Vendor
9,109 known vulnerabilities.
Products
Chrome 6,157
Android 2,760
Asylo 16
ChromeOS 12
AngularJS 6
MCP Toolbox for Databases (googleapis/mcp-toolbox) 6
gVisor 6
gRPC 6
Dart SDK 5
mcp-toolbox 5
libjxl 4
Keras 4
Guava 3
go-attestation 3
SAM 3
Android XR 3
fscrypt 3
MCP Toolbox for Databases 3
Protocolbuffers 3
OSV-SCALIBR 3
Nearby 3
Fuchsia 3
guest-oslogin 3
AWS S3 Crypto SDK for GoLang 2
Nest Wifi Pro 2
Brotli 2
Web Designer 2
Tink 2
Pixel Watch 2
Fuchsia Kernel 2
Omaha 2
zx 2
protobuf-java 2
Web Stories 2
protobuf-kotlin 2
google-protobuf [JRuby Gem] 2
Site Kit by Google 2
Andrioid 2
Agent Development Kit (ADK) for Python 1
nodejs-firestore 1
9,109 results · Feed
-
High 7.8
In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This …
-
High 7.2
In wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a possible out-of-bounds write due to a logic error i…
-
High 8.8
In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This cou…
-
Medium 5.5
In multiple functions of rw_t5t.cc, there is a possible out-of-bounds read due to a missing bounds check. This could le…
-
Medium 6.5
Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to obtain sensitive informati…
-
High 8.8
Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary co…
-
High 8.8
Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code i…
-
Medium 4.3
Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data vi…
-
High 8.8
Type confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside…
-
High 8.8
Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code insid…
-
High 8.3
Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who …
-
Critical 9.6
Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code out…
-
Medium 4.3
Integer overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin …
-
Critical 9.6
Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker l…
-
Critical 9.6
Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary cod…
-
High 7.5
Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who …
-
Medium 5.4
UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI …
-
Medium 6.5
Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had comp…
-
Medium 5.4
UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements…
-
Low 3.4
Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had…
-
High 8.8
Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code insid…
-
Medium 6.5
Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised…
-
High 8.8
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside…
-
Medium 6.5
Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the…
-
Medium 6.1
Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin po…
-
Critical 9.6
Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering…
-
Low 3.4
Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the…
-
Medium 4.7
Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside th…
-
High 8.3
Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the re…
-
High 8.3
Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromise…
-
Critical 9.6
Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering…
-
Medium 4.3
Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin…
-
Critical 9.6
Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary cod…
-
High 8.8
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside…
-
Critical 9.6
Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code…
-
High 8.8
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside…
-
Medium 4.3
Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to obtain…
-
Low 3.4
Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had c…
-
High 8.8
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside…
-
Medium 4.3
Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-orig…