2,047 known vulnerabilities affecting google products.
Products
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-17987 | Medium | 0.2% | 9.6 | Insufficient validation of untrusted input in Notifications in Google Chrome pri… | |
| CVE-2026-7343 | Medium | 0.2% | 7.5 | Use after free in Views in Google Chrome on Windows prior to 147.0.7727.138 allo… | |
| CVE-2026-10940 | Medium | 0.2% | 8.3 | Race in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remo… | |
| CVE-2026-11111 | Medium | 0.2% | 8.1 | Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a re… | |
| CVE-2026-11305 | Medium | 0.2% | 8.8 | Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remot… | |
| CVE-2026-11307 | Medium | 0.2% | 8.8 | Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remot… | |
| CVE-2026-84335 | Medium | 0.2% | 8.3 | Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allo… | |
| CVE-2026-9880 | Medium | 0.2% | 8.3 | Insufficient validation of untrusted input in WebGL in Google Chrome prior to 14… | |
| CVE-2026-9885 | Medium | 0.2% | 8.3 | Insufficient validation of untrusted input in UI in Google Chrome on Mac prior t… | |
| CVE-2026-9898 | Medium | 0.2% | 8.3 | Insufficient validation of untrusted input in GPU in Google Chrome on Android pr… | |
| CVE-2026-11179 | Medium | 0.2% | 8.8 | Inappropriate implementation in ORB in Google Chrome prior to 149.0.7827.53 allo… | |
| CVE-2026-17811 | Medium | 0.2% | 7.1 | Use after free in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allow… | |
| CVE-2026-87570 | Medium | 0.2% | 8.8 | Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36… | |
| CVE-2026-9972 | Medium | 0.2% | 8.3 | Uninitialized Use in Gamepad in Google Chrome on Mac prior to 148.0.7778.216 all… | |
| CVE-2026-11108 | Medium | 0.2% | 8.8 | Inappropriate implementation in NFC in Google Chrome on Android prior to 149.0.7… | |
| CVE-2026-48287 | Medium | 0.2% | 7.4 | CAI Content Credentials is affected by an Untrusted Search Path vulnerability th… | |
| CVE-2026-11306 | Medium | 0.2% | 8.8 | Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remot… | |
| CVE-2026-11670 | Medium | 0.2% | 8.8 | Use after free in PDF in Google Chrome prior to 149.0.7827.103 allowed a remote … | |
| CVE-2026-17990 | Medium | 0.2% | 9.6 | Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to… | |
| CVE-2026-18012 | Medium | 0.2% | 8.8 | Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remot… | |
| CVE-2026-9958 | Medium | 0.2% | 8.8 | Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remo… | |
| CVE-2026-0156 | Medium | 0.2% | 7.5 | In checkSsrcCollisionOnRcv of RtpSession.cpp, there is a possible memory safety … | |
| CVE-2026-84350 | Medium | 0.2% | 8.8 | Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a rem… | |
| CVE-2026-9877 | Medium | 0.2% | 8.3 | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remot… | |
| CVE-2026-11040 | Medium | 0.2% | 8.3 | Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote… | |
| CVE-2026-11631 | Medium | 0.2% | 8.3 | Use after free in Aura in Google Chrome on Windows prior to 149.0.7827.103 allow… | |
| CVE-2026-11635 | Medium | 0.2% | 8.3 | Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allo… | |
| CVE-2026-11636 | Medium | 0.2% | 7.5 | Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.103 a… | |
| CVE-2026-11647 | Medium | 0.2% | 8.3 | Use after free in Printing in Google Chrome on Android prior to 149.0.7827.103 a… | |
| CVE-2026-11663 | Medium | 0.2% | 8.3 | Use after free in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote… | |
| CVE-2026-17920 | Medium | 0.2% | 8.8 | Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker… | |
| CVE-2026-9916 | Medium | 0.2% | 8.3 | Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a … | |
| CVE-2026-9925 | Medium | 0.2% | 8.3 | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remot… | |
| CVE-2026-9931 | Medium | 0.2% | 8.3 | Use after free in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote … | |
| CVE-2026-9932 | Medium | 0.2% | 8.3 | Use after free in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allo… | |
| CVE-2026-9933 | Medium | 0.2% | 7.5 | Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a remot… | |
| CVE-2026-9936 | Medium | 0.2% | 8.3 | Use after free in GFX in Google Chrome on Mac prior to 148.0.7778.216 allowed a … | |
| CVE-2026-9937 | Medium | 0.2% | 8.3 | Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed… | |
| CVE-2026-9948 | Medium | 0.2% | 8.3 | Use after free in Views in Google Chrome on Mac prior to 148.0.7778.216 allowed … | |
| CVE-2026-9949 | Medium | 0.2% | 8.3 | Use after free in Core in Google Chrome on Windows prior to 148.0.7778.216 allow… | |
| CVE-2026-9951 | Medium | 0.2% | 8.3 | Use after free in UI in Google Chrome prior to 148.0.7778.216 allowed a remote a… | |
| CVE-2026-10003 | Medium | 0.2% | 7.5 | Use after free in Views in Google Chrome prior to 148.0.7778.216 allowed a remot… | |
| CVE-2026-10009 | Medium | 0.2% | 7.5 | Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remo… | |
| CVE-2026-11149 | Medium | 0.2% | 7.5 | Insufficient validation of untrusted input in Extensions in Google Chrome prior … | |
| CVE-2026-11151 | Medium | 0.2% | 7.5 | Insufficient validation of untrusted input in Password Manager in Google Chrome … | |
| CVE-2026-11239 | Medium | 0.2% | 7.5 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.… | |
| CVE-2026-17855 | Medium | 0.2% | 9.6 | Race in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote… | |
| CVE-2026-85045 | Medium | 0.2% | 7.5 | Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote at… | |
| CVE-2026-11231 | Medium | 0.2% | 8.1 | Inappropriate implementation in Safe Browsing in Google Chrome on Mac prior to 1… | |
| CVE-2026-11689 | Medium | 0.2% | 8.1 | Insufficient policy enforcement in Passwords in Google Chrome prior to 149.0.782… |