[ Vendor · 935 CVEs ]
CVEs affecting Google published in the last 30 days, plus any Google CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-106234 | 6 Oct 2026 | CVSS 9.6 | Google ChromeUse after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute… | |
| CVE-2026-106235 | 6 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-106236 | 6 Oct 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to… | |
| CVE-2026-106237 | 6 Oct 2026 | CVSS 9.6 | Google ChromeInformation leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTML page… | |
| CVE-2026-106238 | 6 Oct 2026 | CVSS 8.3 | Google ChromeRace condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially… | |
| CVE-2026-106239 | 6 Oct 2026 | CVSS 9.6 | Google ChromeInteger overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code… | |
| CVE-2026-106240 | 6 Oct 2026 | CVSS 8.8 | Google ChromeType confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-106223 | 6 Oct 2026 | CVSS 4.7 | Google ChromeUninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via… | |
| CVE-2026-106224 | 6 Oct 2026 | CVSS 3.1 | Google ChromeMissing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-106225 | 6 Oct 2026 | CVSS 8.8 | Google ChromeMissing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive… | |
| CVE-2026-106226 | 6 Oct 2026 | CVSS 4.2 | Google ChromeImproper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process… | |
| CVE-2026-106227 | 6 Oct 2026 | CVSS 9.6 | Google ChromeUse after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted… | |
| CVE-2026-106228 | 6 Oct 2026 | CVSS 8.3 | Google ChromeConfused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-106229 | 6 Oct 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system… | |
| CVE-2026-106230 | 6 Oct 2026 | CVSS 5.3 | Google ChromeIncorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the… | |
| CVE-2026-106231 | 6 Oct 2026 | CVSS 4.7 | Google ChromeUninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a… | |
| CVE-2026-106215 | 6 Oct 2026 | CVSS 4.7 | Google ChromeUninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox… | |
| CVE-2026-106216 | 6 Oct 2026 | CVSS 5.4 | Google ChromeCross-site request forgery in ReadingList in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social… | |
| CVE-2026-106217 | 6 Oct 2026 | CVSS 4.3 | Google ChromeMissing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-106220 | 6 Oct 2026 | CVSS 8.8 | Google ChromeInformation leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML… | |
| CVE-2026-106221 | 6 Oct 2026 | CVSS 8.3 | Google ChromeConfused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass… | |
| CVE-2026-106222 | 6 Oct 2026 | CVSS 5.9 | Google ChromeIncorrect authorization in Sync in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network… | |
| CVE-2026-106207 | 6 Oct 2026 | CVSS 8.8 | Google ChromeRace condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-106208 | 6 Oct 2026 | CVSS 6.1 | Google ChromeMissing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive… | |
| CVE-2026-106209 | 6 Oct 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof… | |
| CVE-2026-106210 | 6 Oct 2026 | CVSS 3.1 | Google ChromeObservable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome… | |
| CVE-2026-106211 | 6 Oct 2026 | CVSS 9.6 | Google ChromeUse after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute… | |
| CVE-2026-106212 | 6 Oct 2026 | CVSS 8.8 | Google ChromeIncorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain… | |
| CVE-2026-106213 | 6 Oct 2026 | CVSS 4.3 | Google ChromeRace condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML… | |
| CVE-2026-106214 | 6 Oct 2026 | CVSS 5.3 | Google ChromeInformation leak in Proxy in Google Chrome on on Windows prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via… | |
| CVE-2026-106198 | 6 Oct 2026 | CVSS 8.2 | Google ChromeMissing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-106199 | 6 Oct 2026 | CVSS 8.2 | Google ChromeIncorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer… | |
| CVE-2026-106200 | 6 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-106201 | 6 Oct 2026 | CVSS 8.8 | Google ChromeRace condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-106202 | 6 Oct 2026 | CVSS 4.7 | Google ChromeUninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox… | |
| CVE-2026-106203 | 6 Oct 2026 | CVSS 8.8 | Google ChromeIncomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain… | |
| CVE-2026-106204 | 6 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-106205 | 6 Oct 2026 | CVSS 8.1 | Google ChromeMissing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer… | |
| CVE-2026-106206 | 6 Oct 2026 | CVSS 5.9 | Google ChromeImproper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via… | |
| CVE-2026-106190 | 6 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-106191 | 6 Oct 2026 | CVSS 8.3 | Google ChromeMissing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-106192 | 6 Oct 2026 | CVSS 4.6 | Google ChromeInformation leak in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical… | |
| CVE-2026-106193 | 6 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-106194 | 6 Oct 2026 | CVSS 8.3 | Google ChromeMissing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process… | |
| CVE-2026-106195 | 6 Oct 2026 | CVSS 9.1 | Google ChromeIncorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access… | |
| CVE-2026-106196 | 6 Oct 2026 | CVSS 7.6 | Google ChromeMissing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a… | |
| CVE-2026-106197 | 6 Oct 2026 | CVSS 9.6 | Google ChromeUse after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a… | |
| CVE-2026-106181 | 6 Oct 2026 | CVSS 5.3 | Google ChromeIncorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process… | |
| CVE-2026-106182 | 6 Oct 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page… | |
| CVE-2026-106183 | 6 Oct 2026 | CVSS 5.9 | Google ChromeMissing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information… | |
| CVE-2026-106184 | 6 Oct 2026 | CVSS 4.3 | Google ChromeUninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML… | |
| CVE-2026-106185 | 6 Oct 2026 | CVSS 6.5 | Google ChromeImproper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass… | |
| CVE-2026-106186 | 6 Oct 2026 | CVSS 8.6 | Google ChromeUncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially… | |
| CVE-2026-106187 | 6 Oct 2026 | CVSS 4.2 | Google ChromeMissing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-106188 | 6 Oct 2026 | CVSS 7.1 | Google ChromeConfused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a… | |
| CVE-2026-106189 | 6 Oct 2026 | CVSS 7.3 | Google ChromeCode injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web… | |
| CVE-2026-106179 | 6 Oct 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML… | |
| CVE-2026-106180 | 6 Oct 2026 | CVSS 3.1 | Google ChromeObservable discrepancy in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially obtain cross-origin data via a… | |
| CVE-2026-102322 | 6 Oct 2026 | CVSS 9.6 | Google ChromeIncorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a crafted… | |
| CVE-2026-0198 | 6 Oct 2026 | CVSS 4.4 | Google AndroidIn is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information… | Fix |
| CVE-2026-58859 | 5 Oct 2026 | CVSS 7.8 | Google AndroidIn multiple places, there is a possible denial of service due to an uncaught exception. This could lead to local escalation of privilege with no… | Fix |
| CVE-2026-58865 | 5 Oct 2026 | CVSS 7.5 | Google AndroidIn multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote… | Fix |
| CVE-2026-58880 | 5 Oct 2026 | CVSS 7.0 | Google AndroidIn handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition. This could lead to local… | Fix |
| CVE-2026-55270 | 5 Oct 2026 | CVSS 7.8 | Google AndroidIn dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of… | Fix |
| CVE-2026-55280 | 5 Oct 2026 | CVSS 8.8 | Google AndroidIn multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no… | Fix |
| CVE-2026-55286 | 5 Oct 2026 | CVSS 7.8 | Google AndroidIn stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation… | Fix |
| CVE-2026-58815 | 5 Oct 2026 | CVSS 7.8 | Google AndroidIn multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege… | Fix |
| CVE-2026-58834 | 5 Oct 2026 | CVSS 5.5 | Google AndroidIn setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validation… | Fix |
| CVE-2026-58835 | 5 Oct 2026 | CVSS 8.8 | Google AndroidIn cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with… | Fix |
| CVE-2026-58841 | 5 Oct 2026 | CVSS 7.8 | Google AndroidIn multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code. This could lead to… | Fix |
| CVE-2026-58854 | 5 Oct 2026 | CVSS 7.8 | Google AndroidIn multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no… | Fix |
| CVE-2026-58856 | 5 Oct 2026 | CVSS 3.3 | Google AndroidIn returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could… | Fix |
| CVE-2026-55265 | 5 Oct 2026 | CVSS 6.5 | Google AndroidIn multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check. This could lead to a remote denial of… | |
| CVE-2026-55266 | 5 Oct 2026 | CVSS 7.8 | Google AndroidIn qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write due to resource exhaustion. This could lead to local escalation of… | |
| CVE-2026-55269 | 5 Oct 2026 | CVSS 7.8 | Google AndroidIn FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local… | |
| CVE-2026-49937 | 5 Oct 2026 | CVSS 7.8 | Google AndroidIn multiple functions of MessageQueueBase.h, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local… | |
| CVE-2026-28641 | 5 Oct 2026 | CVSS 7.8 | Google AndroidIn shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic error in… | |
| CVE-2026-28647 | 5 Oct 2026 | CVSS 7.8 | Google AndroidIn updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead… | |
| CVE-2026-28648 | 5 Oct 2026 | CVSS 7.8 | Google AndroidIn Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional… | |
| CVE-2026-28667 | 5 Oct 2026 | CVSS 5.5 | Google AndroidIn multiple functions of rw_t5t.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information… | |
| CVE-2026-45524 | 5 Oct 2026 | CVSS 8.8 | Google AndroidIn isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This could lead to local escalation of… | |
| CVE-2026-49878 | 5 Oct 2026 | CVSS 7.2 | Google AndroidIn wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to… | |
| CVE-2026-49880 | 5 Oct 2026 | CVSS 7.8 | Google AndroidIn multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation… | |
| CVE-2026-49885 | 5 Oct 2026 | CVSS 7.8 | Google AndroidIn rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of… | |
| CVE-2026-49933 | 5 Oct 2026 | CVSS 7.8 | Google AndroidIn handle_le_monitor_device_event of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized… | |
| CVE-2026-28625 | 5 Oct 2026 | CVSS 7.8 | Google AndroidIn multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with… | |
| CVE-2026-28640 | 5 Oct 2026 | CVSS 7.8 | Google AndroidIn checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input… | |
| CVE-2026-103629 | 2 Oct 2026 | CVSS 4.3 | Google ChromeInteger overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page… | |
| CVE-2026-103630 | 2 Oct 2026 | CVSS 9.6 | Google ChromeUse after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted… | |
| CVE-2026-103631 | 2 Oct 2026 | CVSS 8.8 | Google ChromeBuffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-103621 | 2 Oct 2026 | CVSS 4.3 | Google ChromeInteger overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page… | |
| CVE-2026-103622 | 2 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-103623 | 2 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-103624 | 2 Oct 2026 | CVSS 8.3 | Google ChromeUse after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the renderer… | |
| CVE-2026-103625 | 2 Oct 2026 | CVSS 8.8 | Google ChromeType confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-103626 | 2 Oct 2026 | CVSS 9.6 | Google ChromeIncorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering… | |
| CVE-2026-103627 | 2 Oct 2026 | CVSS 6.5 | Google ChromeInformation leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to obtain sensitive information via a crafted HTML page… | |
| CVE-2026-103628 | 2 Oct 2026 | CVSS 9.6 | Google ChromeOut of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a… | |
| CVE-2026-102327 | 29 Sep 2026 | CVSS 7.5 | Google ChromeIncorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer… | |
| CVE-2026-102328 | 29 Sep 2026 | CVSS 8.8 | Google ChromeType confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… |
Page 7 of 10