Google vulnerabilities
7,838 published CVEs name Google among the affected products; CISA lists 81 of them as exploited in the wild.
- 7,838Published CVEs7,826 of them scored
- 4,634Last 12 monthspublished in the last year
- 688Critical3,921 more rated high
- 81Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-111497
Out-of-Bounds Write in Google Brotli Decoder
Google · Brotli
ExploitedCritical9.2 - CVE-2026-58704
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of…
Google · Android
ExploitedHigh8.8 - CVE-2026-87491
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
Google · Chrome
ExploitedHigh8.8 - CVE-2026-85046
Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…
Google · Chrome
ExploitedHigh8.8 - CVE-2026-11645
Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted…
Google · Chrome
ExploitedHigh8.8 - CVE-2025-48595
In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no…
Google · Android
ExploitedHigh8.4 - CVE-2026-5281
Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code…
Google · Chrome
ExploitedHigh8.8 - CVE-2026-3910
Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted…
Google · Chrome
ExploitedHigh8.8 - CVE-2026-3909
Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.…
Google · Chrome
ExploitedHigh8.8 - CVE-2026-2441
Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.…
Google · Chrome
ExploitedHigh8.8