Google vulnerabilities
We track 4,264 vulnerabilities in Google products across 60+ products. 4,254 are rated high or critical, and 93 have been exploited in real attacks. The most recent was published on November 11, 2026.
Latest Google vulnerabilities
- 8.8 High severity
Android: Use After Free
In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption due to a use after free. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User int
- 8.8 High severity
Android: Out-of-bounds Write
In transcodeQ*ToFloat of btif_avrcp_audio_track.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed f
- 7.8 High severity
Android: Use After Free
In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- 7.8 High severity
Android: Out-of-bounds Write
In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- 9.8 Critical severity
Android: Out-of-bounds Write
In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User inter
- 8.1 High severity
Android: Concurrent Execution using Shared Resource with Improper Synchronization
In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- 9.8 Critical severity
Android: Incorrect Default Permissions
In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not ne
- 7.8 High severity
MT6580, MT6739, MT6761, MT6762, MT6765…: Out-of-bounds Write
In decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08016652; Issue ID: A
- 7.8 High severity
MT6580, MT6739, MT6761, MT6762, MT6765…: Out-of-bounds Write
In decoder, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08016659; Issue ID: ALPS
- 7.8 High severity
MT2713, MT6580, MT6739, MT6761, MT6762…: Out-of-bounds Write
In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08241940; Issue ID: ALP
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In camera service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In power manager, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In engineermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In telocom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 7.5 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Exposure of Resource to Wrong Sphere
In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed
- 7.5 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Exposure of Resource to Wrong Sphere
In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
In ion service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- 8.8 High severity
Chrome: Use After Free
Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. (Chromium security severity: High)
- 8.8 High severity
Chrome: Use After Free
Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. (Chromium security severity: High)
- 8.8 High severity
Chrome: Access of Resource Using Incompatible Type
Type Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- 8.8 High severity
Chrome: Use After Free
Use after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- 8.8 High severity
Chrome: Use After Free
Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- 9.6 Critical severity
Google Skia Integer Overflow Exploited
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)