Google: CVE Program partner

CVEs, 365 days47325 all time, 38 rejected

Quality100%median 99%

CVSS by the CNA100%share of records

CWE100%share of records

Affected versions100%not n/a or unspecified

CVSS added by CISA0%lower is better

Organisation	Google LLC
Role	Root, CNA
Type	Vendor, Open Source, Researcher
Reports to	mitre
Scope	<strong>Root Scope:</strong> Alphabet organizations.<br/><strong>CNA Scope:</strong> Google products, including open source software published and maintained by Google, and vulnerabilities in third-party software discovered by Google that are not in another CNA’s scope.
Advisories	https://cloud.google.com/support/bulletins

Partner	CVEs 1y	90 days	Quality	CVSS	CWE	Versions	CVSS by CISA	Last
Chrome Chrome · Vendor, Open Source, Researcher	3,325	1,561	59%	0%	77%	100%	100%	2026-10-15
google_android Android (associated with Google Inc. or Open Handset Alliance) · Vendor, Open Source, Researcher	318	117	35%	5%	0%	100%	94%	2026-10-05
Google_Devices Google Devices · Vendor	187	105	33%	1%	0%	100%	98%	2026-10-06
Go Go Project · Vendor, Open Source	124	31	33%	0%	1%	100%	100%	2026-10-08
GoogleCloud Google Cloud · Vendor	52	17	100%	100%	100%	100%	0%	2026-10-14
Mandiant Mandiant Inc. · Researcher, Vendor	19	11	89%	68%	100%	100%	31%	2026-10-01
ChromeOS ChromeOS Project · Vendor, Bug Bounty Provider	0	0	-	-	-	-	-	2025-07-07

CVE-2026-110914 2026-10-15 · Chrome
Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a cr
CVE-2026-110915 2026-10-15 · Chrome
Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML
CVE-2026-110916 2026-10-15 · Chrome
Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox
CVE-2026-110920 2026-10-15 · Chrome
Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-110921 2026-10-15 · Chrome
Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Ch
CVE-2026-110917 2026-10-15 · Chrome
Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity:
CVE-2026-110918 2026-10-15 · Chrome
Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity:
CVE-2026-110919 2026-10-15 · Chrome
Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Ch
CVE-2026-110913 2026-10-15 · Chrome
Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-110922 2026-10-15 · Chrome
Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pa
CVE-2026-85298 2026-10-14 · GoogleCloud · CVSS 7.3
An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior t
CVE-2026-110142 2026-10-13 · Chrome
Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML
CVE-2026-110171 2026-10-13 · Chrome
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-110167 2026-10-13 · Chrome
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-110155 2026-10-13 · Chrome
Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
CVE-2026-110154 2026-10-13 · Chrome
Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafte
CVE-2026-110147 2026-10-13 · Chrome
Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C
CVE-2026-110157 2026-10-13 · Chrome
Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C
CVE-2026-110138 2026-10-13 · Chrome
Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary
CVE-2026-110141 2026-10-13 · Chrome
Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium s
CVE-2026-110163 2026-10-13 · Chrome
Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C
CVE-2026-110164 2026-10-13 · Chrome
Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted H
CVE-2026-110172 2026-10-13 · Chrome
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-110139 2026-10-13 · Chrome
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
CVE-2026-110168 2026-10-13 · Chrome
Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Ch

All CVE Program partners

Google

Reports to Google (7)

Latest CVEs (this partner and the CNAs under it) · RSS