Vendor
9,109 known vulnerabilities.
Products
Chrome 6,157
Android 2,760
Asylo 16
ChromeOS 12
AngularJS 6
MCP Toolbox for Databases (googleapis/mcp-toolbox) 6
gVisor 6
gRPC 6
Dart SDK 5
mcp-toolbox 5
libjxl 4
Keras 4
Guava 3
go-attestation 3
SAM 3
Android XR 3
fscrypt 3
MCP Toolbox for Databases 3
Protocolbuffers 3
OSV-SCALIBR 3
Nearby 3
Fuchsia 3
guest-oslogin 3
AWS S3 Crypto SDK for GoLang 2
Nest Wifi Pro 2
Brotli 2
Web Designer 2
Tink 2
Pixel Watch 2
Fuchsia Kernel 2
Omaha 2
zx 2
protobuf-java 2
Web Stories 2
protobuf-kotlin 2
google-protobuf [JRuby Gem] 2
Site Kit by Google 2
Andrioid 2
Agent Development Kit (ADK) for Python 1
nodejs-firestore 1
2,324 results · Clear filters · Feed
-
Medium 5.5
In BnCameraService::onTransact of CameraService.cpp, there is a possible information disclosure due to uninitialized da…
-
Medium 5.5
In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation. This co…
-
Medium 5.5
In analyzeAxes of FontUtils.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead …
-
Medium 6.7
In mtkscoaudio debugfs there is a possible arbitrary kernel memory write due to missing bounds check and weakened SELin…
-
Medium 5.5
In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninit…
-
Medium 5.5
In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninit…
-
Medium 6.2
In readEncryptedData of ConscryptEngine.java, there is a possible plaintext leak due to improperly used crypto. This co…
-
Medium 5.5
In the autofill service, the package name that is provided by the app process is trusted inappropriately. This could l…
-
Medium 6.2
In visitUris of multiple files, there is a possible information disclosure due to a confused deputy. This could lead to…
-
Medium 5.5
In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a thi…
-
Medium 5.0
In multiple locations, there is a possible cross-user image read due to a missing permission check. This could lead to …
-
Medium 5.5
In onActivityResult of EditUserPhotoController.java, there is a possible cross-user media read due to a confused deputy…
-
Medium 6.2
In validate of WifiConfigurationUtil.java , there is a possible persistent denial of service due to resource exhaustion…
-
Medium 4.3
Inappropriate implementation in Blink in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a…
-
Medium 4.3
Inappropriate implementation in FileSystem in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass …
-
Medium 4.3
Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convince…
-
Medium 6.5
Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass …
-
Medium 5.9
Auth Bypass in Quickshare
There exists an auth bypass in Google Quickshare where an attacker can upload an unknown file type to a victim. The root cause of the vulnerability lies in the fact that when a Payload Transfer frame of type FILE is sent to Quick Share, the file that is conta…
-
Medium 5.9
Path Traversal in Safearchive
There exists a Path Traversal vulnerability in Safearchive on Platforms with Case-Insensitive Filesystems (e.g., NTFS). This allows Attackers to Write Arbitrary Files via Archive Extraction containing symbolic links. We recommend upgrading past commit f7ce9d7…
-
Medium 5.1
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-315191818.
-
Medium 5.1
there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w…
-
Medium 5.1
In TrustySharedMemoryManager::GetSharedMemory of ondevice/trusty/trusty_shared_memory_manager.cc, there is a possible o…
-
Medium 5.1
In ppmp_protect_buf of drm_fw.c, there is a possible information disclosure due to a logic error in the code. This coul…
-
Medium 5.1
In ffu_flash_pack of ffu.c, there is a possible out of bounds read due to an integer overflow. This could lead to local…
-
Medium 5.1
In gsc_gsa_rescue of gsc_gsa.c, there is a possible out of bounds read due to an incorrect bounds check. This could lea…
-
Medium 5.1
In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. …
-
Medium 5.1
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-331255656.
-
Medium 5.1
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488.
-
Medium 5.5
In ProtocolEmbmsSaiListAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a mis…
-
Medium 5.5
In ProtocolMiscHwConfigChangeAdapter::GetData() of protocolmiscadapter.cpp, there is a possible out-of-bounds read due …
-
Medium 5.5
In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible out of bounds read due to a buffer overflow. Thi…
-
Medium 5.5
There is a possible Local bypass of user interaction due to an insecure default value. This could lead to local informa…
-
Medium 4.3
Insufficient data validation in Downloads in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinc…
-
Medium 4.3
Inappropriate implementation in Payments in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convince…
-
Medium 5.3
Inappropriate implementation in Navigations in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to bypass…
-
Medium 4.3
Inappropriate implementation in Permissions in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convi…
-
Medium 4.3
Inappropriate implementation in PictureInPicture in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to p…
-
Medium 4.3
Inappropriate implementation in Navigation in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who convin…
-
Medium 4.3
Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perfo…
-
Medium 4.3
Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform U…