Vendor
9,109 known vulnerabilities.
Products
Chrome 6,157
Android 2,760
Asylo 16
ChromeOS 12
AngularJS 6
MCP Toolbox for Databases (googleapis/mcp-toolbox) 6
gVisor 6
gRPC 6
Dart SDK 5
mcp-toolbox 5
libjxl 4
Keras 4
Guava 3
go-attestation 3
SAM 3
Android XR 3
fscrypt 3
MCP Toolbox for Databases 3
Protocolbuffers 3
OSV-SCALIBR 3
Nearby 3
Fuchsia 3
guest-oslogin 3
AWS S3 Crypto SDK for GoLang 2
Nest Wifi Pro 2
Brotli 2
Web Designer 2
Tink 2
Pixel Watch 2
Fuchsia Kernel 2
Omaha 2
zx 2
protobuf-java 2
Web Stories 2
protobuf-kotlin 2
google-protobuf [JRuby Gem] 2
Site Kit by Google 2
Andrioid 2
Agent Development Kit (ADK) for Python 1
nodejs-firestore 1
9,109 results · Feed
-
Unscored —
In ParsePayloadHeader of payload_metadata.cc, there is a possible out of bounds write due to an integer overflow. This …
-
Unscored —
In MasteringMetadata::Parse of mkvparser.cc there is a possible double free due to an insecure default value. This coul…
-
Unscored —
In CAacDecoder_Init of aacdecoder.cpp, there is a possible out-of-bound write due to a missing bounds check. This could…
-
Unscored —
In lppTransposer of lpp_tran.cpp there is a possible out of bounds write due to missing bounds check. This could lead t…
-
Unscored —
In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escal…
-
Unscored —
In ihevcd_sao_shift_ctb of ihevcd_sao.c there is a possible out of bounds write due to missing bounds check. This could…
-
Unscored —
In unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input validation. This could lead t…
-
Unscored —
In process_service_search_rsp of sdp_discovery.c, there is a possible out of bounds read due to a missing bounds check.…
-
Unscored —
In l2c_lcc_proc_pdu of l2c_fcr.cc, there is a possible out of bounds write due to a missing bounds check. This could le…
-
Unscored —
In HID_DevAddRecord of hidd_api.cc, there is a possible out-of-bounds write due to a missing bounds check. This could l…
-
Unscored —
In V4L2SliceVideoDecodeAccelerator::Dequeue of v4l2_slice_video_decode_accelerator.cc, there is a possible out of bound…
-
Unscored —
In CAacDecoder_Init of aacdecoder.cpp, there is a possible out of bounds write due to a missing bounds check. This coul…
-
Unscored —
In rw_t2t_handle_tlv_detect of rw_t2t_ndef.cc, there is a possible out-of-bounds write due to a missing bounds check. T…
-
Unscored —
On Pixel devices there is a bug causing verified boot to show the same certificate fingerprint despite using different …
-
Unscored —
In bta_ag_do_disc of bta_ag_sdp.cc, there is a possible out-of-bound read due to an incorrect parameter size. This coul…
-
Unscored —
In really_install_package of install.cpp, there is a possible free of arbitrary memory due to uninitialized data. This …
-
Unscored —
A double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk Cache in Google Chrome …
-
Unscored —CVE-2018-6092 Public exploit
An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker …
-
Unscored —
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote a…
-
Unscored —
A nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially p…
-
Unscored —
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote a…
-
Unscored —
An integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0.3359.117 allowed a remot…
-
Unscored —
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote a…
-
Unscored —
A lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbi…
-
Unscored —
Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 66.0.3359.117 allowed a remote attacke…
-
Unscored —
Missing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117 allowed a remote attacker…
-
Unscored —
A stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass per…
-
Unscored —
Inline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially e…
-
Unscored —
Re-entry of a destructor in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to …
-
Unscored —
Inappropriate setting of the SEE_MASK_FLAG_NO_UI flag in file downloads in Google Chrome prior to 66.0.3359.117 allowed…
-
Unscored —
Inappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0.3359.117 allowed a re…
-
Unscored —
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote a…
-
Unscored —
A lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker in Google Chrome prio…
-
Unscored —
The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe, regardless of …
-
Unscored —
A use-after-free in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary …
-
Unscored —
A lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cross-…
-
Unscored —
An iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arb…
-
Unscored —
In ixheaacd_extract_frame_info_ld of ixheaacd_env_extr.c there is a possible out of bounds write due to a missing bound…
-
Unscored —
In ixheaacd_mps_getstridemap of ixheaacd_mps_parse.c there is a possible out of bounds write due to a missing bounds ch…
-
Unscored —
In avrc_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check. This …