Vendor
9,109 known vulnerabilities.
Products
Chrome 6,157
Android 2,760
Asylo 16
ChromeOS 12
AngularJS 6
MCP Toolbox for Databases (googleapis/mcp-toolbox) 6
gVisor 6
gRPC 6
Dart SDK 5
mcp-toolbox 5
libjxl 4
Keras 4
Guava 3
go-attestation 3
SAM 3
Android XR 3
fscrypt 3
MCP Toolbox for Databases 3
Protocolbuffers 3
OSV-SCALIBR 3
Nearby 3
Fuchsia 3
guest-oslogin 3
AWS S3 Crypto SDK for GoLang 2
Nest Wifi Pro 2
Brotli 2
Web Designer 2
Tink 2
Pixel Watch 2
Fuchsia Kernel 2
Omaha 2
zx 2
protobuf-java 2
Web Stories 2
protobuf-kotlin 2
google-protobuf [JRuby Gem] 2
Site Kit by Google 2
Andrioid 2
Agent Development Kit (ADK) for Python 1
nodejs-firestore 1
2,324 results · Clear filters · Feed
-
Medium 6.7
TPM2 Out-Of-Bounds Write Leading to Potential Operating System Verification Bypass in ChromeOS
Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 122.0.6261.132 stable on Cr50 Boards allows an attacker with root access to gain persistence and bypass operating system verification via exploiting the NV_Read functionality during the Challeng…
-
Medium 5.4
Inappropriate implementation in Downloads in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform …
-
Medium 5.4
Inappropriate implementation in Autofill in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convince…
-
Medium 6.5
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attac…
-
Medium 5.4
Inappropriate implementation in Navigations in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convi…
-
Medium 5.4
Inappropriate implementation in Custom Tabs in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convi…
-
Medium 6.8
Improper File Permission Handling in Google gVisor runsc
Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-l…
-
Medium 5.1
In closeChannel of secureelementimpl.cpp, there is a possible out of bounds read due to an incorrect bounds check. This…
-
Medium 6.6
In ppcfw_deny_sec_dram_access of ppcfw.c, there is a possible arbitrary read from TEE memory due to a logic error in th…
-
Medium 5.1
there is a possible way to crash the modem due to a missing null check. This could lead to remote denial of service wit…
-
Medium 5.1
In static long dev_send of tipc_dev_ql, there is a possible out of bounds read due to an incorrect bounds check. This c…
-
Medium 5.1
In ProtocolUnsolOnSSAdapter::GetServiceClass() of protocolcalladapter.cpp, there is a possible out-of-bounds read due t…
-
Medium 6.8
Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an…
-
Medium 6.5
Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtai…
-
Medium 4.3
Inappropriate implementation in Selection in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker …
-
Medium 4.3
Inappropriate implementation in Permission Prompts in Google Chrome prior to 134.0.6998.35 allowed an attacker who conv…
-
Medium 4.3
Inappropriate implementation in Browser UI in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker…
-
Medium 5.4
Inappropriate implementation in Browser UI in Google Chrome on Android prior to 133.0.6943.98 allowed a remote attacker…
-
Medium 6.3
Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap co…
-
Medium 6.3
Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who co…
-
Medium 5.4
Use after free in V8 in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corr…
-
Medium 6.9
Identifiable Header Values In Fuchsia Leading To Tracking of The User
Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source ports, and IPv4/IPv6 fragment ID allow for these values to be guessed under circumstances
-
Medium 6.3
Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be…
-
Medium 6.3
Improved Seeding and Hashing In gVisor
A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identifier that could aid in tracking of a device in certain circumstances.
-
Medium 5.3
In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a…
-
Medium 6.5
In Source of ZipFile.java, there is a possible way for an attacker to execute arbitrary code by manipulating Dynamic Co…
-
Medium 6.2
In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible information disclosure due to unini…
-
Medium 5.7
In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. Th…
-
Medium 5.7
In HeifDecoderImpl::getScanline of HeifDecoderImpl.cpp, there is a possible out of bounds read due to improper input va…
-
Medium 5.5
In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a l…
-
Medium 5.5
In reload of ServiceListing.java , there is a possible way to allow a malicious app to hide an NLS from Settings due to…
-
Medium 5.5
In multiple locations, there is a possible way to access media content belonging to another user due to a missing permi…
-
Medium 6.5
In build_read_multi_rsp of gatt_sr.cc, there is a possible denial of service due to a logic error in the code. This cou…
-
Medium 6.7
In BnDmAgent::onTransact of dm_agent.cpp, there is a possible out of bounds write due to a missing bounds check. This c…
-
Medium 5.5
In NlpService, there is a possible way to obtain location information due to a missing permission check. This could lea…
-
Medium 5.1
In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap buffer overflow. Th…
-
Medium 5.5
In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible way to crash the emergency callback mode due t…
-
Medium 5.5
In multiple functions of MiniThumbFile.java, there is a possible way to view the thumbnails of deleted photos due to a …
-
Medium 4.4
In multiple locations, there is a possible way to bypass KASLR due to an unusual root cause. This could lead to local i…
-
Medium 4.4
In asn1_ber_decoder of asn1_decoder.c, there is a possible out of bounds read due to a missing bounds check. This could…