Vulnerabilities in google
7,003 resultsCVE-2023-21359—In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the BEPSS 0.1%CVE-2023-21304—In Content Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informaEPSS 0.1%CVE-2023-21313—In Core, there is a possible way to forward calls without user knowledge due to a missing permission check. This could lead to local escalatEPSS 0.1%CVE-2023-35653—In TBD of TBD, there is a possible way to access location information due to a permissions bypass. This could lead to local information discEPSS 0.1%CVE-2024-27231MEDIUMIn tmu_get_tr_stats of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disEPSS 0.1%CVE-2025-26431HIGHIn setupAccessibilityServices of AccessibilityFragment.java, there is a possible way to hide an enabled accessibility service due to a logicEPSS 0.1%CVE-2024-22012HIGHthere is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional eEPSS 0.1%CVE-2024-34733HIGHIn DevmemXIntMapPages of devicemem_server.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to locEPSS 0.1%CVE-2023-40124MEDIUMIn multiple locations, there is a possible cross-user read due to a confused deputy. This could lead to local information disclosure of photEPSS 0.1%CVE-2024-27211HIGHIn AtiHandleAPOMsgType of ati_Main.c, there is a possible OOB write due to a missing null check. This could lead to local escalation of privEPSS 0.1%CVE-2026-28607HIGHIn multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could leadEPSS 0.1%CVE-2026-28614HIGHIn onCreate of SlicePermissionActivity.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalaEPSS 0.1%CVE-2026-106279HIGHIncorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised tEPSS 0.1%CVE-2023-40085LOWIn convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to locEPSS 0.1%CVE-2026-58848HIGHIn multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalEPSS 0.1%CVE-2026-106313MEDIUMIncorrect authorization in Browser in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineerEPSS 0.1%CVE-2026-0118HIGHIn oobconfig, there is a possible bypass of carrier restrictions due to a logic error. This could lead to local escalation of privilege withEPSS 0.1%CVE-2026-28663HIGHIn buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL BypassEPSS 0.1%CVE-2024-34748HIGHIn _DevmemXReservationPageAddress of devicemem_server.c, there is a possible use-after-free due to improper casting. This could lead to locaEPSS 0.1%CVE-2025-48636HIGHIn openFile of BugreportContentProvider.java, there is a possible way to read and write unauthorized files due to a path traversal error. ThEPSS 0.1%