Google vulnerabilities
Published CVEs affecting Google products: 4436 record(s), with severity, exploitation and fixes.
Chrome 3751Android 627Mcp Toolbox For Databases 14MCP Toolbox for Databases (googleapis/mcp-toolbox) 6Mcp-toolbox 5SAM 3gVisor 2Libjxl 2Keras 2Go-attestation 2OSV-SCALIBR 2Chrome-devtools-mcp 2Android Xr 2Cel-go 1Tink Java 1A2ui/web Core 1Common Expression Language 1Tink-Android 1Google-ADK 1Libvpx 1Turbinia 1Langfun 1Android Wear 1Nest 1Site Kit by Google 1Protobuf-javascript (aka Google-protobuf Npm Package) 1Mcp-toolbox-sdk-python 1Fuse-archive 1V8 1ADK TypeScript (@google/adk) 1Brotli 1Agent Development Kit (ADK) for Java 1Nest Wifi Pro Firmware 1Sentencepiece 1Protobuf 1Clasp 1Gemini-cli 1Run-gemini-cli 1Matter 1Cloud Build 1
CVE-2026-19172
High · 8.3
CWE-416 Aug 6, 2026
Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-19171
Critical · 9.6
CWE-416 Aug 6, 2026
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote...
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19170
Critical · 9.6
CWE-416 Aug 6, 2026
Use After Free in Google Chrome
Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-19169
High · 8.8
CWE-20 Aug 6, 2026
Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0...
Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19168
High · 8.8
CWE-693 Aug 6, 2026
Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote...
Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19167
Low · 3.1
CWE-190 Aug 6, 2026
Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19166
Critical · 9.6
CWE-416 Aug 6, 2026
Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote...
Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19165
High · 7.5
CWE-416 Aug 6, 2026
Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who...
Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: High)
CVE-2026-19164
Critical · 9.6
CWE-20 Aug 6, 2026
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109...
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19163
High · 8.3
CWE-416 Aug 6, 2026
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote...
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19162
High · 8.8
CWE-787 Aug 6, 2026
Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...
Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19161
Low · 3.1
CWE-457 Aug 6, 2026
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19160
Low · 3.1
CWE-457 Aug 6, 2026
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19159
High · 7.5
CWE-416 Aug 6, 2026
Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19158
High · 7.5
CWE-416 Aug 6, 2026
Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote...
Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19157
Critical · 9.6
CWE-787 Aug 6, 2026
Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...
Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-19156
High · 7.5
CWE-122 Aug 6, 2026
Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who...
Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)
CVE-2026-19155
High · 8.3
CWE-416 Aug 6, 2026
Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19154
High · 8.3
CWE-416 Aug 6, 2026
Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...
Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-19153
High · 8.1
CWE-20 Aug 6, 2026
Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109...
Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19152
High · 8.3
CWE-693 Aug 6, 2026
Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a...
Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19151
High · 8.8
CWE-416 Aug 6, 2026
Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...
Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19150
High · 8.8
CWE-693 Aug 6, 2026
Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote...
Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19149
Critical · 9.6
CWE-416 Aug 6, 2026
Use After Free in Google Chrome
Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-19148
High · 8.3
CWE-787 Aug 6, 2026
Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote...
Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)