| CVE-2026-13806 | 8.1 | — | — | — | google / chrome | Insufficient validation of untrusted input in Accessibility in Google Chrome prior to 150.0.7871.47 allowed a remo | 114d ago |
| CVE-2026-13799 | 8.1 | — | — | — | google / chrome | Use after free in QUIC in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit he | 114d ago |
| CVE-2026-13791 | 8.1 | — | — | — | google / chrome | Insufficient validation of untrusted input in Downloads in Google Chrome prior to 150.0.7871.47 allowed an attacke | 114d ago |
| CVE-2026-13787 | 8.1 | — | — | — | google / chrome | Use after free in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to execu | 114d ago |
| CVE-2026-13779 | 8.1 | — | — | — | google / chrome | Use after free in Chromoting in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker to exec | 114d ago |
| CVE-2026-13774 | 8.1 | — | — | — | google / chrome | Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to i | 114d ago |
| CVE-2026-11719 | 8.1 | — | — | — | google / mcp toolbox for databases | An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope enfor | 126d ago |
| CVE-2026-12012 | 8.1 | — | — | — | google / chrome | Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an attacker in a privileged network pos | 133d ago |
| CVE-2026-11693 | 8.1 | — | — | — | google / chrome | Inappropriate implementation in Plugins in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had | 136d ago |
| CVE-2026-11689 | 8.1 | — | — | — | google / chrome | Insufficient policy enforcement in Passwords in Google Chrome prior to 149.0.7827.103 allowed a remote attacker wh | 136d ago |
| CVE-2026-11643 | 8.1 | — | — | — | google / chrome | Use after free in Proxy in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary co | 136d ago |
| CVE-2026-11231 | 8.1 | — | — | — | google / chrome | Inappropriate implementation in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote atta | 140d ago |
| CVE-2026-11224 | 8.1 | — | — | — | google / chrome | Use after free in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute | 140d ago |
| CVE-2026-11185 | 8.1 | — | — | — | google / chrome | Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a | 140d ago |
| CVE-2026-11170 | 8.1 | — | — | — | google / chrome | Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attac | 140d ago |
| CVE-2026-11169 | 8.1 | — | — | — | google / chrome | Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject ar | 140d ago |
| CVE-2026-11111 | 8.1 | — | — | — | google / chrome | Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of | 140d ago |
| CVE-2026-11015 | 8.1 | — | — | — | google / chrome | Out of bounds read in WebGPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out o | 140d ago |
| CVE-2026-11011 | 8.1 | — | — | — | google / chrome | Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attac | 140d ago |
| CVE-2026-10930 | 8.1 | — | — | — | google / chrome | Out of bounds read in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to perform an | 140d ago |
| CVE-2026-10887 | 8.1 | — | — | — | google / chrome | Use after free in Chromoting in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to execute a | 140d ago |
| CVE-2026-9964 | 8.1 | — | — | — | google / chrome | Use after free in Bluetooth in Google Chrome on Mac prior to 148.0.7778.216 allowed an attacker who convinced a use | 147d ago |
| CVE-2025-48640 | 8 | — | — | — | google / android | In multiple locations, there is a possible 3rd party passkey entry pairing approval due to a missing permission ch | 127d ago |
| CVE-2026-11241 | 8 | — | — | — | google / chrome | Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on | 140d ago |
| CVE-2026-0097 | 8 | — | — | — | google / android | In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic | 143d ago |
| CVE-2026-0095 | 8 | — | — | — | google / android | In l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlled heap corruption within the privil | 143d ago |
| CVE-2026-0059 | 8 | — | — | — | google / android | In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer o | 143d ago |
| CVE-2026-17864 | 7.8 | — | — | — | google / chrome | Inappropriate implementation in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to | 84d ago |
| CVE-2026-17863 | 7.8 | — | — | — | google / chrome | Inappropriate implementation in Browser in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacke | 84d ago |
| CVE-2026-17862 | 7.8 | — | — | — | google / chrome | Use after free in Tracing in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform O | 84d ago |
| CVE-2026-17861 | 7.8 | — | — | — | google / chrome | Insufficient validation of untrusted input in Updater in Google Chrome prior to 151.0.7922.72 allowed a local atta | 84d ago |
| CVE-2026-17654 | 7.8 | — | — | — | google / chrome | Race in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privil | 84d ago |
| CVE-2026-16414 | 7.8 | — | — | — | google / chrome | Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local | 93d ago |
| CVE-2026-15905 | 7.8 | — | — | — | google / chrome | Use after free in Aura in Google Chrome prior to 150.0.7871.128 allowed a local attacker to potentially exploit he | 94d ago |
| CVE-2026-14124 | 7.8 | — | — | — | google / chrome | Inappropriate implementation in CredentialProvider in Google Chrome on Windows prior to 150.0.7871.47 allowed a lo | 114d ago |
| CVE-2026-14094 | 7.8 | — | — | — | google / chrome | Use after free in Installer in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform | 114d ago |
| CVE-2026-14060 | 7.8 | — | — | — | google / chrome | Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowe | 114d ago |
| CVE-2026-14018 | 7.8 | — | — | — | google / chrome | Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform O | 114d ago |
| CVE-2026-13927 | 7.8 | — | — | — | google / chrome | Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a loca | 114d ago |
| CVE-2026-13863 | 7.8 | — | — | — | google / chrome | Insufficient validation of untrusted input in CustomTabs in Google Chrome on Android prior to 150.0.7871.47 allowe | 114d ago |
| CVE-2026-13844 | 7.8 | — | — | — | google / chrome | Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform O | 114d ago |
| CVE-2026-13827 | 7.8 | — | — | — | google / chrome | Use after free in Updater in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker to perform privi | 114d ago |
| CVE-2026-13800 | 7.8 | — | — | — | google / chrome | Inappropriate implementation in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacke | 114d ago |
| CVE-2026-13778 | 7.8 | — | — | — | google / chrome | Use after free in WebUSB in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker to execute arbitr | 114d ago |
| CVE-2026-13037 | 7.8 | — | — | — | google / chrome | Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local attacker to execute | 120d ago |
| CVE-2026-12537 | 7.8 | — | — | — | google / gemini-cli | Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0. | 120d ago |
| CVE-2026-28615 | 7.8 | — | — | — | google / android | In Telecomm, there is a possible way to initiate an unauthorized phone call due to a permissions bypass. | 127d ago |
| CVE-2026-12449 | 7.8 | — | — | — | google / chrome | Use after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local attacker to perfo | 127d ago |
| CVE-2026-0082 | 7.8 | — | — | — | google / android | In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment d | 127d ago |
| CVE-2026-0081 | 7.8 | — | — | — | google / android | In NFC, there is a possible way to spoof an NFC event due to a missing permission check. | 127d ago |
| CVE-2026-0071 | 7.8 | — | — | — | google / android | In SettingsLib, there is a possible missing permission check due to a logic error in the code. | 127d ago |
| CVE-2026-0068 | 7.8 | — | — | — | google / android | In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC app from a man | 127d ago |
| CVE-2026-0063 | 7.8 | — | — | — | google / android | In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier restrictions due to | 127d ago |
| CVE-2026-0019 | 7.8 | — | — | — | google / android | In SettingsLib, there is a possible way to disable system components due to a logic error in the code. | 127d ago |
| CVE-2025-48643 | 7.8 | — | — | — | google / android | In multiple locations there is a possible provisioning bypass due to improper input validation. | 127d ago |
| CVE-2025-48617 | 7.8 | — | — | — | google / android | In overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to a permissions by | 127d ago |
| CVE-2026-0153 | 7.8 | — | — | — | google / android | In Write of msg_to_host_buffer.cc, there is a possible out of bounds write due to an incorrect bounds check. | 128d ago |
| CVE-2026-0152 | 7.8 | — | — | — | google / android | In OSMMapPMRGeneric of pmr_os.c, there is a possible way to leverage a system call to system call to maliciously ex | 128d ago |
| CVE-2026-0150 | 7.8 | — | — | — | google / android | In ExecuteGraph command handler of EdgeTPU firmware, there is a possible out of bounds write due to an integer over | 128d ago |
| CVE-2026-0143 | 7.8 | — | — | — | google / android | In lwis_device_external_event_emit of lwis_event.c, there is a possible memory corruption due to a use after free. | 128d ago |
