2,047 known vulnerabilities affecting google products.
Products
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-9887 | Medium | 0.2% | 8.8 | Use after free in Proxy in Google Chrome prior to 148.0.7778.216 allowed a remot… | |
| CVE-2026-11070 | Medium | 0.2% | 9.6 | Insufficient validation of untrusted input in Chromoting in Google Chrome on Win… | |
| CVE-2026-11079 | Medium | 0.2% | 8.8 | Insufficient validation of untrusted input in Codecs in Google Chrome prior to 1… | |
| CVE-2026-11112 | Medium | 0.2% | 9.6 | Insufficient validation of untrusted input in Chromoting in Google Chrome on Lin… | |
| CVE-2026-11198 | Medium | 0.2% | 9.6 | Insufficient validation of untrusted input in Codecs in Google Chrome prior to 1… | |
| CVE-2026-11207 | Medium | 0.2% | 9.6 | Insufficient validation of untrusted input in Autofill in Google Chrome prior to… | |
| CVE-2026-14537 | Medium | 0.2% | 9.8 | Incorrect Authorization in the direct HTTP API tool invocation endpoint in Googl… | |
| CVE-2026-11667 | Medium | 0.2% | 7.5 | Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.103 allowed a … | |
| CVE-2026-5912 | Medium | 0.2% | 8.8 | Integer overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a rem… | |
| CVE-2026-11690 | Medium | 0.2% | 7.5 | Out of bounds read and write in Media in Google Chrome on Mac prior to 149.0.782… | |
| CVE-2026-11694 | Medium | 0.2% | 7.5 | Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed… | |
| CVE-2026-87534 | Medium | 0.2% | 9.8 | Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8… | |
| CVE-2026-9888 | Medium | 0.2% | 8.3 | Use after free in WebView in Google Chrome on Android prior to 148.0.7778.216 al… | |
| CVE-2026-9889 | Medium | 0.2% | 8.3 | Out of bounds read and write in Dawn in Google Chrome on Android prior to 148.0.… | |
| CVE-2026-9890 | Medium | 0.2% | 8.3 | Use after free in XR in Google Chrome on Windows prior to 148.0.7778.216 allowed… | |
| CVE-2026-9894 | Medium | 0.2% | 8.3 | Use after free in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote … | |
| CVE-2026-9895 | Medium | 0.2% | 8.3 | Out of bounds read in GPU in Google Chrome prior to 148.0.7778.216 allowed a rem… | |
| CVE-2026-9899 | Medium | 0.2% | 8.3 | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remot… | |
| CVE-2026-9900 | Medium | 0.2% | 8.3 | Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a … | |
| CVE-2026-9902 | Medium | 0.2% | 8.3 | Use after free in Accessibility in Google Chrome prior to 148.0.7778.216 allowed… | |
| CVE-2026-9904 | Medium | 0.2% | 8.3 | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remot… | |
| CVE-2026-9905 | Medium | 0.2% | 8.3 | Use after free in Accessibility in Google Chrome on Windows prior to 148.0.7778.… | |
| CVE-2026-9906 | Medium | 0.2% | 8.3 | Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a re… | |
| CVE-2026-9954 | Medium | 0.2% | 7.5 | Use after free in TabStrip in Google Chrome prior to 148.0.7778.216 allowed a re… | |
| CVE-2026-9966 | Medium | 0.2% | 8.3 | Integer overflow in XML in Google Chrome on Windows prior to 148.0.7778.216 allo… | |
| CVE-2026-9970 | Medium | 0.2% | 8.3 | Use after free in WebGL in Google Chrome prior to 148.0.7778.216 allowed a remot… | |
| CVE-2026-9975 | Medium | 0.2% | 8.3 | Out of bounds read and write in ANGLE in Google Chrome prior to 148.0.7778.216 a… | |
| CVE-2026-11256 | Medium | 0.2% | 8.3 | Integer overflow in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote… | |
| CVE-2026-5902 | Medium | 0.2% | 9.8 | Race in Media in Google Chrome on Android prior to 147.0.7727.55 allowed a remot… | |
| CVE-2026-11169 | Medium | 0.2% | 8.1 | Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allo… | |
| CVE-2026-14539 | Medium | 0.2% | 7.5 | An allocation of resources without limits vulnerability in the HTTP handler comp… | |
| CVE-2026-11301 | Medium | 0.2% | 8.8 | Inappropriate implementation in LiveCaption in Google Chrome prior to 149.0.7827… | |
| CVE-2026-11058 | Medium | 0.2% | 7.5 | Integer overflow in CredentialProvider in Google Chrome on Windows prior to 149.… | |
| CVE-2026-11154 | Medium | 0.2% | 7.5 | Use after free in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote … | |
| CVE-2026-18002 | Medium | 0.2% | 9.6 | Insufficient validation of untrusted input in Google Lens in Google Chrome prior… | |
| CVE-2026-76037 | Medium | 0.2% | 8.4 | Link following in CredentialProvider in Google Chrome on on Windows prior to 151… | |
| CVE-2026-9946 | Medium | 0.2% | 8.3 | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remot… | |
| CVE-2026-9974 | Medium | 0.2% | 8.3 | Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a re… | |
| CVE-2026-11201 | Medium | 0.2% | 8.8 | Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.53 allowed … | |
| CVE-2026-11295 | Medium | 0.2% | 8.8 | Inappropriate implementation in WebView in Google Chrome on Android prior to 149… | |
| CVE-2026-28604 | Medium | 0.2% | 7.5 | In multiple locations, there is a possible use after free due to a race conditio… | |
| CVE-2026-87505 | Medium | 0.2% | 8.1 | Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 al… | |
| CVE-2026-87608 | Medium | 0.2% | 7.5 | Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36… | |
| CVE-2026-9892 | Medium | 0.2% | 8.3 | Inappropriate implementation in Skia in Google Chrome on Android prior to 148.0.… | |
| CVE-2026-5913 | Medium | 0.2% | 8.1 | Out of bounds read in Blink in Google Chrome prior to 147.0.7727.55 allowed a re… | |
| CVE-2026-11265 | Medium | 0.2% | 7.5 | Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.53… | |
| CVE-2026-11681 | Medium | 0.2% | 8.8 | Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.103 allowe… | |
| CVE-2026-11687 | Medium | 0.2% | 8.8 | Use after free in Dawn in Google Chrome on Mac prior to 149.0.7827.103 allowed a… | |
| CVE-2026-11697 | Medium | 0.2% | 9.6 | Insufficient validation of untrusted input in UI in Google Chrome prior to 149.0… | |
| CVE-2026-11698 | Medium | 0.2% | 8.8 | Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allo… |