChromeIncorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted… | |
| CVE-2026-106351 | 6 Oct 2026 | CVSS 5.3 | Google ChromeObservable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer… | |
| CVE-2026-106336 | 6 Oct 2026 | CVSS 4.3 | Google ChromeObservable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page… | |
| CVE-2026-106337 | 6 Oct 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML… | |
| CVE-2026-106338 | 6 Oct 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a… | |
| CVE-2026-106339 | 6 Oct 2026 | CVSS 3.1 | Google ChromeUse of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-106340 | 6 Oct 2026 | CVSS 4.6 | Google ChromeMissing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitive… |
Page 5 of 10