Google vulnerabilities
Published CVEs affecting Google products: 4079 record(s), with severity, exploitation and fixes.
Chrome 3398Android 627Mcp Toolbox For Databases 14MCP Toolbox for Databases (googleapis/mcp-toolbox) 6Mcp-toolbox 5SAM 2Libjxl 2Keras 2gVisor 2Go-attestation 2OSV-SCALIBR 2Chrome-devtools-mcp 2Android Xr 2Site Kit by Google 1WearOS 1Fuse-archive 1Guava 1Google Devices 1Mcp-toolbox-sdk-python 1Nest 1Protobuf-javascript (aka Google-protobuf Npm Package) 1Tink Java 1Langfun 1Cel-go 1A2ui/web Core 1Common Expression Language 1Tink-Android 1Google-ADK 1Android Wear 1Turbinia 1Sentencepiece 1Security Operations Soar 1Nest Wifi Router Firmware 1Nest Wifi Point Firmware 1Nest Wifi Pro Firmware 1Web Designer 1Cloud Build 1Clasp 1Gerrit 1AngularJS 1
CVE-2026-56942
High · 8.8
CWE-787 Sep 15, 2026
Out-of-bounds Write in Google Android
In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56941
High · 8.4
CWE-693 Sep 15, 2026
In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a…
In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56932
Medium · 6.7
CWE-20 Sep 15, 2026
Improper Input Validation in Google Android
In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56923
Medium · 6.4
CWE-362 Sep 15, 2026
Race Condition in Google Android
In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56922
Medium · 6.7
CWE-441 Sep 15, 2026
In CPM, there is a possible permission bypass due to a confused deputy. This could lead…
In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56920
High · 8.8
CWE-787 Sep 15, 2026
Out-of-bounds Write in Google Android
In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56915
Medium · 6.4
CWE-362 Sep 15, 2026
Race Condition in Google Android
In bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56914
High · 8.4
CWE-416 Sep 15, 2026
Use After Free in Google Android
In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56907
Medium · 6.7
CWE-20 Sep 15, 2026
Improper Input Validation in Google Android
In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56892
Medium · 6.2
CWE-120 Sep 15, 2026
Classic Buffer Overflow in Google Android
In ReadDataElement of common.c, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56889
Medium · 6.7
CWE-190 Sep 15, 2026
Integer Overflow or Wraparound in Google Android
In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56888
Medium · 6.2
CWE-203 Sep 15, 2026
Observable Discrepancy in Google Android
In multiple locations, there is a possible permission bypass due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56882
High · 8.8
CWE-200 Sep 15, 2026
Exposure of Sensitive Information in Google Android
In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56881
High · 8.4
CWE-693 Sep 15, 2026
In enable_segment of remap.c, there is a possible permission bypass due to a logic error…
In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-56879
Medium · 6.7
CWE-441 Sep 15, 2026
In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a…
In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55366
Critical · 9.8
CWE-693 Sep 15, 2026
In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic…
In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55365
Medium · 6.7
CWE-787 Sep 15, 2026
Out-of-bounds Write in Google Android
In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55359
High · 7.8
CWE-693 Sep 15, 2026
In multiple locations, there is a possible permission bypass due to a logic error in the…
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55351
High · 7.8
CWE-190 Sep 15, 2026
Integer Overflow or Wraparound in Google Android
In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55343
High · 8.0
CWE-120 Sep 15, 2026
Classic Buffer Overflow in Google Android
In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
CVE-2026-55332
Medium · 6.7
CWE-20 Sep 15, 2026
Improper Input Validation in Google Android
In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55331
High · 8.8
CWE-120 Sep 15, 2026
Classic Buffer Overflow in Google Android
In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55323
High · 7.8
CWE-122 Sep 15, 2026
Heap-based Buffer Overflow in Google Android
In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55318
High · 8.8
CWE-362 Sep 15, 2026
Race Condition in Google Android
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55317
Medium · 6.7
CWE-20 Sep 15, 2026
Improper Input Validation in Google Android
In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.