Search CVEs, research… / diras.sa

VENDOR

Google vulnerabilities: CVEs, exploitation and patches

Every Google CVE reviewed by Diras Labs analysts, newest first, with exploitation status and fixes.

  1. CVE-2026-84324
    Chrome Proxy use-after-free allows remote code execution Google Chrome ·
    • PATCH AVAILABLE
    CRITICAL 9
  2. CVE-2026-87613
    Chrome incorrect reference resolution in Extensions allows remote code execution Google Chrome ·
    • PATCH AVAILABLE
    CRITICAL 9
  3. CVE-2026-85043
    Chrome network cleanup bypass allows remote system access bypass Google Chrome ·
    • PATCH AVAILABLE
    CRITICAL 9.1
  4. CVE-2026-0163
    Android kernel use-after-free lets remote attackers escalate privileges Google Android ·
    • PoC PUBLIC
    CRITICAL 9.8
  5. CVE-2026-79090
    Chrome improper privilege management lets remote attacker bypass access Google Chrome ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  6. CVE-2026-79152
    Chrome CustomTabs authorization bypass via co-installed app Google Chrome ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  7. CVE-2026-84325
    Chrome DataTransfer input validation bypass allows system-access bypass Google Chrome ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  8. CVE-2026-28606
    Android pairing bypass lets remote attacker escalate privileges Google Android ·
    CRITICAL 9.8
  9. CVE-2026-49921
    Android heap buffer overflow remote code execution Google Android ·
    CRITICAL 9.8
  10. CVE-2026-58822
    Android ftsmooth improper casting remote code execution Google Android ·
    CRITICAL 9.8
  11. CVE-2026-87534
    Chrome WebView missing authorization allows bypass via crafted network traffic Google Chrome ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  12. CVE-2026-87544
    Chrome incorrect authorization allows access to privileged Extensions page Google Chrome ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  13. CVE-2026-87595
    Chrome server-side request forgery in Mobile via crafted HTML Google Chrome ·
    • PATCH AVAILABLE
    CRITICAL 9.8
  14. CVE-2026-55366
    Android kernel IMS authentication bypass remote privilege escalation Google Android ·
    CRITICAL 9.8
  15. CVE-2026-56960
    Android kernel use-after-free remote privilege escalation Google Android ·
    CRITICAL 9.8
  16. CVE-2026-78906
    Chrome ANGLE race condition remote code execution Google Chrome ·
    • PoC PUBLIC
    • PATCH AVAILABLE
    HIGH 7.5
  17. CVE-2026-85045
    Chrome V8 race condition allows remote code execution Google Chrome ·
    • PoC PUBLIC
    • PATCH AVAILABLE
    HIGH 7.5
  18. CVE-2026-49881
    Android InCallController logic error local privilege escalation Google Android ·
    • PoC PUBLIC
    HIGH 7.8
  19. CVE-2026-85048
    Chrome use-after-free in Compositing allows renderer escape and code execution Google Chrome ·
    • PoC PUBLIC
    • PATCH AVAILABLE
    HIGH 8.3
  20. CVE-2026-14431
    Chrome V8 type confusion lets remote code execution Google Chrome ·
    • PoC PUBLIC
    • PATCH AVAILABLE
    HIGH 8.8
20 CVEs · page 1 of 2