CVE Intelligence

Google vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Google products: 4517 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-13839 Medium · 6.5 CWE-346 Jun 30, 2026
Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote...
Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13838 Medium · 6.5 CWE-346 Jun 30, 2026
Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote...
Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13837 Medium · 4.3 CWE-451 Jun 30, 2026
Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote...
Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13836 Medium · 6.1 CWE-79 Jun 30, 2026
Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote...
Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13835 High · 8.8 CWE-122 Jun 30, 2026
Inappropriate implementation in XML in Google Chrome prior to 150.0.7871.47 allowed a remote...
Inappropriate implementation in XML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13834 High · 8.3 CWE-20 Jun 30, 2026
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47...
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13833 Medium · 6.5 CWE-457 Jun 30, 2026
Uninitialized Use in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote...
Uninitialized Use in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13832 High · 8.3 CWE-416 Jun 30, 2026
Use after free in Headless in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...
Use after free in Headless in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13831 High · 7.5 CWE-416 Jun 30, 2026
Out of bounds read and write in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote...
Out of bounds read and write in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13830 High · 8.8 CWE-416 Jun 30, 2026
Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote...
Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: High)
CVE-2026-13829 High · 8.3 CWE-20 Jun 30, 2026
Insufficient validation of untrusted input in Settings in Google Chrome on Windows prior to 150.0...
Insufficient validation of untrusted input in Settings in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13828 Medium · 6.5 CWE-284 Jun 30, 2026
Improper Access Control in Google Chrome
Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13827 High · 7.8 CWE-416 Jun 30, 2026
Use after free in Updater in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker...
Use after free in Updater in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: High)
CVE-2026-13826 Medium · 6.5 CWE-346 Jun 30, 2026
Inappropriate implementation in Autofill in Google Chrome on Android prior to 150.0.7871.47...
Inappropriate implementation in Autofill in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13825 High · 8.8 CWE-457 Jun 30, 2026
Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...
Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13824 High · 7.5 CWE-20 Jun 30, 2026
Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a...
Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13823 High · 8.3 CWE-416 Jun 30, 2026
Use after free in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had...
Use after free in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13822 Medium · 6.5 CWE-346 Jun 30, 2026
Inappropriate implementation in Extensions in Google Chrome on Android prior to 150.0.7871.47...
Inappropriate implementation in Extensions in Google Chrome on Android prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension. (Chromium security severity: High)
CVE-2026-13821 High · 8.8 CWE-416 Jun 30, 2026
Use after free in Canvas in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...
Use after free in Canvas in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13820 Medium · 6.5 CWE-125 Jun 30, 2026
Out of bounds read in Skia in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote...
Out of bounds read in Skia in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13819 High · 8.1 CWE-125 Jun 30, 2026
Out-of-bounds Read in Google Chrome
Out of bounds read in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13818 Medium · 6.5 CWE-284 Jun 30, 2026
Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a...
Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13817 High · 8.8 CWE-20 Jun 30, 2026
Insufficient validation of untrusted input in Glic in Google Chrome prior to 150.0.7871.47...
Insufficient validation of untrusted input in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13816 Medium · 6.5 CWE-20 Jun 30, 2026
Insufficient validation of untrusted input in File Input in Google Chrome on Android prior to 150...
Insufficient validation of untrusted input in File Input in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13815 High · 8.8 CWE-416 Jun 30, 2026
Use after free in Blink in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...
Use after free in Blink in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)