Google - vulnerabilities (CVEs)
16602 CVEs in 332 products, 896 in the last 30 days, newest from 2026-10-28.
Products
- Android - 8374 CVEs
- Chrome - 7377 CVEs
- Tensorflow - 431 CVEs
- Chrome Os - 67 CVEs
- Pixel - 53 CVEs
- V8 - 36 CVEs
- Asylo - 16 CVEs
- Blink - 12 CVEs
- Chromeos - 12 CVEs
- Mcp Toolbox For Databases - 11 CVEs
- Picasa - 11 CVEs
- Mini Search Appliance - 8 CVEs
- Cr-48 Chromebook - 7 CVEs
- Gvisor - 7 CVEs
- Search Appliance - 7 CVEs
- Sketchup - 7 CVEs
- Tunnelblick - 7 CVEs
- Android Kernel - 6 CVEs
- Angularjs - 6 CVEs
- Chromecast Firmware - 6 CVEs
- Grpc - 6 CVEs
- Mcp Toolbox For Databases Googleapismcp-toolbox - 6 CVEs
- Nest Cam Iq Indoor Firmware - 6 CVEs
- Fuchsia - 5 CVEs
- Mcp-toolbox - 5 CVEs
- Protobuf - 5 CVEs
- Protobuf-java - 5 CVEs
- Rendertron - 5 CVEs
- Toolbar - 5 CVEs
- Web Toolkit - 5 CVEs
- App Engine Python Sdk - 4 CVEs
- Earth - 4 CVEs
- Fscrypt - 4 CVEs
- Gerrit - 4 CVEs
- Keras - 4 CVEs
- Nest Wifi Point Firmware - 4 CVEs
- Nest Wifi Pro Firmware - 4 CVEs
- Protobuf-javalite - 4 CVEs
- Admob - 3 CVEs
- Android Sdk - 3 CVEs
- Google-protobuf - 3 CVEs
- Guava - 3 CVEs
- Guest-oslogin - 3 CVEs
- Linux And Chrome Os - 3 CVEs
- Monorail - 3 CVEs
- Nearby - 3 CVEs
- Nest Wifi Router Firmware - 3 CVEs
- Osv-scalibr - 3 CVEs
- Protobuf-kotlin - 3 CVEs
- Sam - 3 CVEs
- Web Designer - 3 CVEs
- Andrioid - 2 CVEs
- Android Debug Bridge - 2 CVEs
- Android Xr - 2 CVEs
- Bazel - 2 CVEs
- Bionic - 2 CVEs
- Brotli - 2 CVEs
- Chrome-devtools-mcp - 2 CVEs
- Desktop - 2 CVEs
- Firebase Php-jwt - 2 CVEs
- Flatbuffers - 2 CVEs
- Go-attestation - 2 CVEs
- Google Play Services Software Development Kit - 2 CVEs
- Google Sketchup - 2 CVEs
- Home Firmware - 2 CVEs
- Kubernetes Engine - 2 CVEs
- Libjxl - 2 CVEs
- Mod Pagespeed - 2 CVEs
- Nest Mini Firmware - 2 CVEs
- Nest Wifi Pro - 2 CVEs
- Oauth Client Library For Java - 2 CVEs
- Omaha - 2 CVEs
- Pixel Watch - 2 CVEs
- Protobuf-kotlin-lite - 2 CVEs
- Protobuf-python - 2 CVEs
- Protocolbuffers - 2 CVEs
- Site Kit By Google - 2 CVEs
- Talk - 2 CVEs
- Tink Java - 2 CVEs
- Updater - 2 CVEs
- Web Stories - 2 CVEs
- Zx - 2 CVEs
- A2ui/web Core - 1 CVEs
- A2uiweb Core - 1 CVEs
- Adk Typescript Googleadk - 1 CVEs
- Agent Development Kit Adk For Java - 1 CVEs
- Agent Development Kit Adk For Python - 1 CVEs
- Android Api - 1 CVEs
- Android Browser - 1 CVEs
- Android Google Search App - 1 CVEs
- Android One - 1 CVEs
- Android Sdk Platform Tools - 1 CVEs
- Android Wear - 1 CVEs
- Androidx.car.app - 1 CVEs
- Angle - 1 CVEs
- Api C++ Client - 1 CVEs
- Api Search - 1 CVEs
- Application Integration - 1 CVEs
- Application Load Balancer - 1 CVEs
- Authenticator - 1 CVEs
- Bazel For Android Studio - 1 CVEs
- Bazel For Clion - 1 CVEs
- Bazel For Intellij - 1 CVEs
- Bindiff - 1 CVEs
- Boringssl - 1 CVEs
- Cardboard - 1 CVEs
- Cel-go - 1 CVEs
- Checkout-php - 1 CVEs
- Chrome-launcher - 1 CVEs
- Chrome Frame - 1 CVEs
- Chrome On 64-bit Platforms - 1 CVEs
- Chrome Os Readiness Tool - 1 CVEs
- Chromecast - 1 CVEs
- Cityhash - 1 CVEs
- Clasp - 1 CVEs
- Closure-library - 1 CVEs
- Closure Library - 1 CVEs
- Cloud Build - 1 CVEs
- Cloud Firestore - 1 CVEs
- Cloud Iot Device Sdk For Embedded C - 1 CVEs
- Cloud Looker - 1 CVEs
- Cloud Messaging Notification - 1 CVEs
- Common Expression Language - 1 CVEs
- Critters - 1 CVEs
- Custom Search Engine - 1 CVEs
- Dart Sdk - 1 CVEs
- Data Transfer Project - 1 CVEs
- Drive - 1 CVEs
- Ds Allvideo.downloader.browser Application For Android - 1 CVEs
- Earth Pro - 1 CVEs
- Email - 1 CVEs
- Espv2 - 1 CVEs
- Exposure Notification Verification Server - 1 CVEs
- Exposure Notifications - 1 CVEs
- Exposure Notifications Verification Server - 1 CVEs
- Extensible Service Proxy - 1 CVEs
- Firebase/util - 1 CVEs
- Firebase Command Line Interface - 1 CVEs
- Firebase Javascript Sdk - 1 CVEs
- Fuse-archive - 1 CVEs
- Gears - 1 CVEs
- Gemini - 1 CVEs
- Gemini-cli - 1 CVEs
- Gizmo5 - 1 CVEs
- Glass - 1 CVEs
- Gmail - 1 CVEs
- Go-tpm - 1 CVEs
- Google-adk - 1 CVEs
- Google-protobuf Jruby Gem - 1 CVEs
- Google/apple Exposure Notifications - 1 CVEs
- Google Apps - 1 CVEs
- Google Cloud Platform Service Broker - 1 CVEs
- Google Devices - 1 CVEs
- Google Drive - 1 CVEs
- Google I/o 2017 - 1 CVEs
- Google Nest Mini - 1 CVEs
- Google Search - 1 CVEs
- Google Wifi Next Gen - 1 CVEs
- Gson - 1 CVEs
- Home Mini Firmware - 1 CVEs
- Httpsgithub.comgooglenftables - 1 CVEs
- Idapython - 1 CVEs
- Kctf - 1 CVEs
- Kml - 1 CVEs
- Langfun - 1 CVEs
- Libvpx - 1 CVEs
- Libwebp - 1 CVEs
- Looker - 1 CVEs
- Matter - 1 CVEs
- Mcp-toolbox-sdk-python - 1 CVEs
- Mesop - 1 CVEs
- Migrate To Containers - 1 CVEs
- Native Client - 1 CVEs
- Nest - 1 CVEs
- Nest Audio Firmware - 1 CVEs
- Nest Cam (indoor, Wired) Firmware - 1 CVEs
- Nest Cam (outdoor Or Indoor, Battery) Firmware - 1 CVEs
- Nest Cam Battery Firmware - 1 CVEs
- Nest Cam Floodlight Firmware - 1 CVEs
- Nest Cam Indoor Firmware - 1 CVEs
- Nest Cam With Floodlight Firmware - 1 CVEs
- Nest Doorbell (battery) Firmware - 1 CVEs
- Nest Doorbell Battery Firmware - 1 CVEs
- Nest Hub - 1 CVEs
- Nest Hub 2nd. Gen W Sleep Tracking - 1 CVEs
- Nest Hub Firmware - 1 CVEs
- Nest Hub Max - 1 CVEs
- Nest Hub Max Firmware - 1 CVEs
- Nest Speakers - 1 CVEs
- Nest Wifi 6e - 1 CVEs
- Nest Wifi 6e Firmware - 1 CVEs
- Nest Wifi Point - 1 CVEs
- News And Weather - 1 CVEs
- Nexus 5x Firmware - 1 CVEs
- Nexus 6p Firmware - 1 CVEs
- Nexus 7 Firmware - 1 CVEs
- Nexus 9 Firmware - 1 CVEs
- Nftables - 1 CVEs
- Nodejs-firestore - 1 CVEs
- Openthread - 1 CVEs
- Perfetto - 1 CVEs
- Pixel 6 - 1 CVEs
- Pixel Watch Firmware - 1 CVEs
- Play Services Sdk - 1 CVEs
- Protobuf-cpp - 1 CVEs
- Protobuf-javascript Aka Google-protobuf Npm Package - 1 CVEs
- Protobuf-kotllin-lite - 1 CVEs
- Protocol Buffers - 1 CVEs
- Quick Share - 1 CVEs
- Reverb - 1 CVEs
- Run-gemini-cli - 1 CVEs
- Sa360 Webquery To Bigquery Exporter - 1 CVEs
- Safearchive - 1 CVEs
- Santa - 1 CVEs
- Search Appliance Software - 1 CVEs
- Secret Manager Provider For Secret Store Csi Driver - 1 CVEs
- Security Operations Soar - 1 CVEs
- Sentencepiece - 1 CVEs
- Sfntly - 1 CVEs
- Site Kit - 1 CVEs
- Skia - 1 CVEs
- Slashify - 1 CVEs
- Slo Generator - 1 CVEs
- Snappy - 1 CVEs
- Tensorflow Serving - 1 CVEs
- Tink - 1 CVEs
- Tink-android - 1 CVEs
- Tink-java - 1 CVEs
- Tink C++ - 1 CVEs
- Tink Go - 1 CVEs
- Tink Legacy - 1 CVEs
- Titan Security Key - 1 CVEs
- Turbinia - 1 CVEs
- Vertex Gemini Api - 1 CVEs
- Voice Builder - 1 CVEs
- Wearos - 1 CVEs
- Web Designer App - 1 CVEs
- Web Stories For Wordpress - 1 CVEs
- Wifi - 1 CVEs
- Wifi Firmware - 1 CVEs
- Wifi Pro - 1 CVEs
- Woff2 - 1 CVEs
- Youtube Android Player Api - 1 CVEs
- Youtube Android Player Api Sdk - 1 CVEs
- Admin - 0 CVEs
- Android Sdk Tools - 0 CVEs
- Android Tv - 0 CVEs
- Apps Migration For Microsoft Exchange - 0 CVEs
- Calendar - 0 CVEs
- Centipede - 0 CVEs
- Chromecast Ga00439 - 0 CVEs
- Chromecast Ga3a00403a14 - 0 CVEs
- Chromecast H2g2-42 - 0 CVEs
- Chromecast Nc2-645b - 0 CVEs
- Chromecast Nc2-6a5 - 0 CVEs
- Chromecast Nc2-6a5-d - 0 CVEs
- Chromecast Rux-j42 - 0 CVEs
- Cloud Platform - 0 CVEs
- Container-optimized Os - 0 CVEs
- Earth Plug-in - 0 CVEs
- Firebase Cloud Messaging - 0 CVEs
- Frame - 0 CVEs
- Google Chart Server - 0 CVEs
- Google Chat - 0 CVEs
- Google Classroom - 0 CVEs
- Google Cloud Platform Marketplace - 0 CVEs
- Google Docs - 0 CVEs
- Google Meet - 0 CVEs
- Google Sites - 0 CVEs
- Google Test - 0 CVEs
- Googlebot - 0 CVEs
- Googlebot-image - 0 CVEs
- Goolge Classroom - 0 CVEs
- Home - 0 CVEs
- Home Mini - 0 CVEs
- Kubernetes - 0 CVEs
- Nest Audio - 0 CVEs
- Nest Cam (indoor, Wired) - 0 CVEs
- Nest Cam (outdoor Or Indoor, Battery) - 0 CVEs
- Nest Cam Iq - 0 CVEs
- Nest Cam Iq Indoor - 0 CVEs
- Nest Cam With Floodlight - 0 CVEs
- Nest Doorbell (battery) - 0 CVEs
- Nest Mini - 0 CVEs
- Nest Wifi Router - 0 CVEs
- Nexus 4 - 0 CVEs
- Nexus 5 - 0 CVEs
- Nexus 5x - 0 CVEs
- Nexus 6 - 0 CVEs
- Nexus 6p - 0 CVEs
- Nexus 7 - 0 CVEs
- Nexus 7 (2013) - 0 CVEs
- Nexus 9 - 0 CVEs
- Nexus Player - 0 CVEs
- Pdfium - 0 CVEs
- Pixel 2 - 0 CVEs
- Pixel 2 Xl - 0 CVEs
- Pixel 3 - 0 CVEs
- Pixel 3 Xl - 0 CVEs
- Pixel 3a - 0 CVEs
- Pixel 3a Xl - 0 CVEs
- Pixel 4 - 0 CVEs
- Pixel 4 Xl - 0 CVEs
- Pixel 4a - 0 CVEs
- Pixel 4a 5g - 0 CVEs
- Pixel 5 - 0 CVEs
- Pixel 5a - 0 CVEs
- Pixel 6 Pro - 0 CVEs
- Pixel 6a - 0 CVEs
- Pixel 7 - 0 CVEs
- Pixel 7 Pro - 0 CVEs
- Pixel 7a - 0 CVEs
- Pixel 8 - 0 CVEs
- Pixel 8 Pro - 0 CVEs
- Pixel 8a - 0 CVEs
- Pixel 9 - 0 CVEs
- Pixel 9 Pro - 0 CVEs
- Pixel 9 Pro Fold - 0 CVEs
- Pixel C - 0 CVEs
- Pixel Fold - 0 CVEs
- Pixel Pro Xl - 0 CVEs
- Pixel Slate - 0 CVEs
- Pixel Tablet - 0 CVEs
- Pixel Xl - 0 CVEs
- Puppeteer - 0 CVEs
- Talk Plugin - 0 CVEs
- Toolbar For Firefox - 0 CVEs
- Toolbar For Internet Explorer - 0 CVEs
- Update Helper - 0 CVEs
- Urchin - 0 CVEs
- Web Server - 0 CVEs
- Workspace - 0 CVEs
Newest CVEs of Google
- CVE-2026-106484, 2026-10-28: Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via a…
- CVE-2026-115522 - CVSS 5.3 (medium), 2026-10-28: Exposure of Resource to Wrong Sphere (CWE-668) in FileArtifactService in Google Agent Development Kit (ADK) for Python (google-adk) versions 1.19.0 before…
- CVE-2026-118338 - CVSS 8.8 (high), 2026-10-27: Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
- CVE-2026-118356 - CVSS 8.8 (high), 2026-10-27: Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…
- CVE-2026-118319, 2026-10-27: Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML…
- CVE-2026-118315 - CVSS 8.8 (high), 2026-10-27: Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…
- CVE-2026-118312 - CVSS 9.6 (critical), 2026-10-27: Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…
- CVE-2026-118309 - CVSS 9.6 (critical), 2026-10-27: Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside…
- CVE-2026-118347 - CVSS 8.8 (high), 2026-10-27: Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
- CVE-2026-118341 - CVSS 8.8 (high), 2026-10-27: Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…
- CVE-2026-118330 - CVSS 8.8 (high), 2026-10-27: Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
- CVE-2026-118314 - CVSS 8.8 (high), 2026-10-27: Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside…
- CVE-2026-118342 - CVSS 9.6 (critical), 2026-10-27: Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via…
- CVE-2026-118335 - CVSS 8.8 (high), 2026-10-27: Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside…
- CVE-2026-118310 - CVSS 9.6 (critical), 2026-10-27: Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code…
- CVE-2026-118308 - CVSS 9.6 (critical), 2026-10-27: Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…
- CVE-2026-118346 - CVSS 8.8 (high), 2026-10-27: Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
- CVE-2026-118345 - CVSS 8.8 (high), 2026-10-27: Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
- CVE-2026-118316 - CVSS 9.6 (critical), 2026-10-27: Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox…
- CVE-2026-118313 - CVSS 8.8 (high), 2026-10-27: Use after free in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
- CVE-2026-118304 - CVSS 8.8 (high), 2026-10-27: Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…
- CVE-2026-118343 - CVSS 8.8 (high), 2026-10-27: Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the…
- CVE-2026-118334 - CVSS 8.8 (high), 2026-10-27: Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…
- CVE-2026-118332 - CVSS 9.6 (critical), 2026-10-27: Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the…
- CVE-2026-118311 - CVSS 8.8 (high), 2026-10-27: Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
- CVE-2026-118359 - CVSS 8.8 (high), 2026-10-27: Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
- CVE-2026-118353 - CVSS 8.8 (high), 2026-10-27: Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
- CVE-2026-118349 - CVSS 8.8 (high), 2026-10-27: Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…
- CVE-2026-118327 - CVSS 8.8 (high), 2026-10-27: Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
- CVE-2026-118358 - CVSS 8.8 (high), 2026-10-27: Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…