Vendor
9,109 known vulnerabilities.
Products
Chrome 6,157
Android 2,760
Asylo 16
ChromeOS 12
AngularJS 6
MCP Toolbox for Databases (googleapis/mcp-toolbox) 6
gVisor 6
gRPC 6
Dart SDK 5
mcp-toolbox 5
libjxl 4
Keras 4
Guava 3
go-attestation 3
SAM 3
Android XR 3
fscrypt 3
MCP Toolbox for Databases 3
Protocolbuffers 3
OSV-SCALIBR 3
Nearby 3
Fuchsia 3
guest-oslogin 3
AWS S3 Crypto SDK for GoLang 2
Nest Wifi Pro 2
Brotli 2
Web Designer 2
Tink 2
Pixel Watch 2
Fuchsia Kernel 2
Omaha 2
zx 2
protobuf-java 2
Web Stories 2
protobuf-kotlin 2
google-protobuf [JRuby Gem] 2
Site Kit by Google 2
Andrioid 2
Agent Development Kit (ADK) for Python 1
nodejs-firestore 1
9,109 results · Feed
-
Unscored —
In applyCustomDescription of SaveUi.java, there is a possible way to view another user's images due to a confused deput…
-
Unscored —
In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This co…
-
Unscored —
In setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This…
-
High 7.8
In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass. T…
-
Unscored —
In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow. This coul…
-
Unscored —CVE-2023-40127 Public exploit
In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local…
-
Unscored —
In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer overflow. This could …
-
High 7.8CVE-2023-40130 Public exploit
In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. T…
-
High 7.8
In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass. Thi…
-
High 7.8
In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions d…
-
High 7.8
In multiple locations, there is a possible way to bypass user notification of foreground services due to improper input…
-
Unscored —
In appendEscapedSQLString of DatabaseUtils.java, there is a possible SQL injection due to unsafe deserialization. This …
-
Unscored —
In updateActionViews of PipMenuView.java, there is a possible bypass of a multi user security boundary due to a confuse…
-
High 8.8
Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit he…
-
Unscored —
In multiple functions of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check…
-
Unscored —
In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lea…
-
Unscored —
Inappropriate implementation in Input in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof securi…
-
Unscored —
Use after free in Cast in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who had compromised the render…
-
Unscored —
Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to leak cros…
-
Unscored —
Inappropriate implementation in Installer in Google Chrome prior to 118.0.5993.70 allowed a local attacker to bypass di…
-
Unscored —
Inappropriate implementation in Extensions API in Google Chrome prior to 118.0.5993.70 allowed an attacker who convince…
-
Medium 4.3
Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to bypass au…
-
High 8.8
Heap buffer overflow in PDF in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who convinced a user to e…
-
Unscored —
Inappropriate implementation in DevTools in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a us…
-
Unscored —
Inappropriate implementation in Navigation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof s…
-
Unscored —
Inappropriate implementation in Intents in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to bypass con…
-
High 8.8
Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploi…
-
Unscored —
Inappropriate implementation in Downloads in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof se…
-
Unscored —
Inappropriate implementation in Fullscreen in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a …
-
High 8.8
Use after free in Site Isolation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially explo…
-
Unscored —
there is a possible use-after-free write due to improper locking. This could lead to local escalation of privilege with…
-
Unscored —
In TBD of TBD, there is a possible way to bypass carrier restrictions due to a logic error in the code. This could lead…
-
Unscored —
In temp_residency_name_store of thermal_metrics.c, there is a possible out of bounds write due to a missing bounds chec…
-
Unscored —
there is a possible out of bounds write due to buffer overflow. This could lead to remote code execution with no additi…
-
Unscored —
In ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp, there is a possible out of bounds read due to a missing bounds ch…
-
Unscored —
In lwis_transaction_client_cleanup of lwis_transaction.c, there is a possible way to corrupt memory due to a use after …
-
Unscored —
In CanConvertPadV2Op of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds read due to a heap buffer ove…
-
Unscored —
In ctrl_roi of stmvl53l1_module.c, there is a possible out of bounds read due to an incorrect bounds check. This could …
-
Unscored —
In TBD of TBD, there is a possible way to access location information due to a permissions bypass. This could lead to l…
-
Unscored —
In ProtocolEmergencyCallListIndAdapter::Init of protocolcalladapter.cpp, there is a possible out of bounds read due to …