Vendor
9,109 known vulnerabilities.
Products
Chrome 6,157
Android 2,760
Asylo 16
ChromeOS 12
AngularJS 6
MCP Toolbox for Databases (googleapis/mcp-toolbox) 6
gVisor 6
gRPC 6
Dart SDK 5
mcp-toolbox 5
libjxl 4
Keras 4
Guava 3
go-attestation 3
SAM 3
Android XR 3
fscrypt 3
MCP Toolbox for Databases 3
Protocolbuffers 3
OSV-SCALIBR 3
Nearby 3
Fuchsia 3
guest-oslogin 3
AWS S3 Crypto SDK for GoLang 2
Nest Wifi Pro 2
Brotli 2
Web Designer 2
Tink 2
Pixel Watch 2
Fuchsia Kernel 2
Omaha 2
zx 2
protobuf-java 2
Web Stories 2
protobuf-kotlin 2
google-protobuf [JRuby Gem] 2
Site Kit by Google 2
Andrioid 2
Agent Development Kit (ADK) for Python 1
nodejs-firestore 1
9,109 results · Feed
-
Medium 6.2
In visitUris of multiple files, there is a possible information disclosure due to a confused deputy. This could lead to…
-
High 8.4
In multiple functions in AppInfoBase.java, there is a possible way to manipulate app permission settings belonging to a…
-
Medium 5.5
In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a thi…
-
High 7.8
In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing permission…
-
High 7.8
In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlock…
-
Critical 9.8
In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow. This could…
-
High 8.4
In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hide an enabled acces…
-
Medium 5.0
In multiple locations, there is a possible cross-user image read due to a missing permission check. This could lead to …
-
High 7.8
In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible way to achieve arbitrary code execution due to a m…
-
High 7.8
In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a l…
-
High 7.8
In mayAdminGrantPermission of AdminRestrictedPermissionsUtils.java, there is a possible way to access the microphone du…
-
High 7.8
In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to unsafe deserialization…
-
High 7.8
In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a l…
-
Medium 5.5
In onActivityResult of EditUserPhotoController.java, there is a possible cross-user media read due to a confused deputy…
-
Medium 6.2
In validate of WifiConfigurationUtil.java , there is a possible persistent denial of service due to resource exhaustion…
-
High 7.8
In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. Thi…
-
High 7.8
In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in th…
-
High 8.4
In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local esc…
-
High 8.4
In multiple locations, there is a possible arbitrary code execution due to a logic error in the code. This could lead t…
-
High 8.4
In DevmemXIntMapPages of devicemem_server.c, there is a possible use-after-free due to a logic error in the code. This …
-
High 8.4
In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. Thi…
-
High 7.8
In PMRWritePMPageList of pmr.c, there is a possible out of bounds write due to a logic error in the code. This could le…
-
High 8.8
Use after free in Accessibility in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who had compromised t…
-
Medium 4.3
Inappropriate implementation in Blink in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a…
-
Medium 4.3
Inappropriate implementation in FileSystem in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass …
-
High 8.3
Inappropriate implementation in Views in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker who …
-
High 8.8
Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 131.0.6778.69 allowed a remote attacker …
-
High 7.5
Use after free in Media in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker to potentially exp…
-
Medium 4.3
Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convince…
-
Medium 6.5
Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass …
-
Medium 5.9
Auth Bypass in Quickshare
There exists an auth bypass in Google Quickshare where an attacker can upload an unknown file type to a victim. The root cause of the vulnerability lies in the fact that when a Payload Transfer frame of type FILE is sent to Quick Share, the file that is conta…
-
High 8.8
Use after free in Serial in Google Chrome prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap…
-
High 8.8
Use after free in Family Experiences in Google Chrome on Android prior to 130.0.6723.116 allowed a remote attacker to p…
-
Medium 5.9
Path Traversal in Safearchive
There exists a Path Traversal vulnerability in Safearchive on Platforms with Case-Insensitive Filesystems (e.g., NTFS). This allows Attackers to Write Arbitrary Files via Archive Extraction containing symbolic links. We recommend upgrading past commit f7ce9d7…
-
High 8.8
Use after free in WebRTC in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to potentially exploit heap …
-
High 8.8
Out of bounds write in Dawn in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to perform out of bounds …
-
High 7.4
In valid_address of syscall.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead…
-
High 7.4
In lwis_allocator_free of lwis_allocator.c, there is a possible memory corruption due to a use after free. This could l…
-
High 7.4
In vring_init of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to a logic …
-
Medium 5.1
Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-315191818.