CVE Intelligence

Google vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Google products: 4436 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-17712 High · 8.8 CWE-362 Jul 29, 2026
Race in Skia in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute...
Race in Skia in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17711 Critical · 9.6 CWE-362 Jul 29, 2026
Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who...
Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17710 Critical · 9.6 CWE-693 Jul 29, 2026
Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a...
Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17709 Critical · 9.6 CWE-362 Jul 29, 2026
Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who...
Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17708 Critical · 9.6 CWE-416 Jul 29, 2026
Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had...
Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17707 Medium · 6.5 CWE-457 Jul 29, 2026
Uninitialized Use in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote...
Uninitialized Use in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17706 Medium · 4.3 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 151.0...
Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17705 High · 8.8 CWE-190 Jul 29, 2026
Integer Overflow or Wraparound in Google Chrome
Integer overflow in libxml in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17704 Critical · 9.6 CWE-416 Jul 29, 2026
Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had...
Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17703 Medium · 6.5 CWE-602 Jul 29, 2026
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17702 Low · 3.1 CWE-346 Jul 29, 2026
Inappropriate implementation in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote...
Inappropriate implementation in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17701 Critical · 9.6 CWE-125 Jul 29, 2026
Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922...
Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17700 Medium · 4.3 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Actor in Google Chrome prior to 151.0.7922.72...
Insufficient validation of untrusted input in Actor in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17699 High · 8.6 CWE-416 Jul 29, 2026
Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a local attacker to...
Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
CVE-2026-17698 High · 7.5 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 151.0.7922...
Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17697 Critical · 9.6 CWE-843 Jul 29, 2026
Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...
Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17696 Medium · 4.3 CWE-1300 Jul 29, 2026
Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a...
Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17695 Critical · 9.6 CWE-693 Jul 29, 2026
Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a...
Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17694 High · 8.8 CWE-416 Jul 29, 2026
Use after free in DOM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...
Use after free in DOM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17693 Medium · 4.3 CWE-346 Jul 29, 2026
Insufficient policy enforcement in FileSystem in Google Chrome prior to 151.0.7922.72 allowed a...
Insufficient policy enforcement in FileSystem in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17692 Critical · 9.6 CWE-416 Jul 29, 2026
Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a...
Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17691 Critical · 9.6 CWE-787 Jul 29, 2026
Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote...
Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17690 Medium · 6.5 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in PDF in Google Chrome on Android prior to 151.0.7922...
Insufficient validation of untrusted input in PDF in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17689 Medium · 4.3 CWE-457 Jul 29, 2026
Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...
Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17688 Critical · 9.6 CWE-416 Jul 29, 2026
Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had...
Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)