2,047 known vulnerabilities affecting google products.
Products
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-9988 | Medium | 0.2% | 8.3 | Use after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.216 allow… | |
| CVE-2026-9990 | Medium | 0.2% | 7.5 | Use after free in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.216… | |
| CVE-2026-9998 | Medium | 0.2% | 8.3 | Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remo… | |
| CVE-2026-19143 | Medium | 0.2% | 8.6 | Insufficient validation of untrusted input in WebAPKs in Google Chrome on Androi… | |
| CVE-2026-11656 | Medium | 0.2% | 8.3 | Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed… | |
| CVE-2026-15905 | Medium | 0.2% | 7.8 | Use after free in Aura in Google Chrome prior to 150.0.7871.128 allowed a local … | |
| CVE-2026-87628 | Medium | 0.2% | 8.3 | Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjace… | |
| CVE-2026-34196 | Medium | 0.2% | 7.8 | Software installed and run as a non-privileged user may conduct improper GPU sys… | |
| CVE-2026-17916 | Medium | 0.2% | 7.5 | Insufficient policy enforcement in Settings in Google Chrome prior to 151.0.7922… | |
| CVE-2026-5914 | Medium | 0.2% | 8.8 | Type Confusion in CSS in Google Chrome prior to 147.0.7727.55 allowed an attacke… | |
| CVE-2026-9993 | Medium | 0.2% | 8.3 | Use after free in Views in Google Chrome prior to 148.0.7778.216 allowed a remot… | |
| CVE-2026-0013 | Medium | 0.2% | 8.4 | In setupLayout of PickActivity.java, there is a possible way to start any activi… | |
| CVE-2026-7349 | Medium | 0.2% | 7.5 | Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attac… | |
| CVE-2026-87633 | Medium | 0.2% | 8.6 | Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local … | |
| CVE-2026-17888 | Medium | 0.2% | 7.1 | Insufficient validation of untrusted input in WebUI in Google Chrome prior to 15… | |
| CVE-2026-16422 | Medium | 0.2% | 7.5 | Insufficient validation of untrusted input in Certificate in Google Chrome on Li… | |
| CVE-2026-7338 | Medium | 0.2% | 7.5 | Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attac… | |
| CVE-2026-10022 | Medium | 0.2% | 7.5 | Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacke… | |
| CVE-2026-11677 | Medium | 0.1% | 8.3 | Race in Network in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote… | |
| CVE-2026-11719 | Medium | 0.1% | 8.1 | An authenticated authorization bypass vulnerability exists in MCP Toolbox for Da… | |
| CVE-2026-45196 | Medium | 0.1% | 7.8 | Kernel software installed and running inside a Host VM may post improper command… | |
| CVE-2026-16416 | Medium | 0.1% | 9.3 | Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.182 allowed … | |
| CVE-2026-87530 | Medium | 0.1% | 8.1 | Uncontrolled search path element in CredentialProvider in Google Chrome on on Wi… | |
| CVE-2026-28659 | Medium | 0.1% | 7.8 | In MicroXR Blobstore, there is a possible way to access other app's files due to… | |
| CVE-2026-0011 | Medium | 0.1% | 8.4 | In enableSystemPackageLPw of Settings.java, there is a possible way to prevent l… | |
| CVE-2026-16414 | Medium | 0.1% | 7.8 | Insufficient validation of untrusted input in Chromecast in Google Chrome prior … | |
| CVE-2026-87578 | Medium | 0.1% | 8.3 | Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an ad… | |
| CVE-2026-19139 | Medium | 0.1% | 7.4 | Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 a… | |
| CVE-2026-45203 | Medium | 0.1% | 7.8 | Kernel software installed and running inside a Host VM may post improper command… | |
| CVE-2026-0072 | Medium | 0.1% | 7.8 | In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerSe… | |
| CVE-2026-28662 | Medium | 0.1% | 8.0 | In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of b… | |
| CVE-2026-87514 | Medium | 0.1% | 8.1 | Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local … | |
| CVE-2026-0097 | Medium | 0.1% | 8.0 | In multiple locations, there is a possible way to bypass user interaction when p… | |
| CVE-2026-0010 | Medium | 0.1% | 8.4 | In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write… | |
| CVE-2026-78915 | Medium | 0.1% | 7.5 | Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.… | |
| CVE-2026-0059 | Medium | 0.1% | 8.0 | In multiple functions of sdp_discovery.cc, there is a possible way to achieve co… | |
| CVE-2026-11241 | Medium | 0.1% | 8.0 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 149… | |
| CVE-2026-17862 | Medium | 0.1% | 7.8 | Use after free in Tracing in Google Chrome on Windows prior to 151.0.7922.72 all… | |
| CVE-2026-49743 | Medium | 0.1% | 7.8 | Software installed and run as a non-privileged user may conduct improper GPU sys… | |
| CVE-2026-49744 | Medium | 0.1% | 7.8 | Kernel software installed and running inside a Guest VM may post improper comman… | |
| CVE-2026-49745 | Medium | 0.1% | 7.8 | Kernel software installed and running inside a Guest VM may post improper comman… | |
| CVE-2026-87533 | Medium | 0.1% | 8.1 | Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a loc… | |
| CVE-2026-0095 | Medium | 0.1% | 8.0 | In l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlle… | |
| CVE-2026-11072 | Medium | 0.1% | 7.8 | Use after free in WebView in Google Chrome on Android prior to 149.0.7827.53 all… | |
| CVE-2026-17863 | Medium | 0.1% | 7.8 | Inappropriate implementation in Browser in Google Chrome on Windows prior to 151… | |
| CVE-2026-17861 | Medium | 0.1% | 7.8 | Insufficient validation of untrusted input in Updater in Google Chrome prior to … | |
| CVE-2026-87509 | Medium | 0.1% | 8.1 | Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0… | |
| CVE-2026-17877 | Medium | 0.1% | 8.4 | Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 15… | |
| CVE-2026-79245 | Medium | 0.1% | 7.7 | Use after free in UI in Google Chrome prior to 152.0.7977.65 allowed a local att… | |
| CVE-2026-11269 | Medium | 0.1% | 7.1 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.… |