CVE Intelligence

Google vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Google products: 4517 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-13989 Medium · 5.3 CWE-451 Jun 30, 2026
Inappropriate implementation in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote...
Inappropriate implementation in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13988 Medium · 6.5 CWE-451 Jun 30, 2026
Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote...
Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13987 Medium · 4.3 CWE-451 Jun 30, 2026
Incorrect security UI in Mobile in Google Chrome on Android prior to 150.0.7871.47 allowed a...
Incorrect security UI in Mobile in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13986 Medium · 4.2 CWE-451 Jun 30, 2026
Inappropriate implementation in Media UI in Google Chrome on ChromeOS prior to 150.0.7871.47...
Inappropriate implementation in Media UI in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13985 Medium · 6.5 CWE-290 Jun 30, 2026
Inappropriate implementation in MediaCapture in Google Chrome prior to 150.0.7871.47 allowed a...
Inappropriate implementation in MediaCapture in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13984 Medium · 4.3 CWE-290 Jun 30, 2026
Incorrect security UI in TabStrip in Google Chrome prior to 150.0.7871.47 allowed a remote...
Incorrect security UI in TabStrip in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13983 Medium · 4.2 CWE-451 Jun 30, 2026
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13982 Low · 3.1 CWE-451 Jun 30, 2026
Incorrect security UI in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote...
Incorrect security UI in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13981 Medium · 4.3 CWE-451 Jun 30, 2026
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13980 Medium · 4.3 CWE-451 Jun 30, 2026
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13979 Medium · 4.3 CWE-451 Jun 30, 2026
Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote...
Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13978 Medium · 4.3 CWE-451 Jun 30, 2026
Insufficient policy enforcement in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a...
Insufficient policy enforcement in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13977 Medium · 5.4 CWE-79 Jun 30, 2026
Inappropriate implementation in HTMLParser in Google Chrome prior to 150.0.7871.47 allowed a...
Inappropriate implementation in HTMLParser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13976 Medium · 5.8 CWE-122 Jun 30, 2026
Insufficient data validation in Storage in Google Chrome prior to 150.0.7871.47 allowed a remote...
Insufficient data validation in Storage in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13975 Medium · 5.3 CWE-125 Jun 30, 2026
Out-of-bounds Read in Google Chrome
Out of bounds read in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13974 High · 8.1 CWE-472 Jun 30, 2026
Integer overflow in Safe Browsing in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote...
Integer overflow in Safe Browsing in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a malicious file. (Chromium security severity: Medium)
CVE-2026-13973 Medium · 4.2 CWE-451 Jun 30, 2026
Inappropriate implementation in UI in Google Chrome prior to 150.0.7871.47 allowed a remote...
Inappropriate implementation in UI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13972 Medium · 4.3 CWE-451 Jun 30, 2026
Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote...
Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13971 Medium · 5.3 CWE-457 Jun 30, 2026
Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...
Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13970 Medium · 5.3 CWE-457 Jun 30, 2026
Uninitialized Use in Media in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...
Uninitialized Use in Media in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13969 Medium · 5.3 CWE-457 Jun 30, 2026
Uninitialized Use in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a remote...
Uninitialized Use in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13968 High · 7.5 CWE-20 Jun 30, 2026
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 150.0.7871.47...
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a malicious file. (Chromium security severity: Medium)
CVE-2026-13967 High · 8.8 CWE-843 Jun 30, 2026
Heap buffer overflow in V8 in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...
Heap buffer overflow in V8 in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13966 Medium · 4.3 CWE-451 Jun 30, 2026
Inappropriate implementation in History in Google Chrome prior to 150.0.7871.47 allowed a remote...
Inappropriate implementation in History in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13965 High · 8.8 CWE-416 Jun 30, 2026
Use after free in Oilpan in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...
Use after free in Oilpan in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)