CVE Intelligence

Google vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Google products: 4436 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-19172 High · 8.3 CWE-416 Aug 6, 2026
Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-19171 Critical · 9.6 CWE-416 Aug 6, 2026
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote...
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19170 Critical · 9.6 CWE-416 Aug 6, 2026
Use After Free in Google Chrome
Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-19169 High · 8.8 CWE-20 Aug 6, 2026
Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0...
Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19168 High · 8.8 CWE-693 Aug 6, 2026
Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote...
Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19167 Low · 3.1 CWE-190 Aug 6, 2026
Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19166 Critical · 9.6 CWE-416 Aug 6, 2026
Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote...
Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19165 High · 7.5 CWE-416 Aug 6, 2026
Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who...
Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: High)
CVE-2026-19164 Critical · 9.6 CWE-20 Aug 6, 2026
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109...
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19163 High · 8.3 CWE-416 Aug 6, 2026
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote...
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19162 High · 8.8 CWE-787 Aug 6, 2026
Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...
Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19161 Low · 3.1 CWE-457 Aug 6, 2026
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19160 Low · 3.1 CWE-457 Aug 6, 2026
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19159 High · 7.5 CWE-416 Aug 6, 2026
Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19158 High · 7.5 CWE-416 Aug 6, 2026
Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote...
Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19157 Critical · 9.6 CWE-787 Aug 6, 2026
Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...
Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-19156 High · 7.5 CWE-122 Aug 6, 2026
Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who...
Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)
CVE-2026-19155 High · 8.3 CWE-416 Aug 6, 2026
Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19154 High · 8.3 CWE-416 Aug 6, 2026
Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...
Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-19153 High · 8.1 CWE-20 Aug 6, 2026
Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109...
Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19152 High · 8.3 CWE-693 Aug 6, 2026
Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a...
Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19151 High · 8.8 CWE-416 Aug 6, 2026
Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...
Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19150 High · 8.8 CWE-693 Aug 6, 2026
Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote...
Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19149 Critical · 9.6 CWE-416 Aug 6, 2026
Use After Free in Google Chrome
Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-19148 High · 8.3 CWE-787 Aug 6, 2026
Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote...
Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)