Google vulnerabilities
Published CVEs affecting Google products: 4436 record(s), with severity, exploitation and fixes.
Chrome 3751Android 627Mcp Toolbox For Databases 14MCP Toolbox for Databases (googleapis/mcp-toolbox) 6Mcp-toolbox 5SAM 3gVisor 2Libjxl 2Keras 2Go-attestation 2OSV-SCALIBR 2Chrome-devtools-mcp 2Android Xr 2Cel-go 1Tink Java 1A2ui/web Core 1Common Expression Language 1Tink-Android 1Google-ADK 1Libvpx 1Turbinia 1Langfun 1Android Wear 1Nest 1Site Kit by Google 1Protobuf-javascript (aka Google-protobuf Npm Package) 1Mcp-toolbox-sdk-python 1Fuse-archive 1V8 1ADK TypeScript (@google/adk) 1Brotli 1Agent Development Kit (ADK) for Java 1Nest Wifi Pro Firmware 1Sentencepiece 1Protobuf 1Clasp 1Gemini-cli 1Run-gemini-cli 1Matter 1Cloud Build 1
CVE-2026-17712
High · 8.8
CWE-362 Jul 29, 2026
Race in Skia in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute...
Race in Skia in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17711
Critical · 9.6
CWE-362 Jul 29, 2026
Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who...
Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17710
Critical · 9.6
CWE-693 Jul 29, 2026
Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a...
Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17709
Critical · 9.6
CWE-362 Jul 29, 2026
Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who...
Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17708
Critical · 9.6
CWE-416 Jul 29, 2026
Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had...
Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17707
Medium · 6.5
CWE-457 Jul 29, 2026
Uninitialized Use in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote...
Uninitialized Use in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17706
Medium · 4.3
CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 151.0...
Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17705
High · 8.8
CWE-190 Jul 29, 2026
Integer Overflow or Wraparound in Google Chrome
Integer overflow in libxml in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17704
Critical · 9.6
CWE-416 Jul 29, 2026
Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had...
Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17703
Medium · 6.5
CWE-602 Jul 29, 2026
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17702
Low · 3.1
CWE-346 Jul 29, 2026
Inappropriate implementation in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote...
Inappropriate implementation in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17701
Critical · 9.6
CWE-125 Jul 29, 2026
Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922...
Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17700
Medium · 4.3
CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Actor in Google Chrome prior to 151.0.7922.72...
Insufficient validation of untrusted input in Actor in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17699
High · 8.6
CWE-416 Jul 29, 2026
Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a local attacker to...
Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
CVE-2026-17698
High · 7.5
CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 151.0.7922...
Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17697
Critical · 9.6
CWE-843 Jul 29, 2026
Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...
Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17696
Medium · 4.3
CWE-1300 Jul 29, 2026
Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a...
Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17695
Critical · 9.6
CWE-693 Jul 29, 2026
Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a...
Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17694
High · 8.8
CWE-416 Jul 29, 2026
Use after free in DOM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...
Use after free in DOM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17693
Medium · 4.3
CWE-346 Jul 29, 2026
Insufficient policy enforcement in FileSystem in Google Chrome prior to 151.0.7922.72 allowed a...
Insufficient policy enforcement in FileSystem in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17692
Critical · 9.6
CWE-416 Jul 29, 2026
Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a...
Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17691
Critical · 9.6
CWE-787 Jul 29, 2026
Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote...
Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17690
Medium · 6.5
CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in PDF in Google Chrome on Android prior to 151.0.7922...
Insufficient validation of untrusted input in PDF in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17689
Medium · 4.3
CWE-457 Jul 29, 2026
Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...
Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17688
Critical · 9.6
CWE-416 Jul 29, 2026
Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had...
Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)