Google vulnerabilities
Published CVEs affecting Google products: 4517 record(s), with severity, exploitation and fixes.
Chrome 3829Android 628Mcp Toolbox For Databases 14MCP Toolbox for Databases (googleapis/mcp-toolbox) 6Mcp-toolbox 5SAM 3Chrome-devtools-mcp 3Libjxl 2Keras 2gVisor 2Android Xr 2Go-attestation 2OSV-SCALIBR 2Turbinia 1Nest 1Tink Java 1A2ui/web Core 1Common Expression Language 1Tink-Android 1Google-ADK 1Agent Development Kit (ADK) for Python 1Woff2 1Langfun 1Android Wear 1Cel-go 1Site Kit by Google 1Protobuf-javascript (aka Google-protobuf Npm Package) 1Mcp-toolbox-sdk-python 1Fuse-archive 1ADK TypeScript (@google/adk) 1Brotli 1Agent Development Kit (ADK) for Java 1Gerrit 1V8 1Libvpx 1Libwebp 1Security Operations Soar 1Nest Wifi Router Firmware 1Nest Wifi Point Firmware 1Nest Wifi Pro Firmware 1
CVE-2026-13989
Medium · 5.3
CWE-451 Jun 30, 2026
Inappropriate implementation in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote...
Inappropriate implementation in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13988
Medium · 6.5
CWE-451 Jun 30, 2026
Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote...
Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13987
Medium · 4.3
CWE-451 Jun 30, 2026
Incorrect security UI in Mobile in Google Chrome on Android prior to 150.0.7871.47 allowed a...
Incorrect security UI in Mobile in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13986
Medium · 4.2
CWE-451 Jun 30, 2026
Inappropriate implementation in Media UI in Google Chrome on ChromeOS prior to 150.0.7871.47...
Inappropriate implementation in Media UI in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13985
Medium · 6.5
CWE-290 Jun 30, 2026
Inappropriate implementation in MediaCapture in Google Chrome prior to 150.0.7871.47 allowed a...
Inappropriate implementation in MediaCapture in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13984
Medium · 4.3
CWE-290 Jun 30, 2026
Incorrect security UI in TabStrip in Google Chrome prior to 150.0.7871.47 allowed a remote...
Incorrect security UI in TabStrip in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13983
Medium · 4.2
CWE-451 Jun 30, 2026
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13982
Low · 3.1
CWE-451 Jun 30, 2026
Incorrect security UI in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote...
Incorrect security UI in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13981
Medium · 4.3
CWE-451 Jun 30, 2026
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13980
Medium · 4.3
CWE-451 Jun 30, 2026
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13979
Medium · 4.3
CWE-451 Jun 30, 2026
Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote...
Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13978
Medium · 4.3
CWE-451 Jun 30, 2026
Insufficient policy enforcement in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a...
Insufficient policy enforcement in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13977
Medium · 5.4
CWE-79 Jun 30, 2026
Inappropriate implementation in HTMLParser in Google Chrome prior to 150.0.7871.47 allowed a...
Inappropriate implementation in HTMLParser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13976
Medium · 5.8
CWE-122 Jun 30, 2026
Insufficient data validation in Storage in Google Chrome prior to 150.0.7871.47 allowed a remote...
Insufficient data validation in Storage in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13975
Medium · 5.3
CWE-125 Jun 30, 2026
Out-of-bounds Read in Google Chrome
Out of bounds read in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13974
High · 8.1
CWE-472 Jun 30, 2026
Integer overflow in Safe Browsing in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote...
Integer overflow in Safe Browsing in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a malicious file. (Chromium security severity: Medium)
CVE-2026-13973
Medium · 4.2
CWE-451 Jun 30, 2026
Inappropriate implementation in UI in Google Chrome prior to 150.0.7871.47 allowed a remote...
Inappropriate implementation in UI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13972
Medium · 4.3
CWE-451 Jun 30, 2026
Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote...
Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13971
Medium · 5.3
CWE-457 Jun 30, 2026
Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...
Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13970
Medium · 5.3
CWE-457 Jun 30, 2026
Uninitialized Use in Media in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...
Uninitialized Use in Media in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13969
Medium · 5.3
CWE-457 Jun 30, 2026
Uninitialized Use in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a remote...
Uninitialized Use in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13968
High · 7.5
CWE-20 Jun 30, 2026
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 150.0.7871.47...
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a malicious file. (Chromium security severity: Medium)
CVE-2026-13967
High · 8.8
CWE-843 Jun 30, 2026
Heap buffer overflow in V8 in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...
Heap buffer overflow in V8 in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13966
Medium · 4.3
CWE-451 Jun 30, 2026
Inappropriate implementation in History in Google Chrome prior to 150.0.7871.47 allowed a remote...
Inappropriate implementation in History in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13965
High · 8.8
CWE-416 Jun 30, 2026
Use after free in Oilpan in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...
Use after free in Oilpan in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)