| CVE-2026-13037 | 7.8 | — | — | — | google / chrome | Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local attacker to execute | 119d ago |
| CVE-2026-12537 | 7.8 | — | — | — | google / gemini-cli | Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0. | 119d ago |
| CVE-2026-28615 | 7.8 | — | — | — | google / android | In Telecomm, there is a possible way to initiate an unauthorized phone call due to a permissions bypass. | 126d ago |
| CVE-2026-12449 | 7.8 | — | — | — | google / chrome | Use after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local attacker to perfo | 126d ago |
| CVE-2026-0082 | 7.8 | — | — | — | google / android | In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment d | 126d ago |
| CVE-2026-0081 | 7.8 | — | — | — | google / android | In NFC, there is a possible way to spoof an NFC event due to a missing permission check. | 126d ago |
| CVE-2026-0071 | 7.8 | — | — | — | google / android | In SettingsLib, there is a possible missing permission check due to a logic error in the code. | 126d ago |
| CVE-2026-0068 | 7.8 | — | — | — | google / android | In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC app from a man | 126d ago |
| CVE-2026-0063 | 7.8 | — | — | — | google / android | In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier restrictions due to | 126d ago |
| CVE-2026-0019 | 7.8 | — | — | — | google / android | In SettingsLib, there is a possible way to disable system components due to a logic error in the code. | 126d ago |
| CVE-2025-48643 | 7.8 | — | — | — | google / android | In multiple locations there is a possible provisioning bypass due to improper input validation. | 126d ago |
| CVE-2025-48617 | 7.8 | — | — | — | google / android | In overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to a permissions by | 126d ago |
| CVE-2026-0153 | 7.8 | — | — | — | google / android | In Write of msg_to_host_buffer.cc, there is a possible out of bounds write due to an incorrect bounds check. | 127d ago |
| CVE-2026-0152 | 7.8 | — | — | — | google / android | In OSMMapPMRGeneric of pmr_os.c, there is a possible way to leverage a system call to system call to maliciously ex | 127d ago |
| CVE-2026-0150 | 7.8 | — | — | — | google / android | In ExecuteGraph command handler of EdgeTPU firmware, there is a possible out of bounds write due to an integer over | 127d ago |
| CVE-2026-0143 | 7.8 | — | — | — | google / android | In lwis_device_external_event_emit of lwis_event.c, there is a possible memory corruption due to a use after free. | 127d ago |
| CVE-2026-0138 | 7.8 | — | — | — | google / android | In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to memory corruption. | 127d ago |
| CVE-2026-0137 | 7.8 | — | — | — | google / android | In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of privilege due to a use | 127d ago |
| CVE-2026-0135 | 7.8 | — | — | — | google / android | In Modem, there is a possible out of bounds read due to a missing bounds check. | 127d ago |
| CVE-2026-0133 | 7.8 | — | — | — | google / android | In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts | 127d ago |
| CVE-2026-11103 | 7.8 | — | — | — | google / chrome | Inappropriate implementation in Installer in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attac | 139d ago |
| CVE-2026-11072 | 7.8 | — | — | — | google / chrome | Use after free in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to execute a | 139d ago |
| CVE-2026-10942 | 7.8 | — | — | — | google / chrome | Inappropriate implementation in UI in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to | 139d ago |
| CVE-2026-28580 | 7.8 | — | — | — | google / android | In multiple functions, there is a possible desync in persistence due to an incorrect bounds check. | 142d ago |
| CVE-2026-28577 | 7.8 | — | — | — | google / android | In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack | 142d ago |
| CVE-2026-0100 | 7.8 | — | — | — | google / android | In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow. | 142d ago |
| CVE-2026-0099 | 7.8 | — | — | — | google / android | In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background du | 142d ago |
| CVE-2026-0098 | 7.8 | — | — | — | google / android | In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a con | 142d ago |
| CVE-2026-0096 | 7.8 | — | — | — | google / android | In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due | 142d ago |
| CVE-2026-0094 | 7.8 | — | — | — | google / android | In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to | 142d ago |
| CVE-2026-0093 | 7.8 | — | — | — | google / android | In multiple locations, there is a possible misleading UI due to obfuscation. | 142d ago |
| CVE-2026-0091 | 7.8 | — | — | — | google / android | In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged sh | 142d ago |
| CVE-2026-0089 | 7.8 | — | — | — | google / android | In multiple functions of PackageInstallerService.java, there is a possible way to install unverified apps due to a | 142d ago |
| CVE-2026-0088 | 7.8 | — | — | — | google / android | In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to m | 142d ago |
| CVE-2026-0087 | 7.8 | — | — | — | google / android | In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary | 142d ago |
| CVE-2026-0078 | 7.8 | — | — | — | google / android | In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper inp | 142d ago |
| CVE-2026-0077 | 7.8 | — | — | — | google / android | In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application launch (bal) due | 142d ago |
| CVE-2026-0076 | 7.8 | — | — | — | google / android | In validateNode of ResourceTypes.cpp, there is a possible out of bounds read due to an incorrect bounds check. | 142d ago |
| CVE-2026-0045 | 7.8 | — | — | — | google / android | In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a l | 142d ago |
| CVE-2026-0036 | 7.8 | — | — | — | google / android | In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack | 142d ago |
| CVE-2026-0009 | 7.8 | — | — | — | google / android | In multiple locations, there is a possible tapjacking due to a logic error in the code. | 142d ago |
| CVE-2025-48652 | 7.8 | — | — | — | google / android | In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass MDM policy due to a logic er | 142d ago |
| CVE-2025-48649 | 7.8 | — | — | — | google / android | In multiple locations, there is a possible way to reset user-selected permissions selections due to a permissions | 142d ago |
| CVE-2025-48570 | 7.8 | — | — | — | google / android | In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background | 142d ago |
| CVE-2025-32348 | 7.8 | — | — | — | google / android | In multiple locations, there is a possible background activity launch due to a missing permission check. | 142d ago |
| CVE-2025-26418 | 7.8 | — | — | — | google / android | In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog | 142d ago |
| CVE-2025-22426 | 7.8 | — | — | — | google / android | In many functions of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error | 142d ago |
| CVE-2025-22424 | 7.8 | — | — | — | google / android | In multiple locations, there is a possible way to reveal images across users due to improper input validation. | 142d ago |
| CVE-2026-0072 | 7.8 | — | — | — | google / android xr | In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permissio | 142d ago |
| CVE-2026-9987 | 7.8 | — | — | — | google / chrome | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 148.0.7778.216 al | 146d ago |
| CVE-2026-79245 | 7.7 | — | — | — | google / chrome | Use after free in UI in Google Chrome prior to 152.0.7977.65 allowed a local attacker who had compromised the rend | 57d ago |
| CVE-2026-14538 | 7.7 | — | — | — | google / mcp toolbox for databases | An improper authorization and security-boundary bypass vulnerability in the bigquery-execute-sql tool component of | 83d ago |
| CVE-2026-11297 | 7.7 | — | — | — | google / chrome | Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allow | 139d ago |
| CVE-2026-79216 | 7.5 | — | — | — | google / chrome | Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the | 57d ago |
| CVE-2026-79139 | 7.5 | — | — | — | google / chrome | Improper input validation in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker | 57d ago |
| CVE-2026-79083 | 7.5 | — | — | — | google / chrome | Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote atta | 57d ago |
| CVE-2026-78915 | 7.5 | — | — | — | google / chrome | Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to | 57d ago |
| CVE-2026-78906 | 7.5 | — | — | — | google / chrome | Race condition in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute a | 57d ago |
| CVE-2026-78901 | 7.5 | — | — | — | google / chrome | Race condition in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code i | 57d ago |
| CVE-2026-76020 | 7.5 | — | — | — | google / chrome | Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code | 62d ago |
