Vendor
9,110 known vulnerabilities.
Products
Chrome 6,157
Android 2,761
Asylo 16
ChromeOS 12
AngularJS 6
MCP Toolbox for Databases (googleapis/mcp-toolbox) 6
gVisor 6
gRPC 6
Dart SDK 5
mcp-toolbox 5
libjxl 4
Keras 4
Guava 3
go-attestation 3
SAM 3
Android XR 3
fscrypt 3
MCP Toolbox for Databases 3
Protocolbuffers 3
OSV-SCALIBR 3
Nearby 3
Fuchsia 3
guest-oslogin 3
AWS S3 Crypto SDK for GoLang 2
Nest Wifi Pro 2
Brotli 2
Web Designer 2
Tink 2
Pixel Watch 2
Fuchsia Kernel 2
Omaha 2
zx 2
protobuf-java 2
Web Stories 2
protobuf-kotlin 2
google-protobuf [JRuby Gem] 2
Site Kit by Google 2
Andrioid 2
Agent Development Kit (ADK) for Python 1
nodejs-firestore 1
263 results · Clear filters · Feed
-
Unscored —
Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy…
-
Unscored —CVE-2020-6516 Public exploit
Policy bypass in CORS in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a …
-
Unscored —CVE-2020-6514 Public exploit
Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged netwo…
-
Unscored —
Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap…
-
Unscored —CVE-2020-6468 Public exploit
Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corru…
-
High 8.8
Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corr…
KEV Nov 3, 2021 -
Unscored —CVE-2019-13764 Public exploit
Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit he…
-
Medium 6.5
Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially explo…
KEV Jun 8, 2022 -
High 8.8
Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap…
KEV May 23, 2022 -
Unscored —CVE-2019-5822 Public exploit
Inappropriate implementation in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same …
-
Medium 6.5
Use-After-Free in puppeteer
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
KEV May 23, 2022 -
Unscored —CVE-2019-5784 Public exploit
Incorrect handling of deferred code in V8 in Google Chrome prior to 72.0.3626.96 allowed a remote attacker to potential…
-
Unscored —CVE-2018-6130 Public exploit
Incorrect handling of object lifetimes in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to po…
-
Unscored —CVE-2018-6129 Public exploit
Out of bounds array access in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially pe…
-
Unscored —CVE-2019-5796 Public exploit
Data race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially expl…
-
Unscored —CVE-2019-5789 Public exploit
An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed…
-
Unscored —CVE-2019-5788 Public exploit
An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 all…
-
Unscored —
Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute ar…
-
Unscored —CVE-2018-16083 Public exploit
An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remot…
-
Unscored —CVE-2018-16071 Public exploit
A use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap…
-
Unscored —CVE-2018-6084 Public exploit
Insufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0.3359.117 allowed a loca…
-
Unscored —CVE-2018-6126 Public exploit
A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds …
-
Unscored —
A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a…
-
Unscored —
Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in…
-
Unscored —CVE-2018-6092 Public exploit
An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker …
-
Unscored —CVE-2018-9539 Public exploit
In the ClearKey CAS descrambler, there is a possible use after free due to a race condition. This could lead to local e…
-
High 8.8
Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbi…
KEV Jun 8, 2022 -
High 8.8
Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google C…
KEV Jun 8, 2022 -
Unscored —CVE-2018-6066 Public exploit
Lack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0.3325.146 allowed a remo…
-
Unscored —CVE-2018-6064 Public exploit
Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote…
-
Unscored —CVE-2018-9445 Public exploit
In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local…
-
Unscored —CVE-2018-9488 Public exploit
In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction. This could lea…
-
Unscored —CVE-2018-9493 Public exploit
In the content provider of the download manager, there is a possible SQL injection due to improper input validation. Th…
-
Unscored —CVE-2018-9515 Public exploit
In sdcardfs_create and sdcardfs_mkdir of inode.c, there is a possible memory corruption due to improper locking. This c…
-
Unscored —CVE-2017-13261 Public exploit
In bnep_process_control_packet of bnep_utils.cc, there is a possible out of bounds read due to a missing bounds check. …
-
Unscored —CVE-2017-13260 Public exploit
In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead…
-
Unscored —CVE-2017-13262 Public exploit
In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. T…
-
Unscored —CVE-2017-13258 Public exploit
In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead…
-
Unscored —CVE-2017-13253 Public exploit
In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. Th…
-
Unscored —CVE-2017-13286 Public exploit
In writeToParcel and readFromParcel of OutputConfiguration.java, there is a permission bypass due to mismatched seriali…