CVE Intelligence

Google vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Google products: 4079 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-56942 High · 8.8 CWE-787 Sep 15, 2026
Out-of-bounds Write in Google Android
In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56941 High · 8.4 CWE-693 Sep 15, 2026
In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a…
In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56932 Medium · 6.7 CWE-20 Sep 15, 2026
Improper Input Validation in Google Android
In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56923 Medium · 6.4 CWE-362 Sep 15, 2026
Race Condition in Google Android
In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56922 Medium · 6.7 CWE-441 Sep 15, 2026
In CPM, there is a possible permission bypass due to a confused deputy. This could lead…
In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56920 High · 8.8 CWE-787 Sep 15, 2026
Out-of-bounds Write in Google Android
In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56915 Medium · 6.4 CWE-362 Sep 15, 2026
Race Condition in Google Android
In bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56914 High · 8.4 CWE-416 Sep 15, 2026
Use After Free in Google Android
In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56907 Medium · 6.7 CWE-20 Sep 15, 2026
Improper Input Validation in Google Android
In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56892 Medium · 6.2 CWE-120 Sep 15, 2026
Classic Buffer Overflow in Google Android
In ReadDataElement of common.c, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56889 Medium · 6.7 CWE-190 Sep 15, 2026
Integer Overflow or Wraparound in Google Android
In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56888 Medium · 6.2 CWE-203 Sep 15, 2026
Observable Discrepancy in Google Android
In multiple locations, there is a possible permission bypass due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56882 High · 8.8 CWE-200 Sep 15, 2026
Exposure of Sensitive Information in Google Android
In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56881 High · 8.4 CWE-693 Sep 15, 2026
In enable_segment of remap.c, there is a possible permission bypass due to a logic error…
In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56879 Medium · 6.7 CWE-441 Sep 15, 2026
In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a…
In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55366 Critical · 9.8 CWE-693 Sep 15, 2026
In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic…
In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55365 Medium · 6.7 CWE-787 Sep 15, 2026
Out-of-bounds Write in Google Android
In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55359 High · 7.8 CWE-693 Sep 15, 2026
In multiple locations, there is a possible permission bypass due to a logic error in the…
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55351 High · 7.8 CWE-190 Sep 15, 2026
Integer Overflow or Wraparound in Google Android
In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55343 High · 8.0 CWE-120 Sep 15, 2026
Classic Buffer Overflow in Google Android
In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
CVE-2026-55332 Medium · 6.7 CWE-20 Sep 15, 2026
Improper Input Validation in Google Android
In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55331 High · 8.8 CWE-120 Sep 15, 2026
Classic Buffer Overflow in Google Android
In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55323 High · 7.8 CWE-122 Sep 15, 2026
Heap-based Buffer Overflow in Google Android
In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55318 High · 8.8 CWE-362 Sep 15, 2026
Race Condition in Google Android
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55317 Medium · 6.7 CWE-20 Sep 15, 2026
Improper Input Validation in Google Android
In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.