2,047 known vulnerabilities affecting google products.
Products
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-11248 | Medium | 0.2% | 8.8 | Inappropriate implementation in Google Lens in Google Chrome prior to 149.0.7827… | |
| CVE-2026-87499 | Medium | 0.2% | 8.1 | Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allow… | |
| CVE-2026-87606 | Medium | 0.2% | 8.1 | Missing authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 a… | |
| CVE-2026-11250 | Medium | 0.2% | 9.6 | Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53… | |
| CVE-2026-79152 | Medium | 0.2% | 9.8 | Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 15… | |
| CVE-2026-11170 | Medium | 0.2% | 8.1 | Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 14… | |
| CVE-2026-11672 | Medium | 0.2% | 8.3 | Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.103 … | |
| CVE-2026-17930 | Medium | 0.2% | 7.5 | Insufficient validation of untrusted input in Extensions in Google Chrome prior … | |
| CVE-2026-9914 | Medium | 0.2% | 8.3 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 14… | |
| CVE-2026-11303 | Medium | 0.2% | 8.8 | Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remot… | |
| CVE-2026-17995 | Medium | 0.2% | 8.1 | Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a rem… | |
| CVE-2026-9960 | Medium | 0.2% | 7.5 | Integer overflow in PDFium in Google Chrome prior to 148.0.7778.216 allowed a re… | |
| CVE-2026-10021 | Medium | 0.2% | 8.8 | Insufficient validation of untrusted input in USB in Google Chrome prior to 148.… | |
| CVE-2026-11041 | Medium | 0.2% | 8.8 | Insufficient validation of untrusted input in Media in Google Chrome on Windows … | |
| CVE-2026-11056 | Medium | 0.2% | 9.6 | Insufficient validation of untrusted input in SiteIsolation in Google Chrome on … | |
| CVE-2026-11063 | Medium | 0.2% | 9.6 | Insufficient validation of untrusted input in WebNN in Google Chrome on Windows … | |
| CVE-2026-11071 | Medium | 0.2% | 8.8 | Use after free in Base in Google Chrome on Linux prior to 149.0.7827.53 allowed … | |
| CVE-2026-11080 | Medium | 0.2% | 8.8 | Use after free in WebView in Google Chrome on Android prior to 149.0.7827.53 all… | |
| CVE-2026-11082 | Medium | 0.2% | 9.6 | Race in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote … | |
| CVE-2026-11094 | Medium | 0.2% | 9.6 | Use after free in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allo… | |
| CVE-2026-11114 | Medium | 0.2% | 9.6 | Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 al… | |
| CVE-2026-11119 | Medium | 0.2% | 9.6 | Inappropriate implementation in GPU in Google Chrome on Android prior to 149.0.7… | |
| CVE-2026-11124 | Medium | 0.2% | 8.8 | Integer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remot… | |
| CVE-2026-11131 | Medium | 0.2% | 9.6 | Use after free in Autofill in Google Chrome on Android prior to 149.0.7827.53 al… | |
| CVE-2026-11146 | Medium | 0.2% | 9.6 | Insufficient validation of untrusted input in Chromoting in Google Chrome prior … | |
| CVE-2026-11152 | Medium | 0.2% | 9.6 | Object lifecycle issue in Dawn in Google Chrome prior to 149.0.7827.53 allowed a… | |
| CVE-2026-11163 | Medium | 0.2% | 9.6 | Use after free in Messages in Google Chrome on Android prior to 149.0.7827.53 al… | |
| CVE-2026-11165 | Medium | 0.2% | 9.6 | Use after free in WebMIDI in Google Chrome on iOS prior to 149.0.7827.53 allowed… | |
| CVE-2026-11167 | Medium | 0.2% | 9.6 | Inappropriate implementation in WebView in Google Chrome on Android prior to 149… | |
| CVE-2026-11172 | Medium | 0.2% | 8.8 | Incorrect security UI in Contact Picker in Google Chrome on Android prior to 149… | |
| CVE-2026-11175 | Medium | 0.2% | 8.8 | Incorrect security UI in Messages in Google Chrome on Android prior to 149.0.782… | |
| CVE-2026-11177 | Medium | 0.2% | 8.8 | Use after free in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remo… | |
| CVE-2026-11188 | Medium | 0.2% | 8.8 | Use after free in USB in Google Chrome on Android prior to 149.0.7827.53 allowed… | |
| CVE-2026-11202 | Medium | 0.2% | 8.8 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to … | |
| CVE-2026-11272 | Medium | 0.2% | 8.8 | Insufficient validation of untrusted input in Reading List in Google Chrome on i… | |
| CVE-2026-14541 | Medium | 0.2% | 7.5 | An authentication bypass and audience confusion vulnerability exists in the Goog… | |
| CVE-2026-17716 | Medium | 0.2% | 8.4 | Use after free in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed… | |
| CVE-2026-9874 | Medium | 0.2% | 9.6 | Use after free in Dawn in Google Chrome prior to 148.0.7778.216 allowed a remote… | |
| CVE-2026-9978 | Medium | 0.2% | 8.8 | Use after free in Glic in Google Chrome prior to 148.0.7778.216 allowed a remote… | |
| CVE-2026-9984 | Medium | 0.2% | 8.8 | Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed… | |
| CVE-2026-9992 | Medium | 0.2% | 8.8 | Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a rem… | |
| CVE-2026-11029 | Medium | 0.2% | 9.6 | Insufficient validation of untrusted input in Drag and Drop in Google Chrome on … | |
| CVE-2026-79223 | Medium | 0.2% | 8.8 | Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a r… | |
| CVE-2026-87489 | Medium | 0.2% | 8.8 | Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote… | |
| CVE-2026-9964 | Medium | 0.2% | 8.1 | Use after free in Bluetooth in Google Chrome on Mac prior to 148.0.7778.216 allo… | |
| CVE-2026-11633 | Medium | 0.2% | 8.8 | Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allo… | |
| CVE-2026-11640 | Medium | 0.2% | 8.3 | Integer overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a re… | |
| CVE-2026-11642 | Medium | 0.2% | 8.3 | Use after free in Web Apps in Google Chrome prior to 149.0.7827.103 allowed a re… | |
| CVE-2026-10006 | Medium | 0.2% | 7.5 | Race in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a remote attac… | |
| CVE-2026-11676 | Medium | 0.2% | 8.3 | Insufficient validation of untrusted input in Dawn in Google Chrome on Linux and… |