Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how google compares to other vendors in security performance

View Risk Score →

Software

google chrome
2804
google android
2665
google chrome (trace event)
1052
google google chrome
376
google chrome os
77
google tensorflow
56
google v8
37
google chromium v8
36
google chrome for android
26
google google chrome for android
17
google google chrome (windows)
12
google skia
12
google google chrome for macos
11
google google chrome (macos)
10
google products
10
google chromium
9
google angle
7
google chrome android
7
google google chrome for ios
7
google mcp toolbox for databases
6
google nexus 9
6
google chrome for ios
5
google chromeos
5
google go
5
google google chrome (linux)
5
google google chrome for windows
5
google pdfium
5
google pixel c
5
google blink
4
google chrome (android)
4
google chrome for macos
4
google chrome on android
4
google nest cam iq
4
google nest cam iq indoor firmware
4
google nexus 5
4
google angular
3
google app engine python sdk
3
google chrome (windows)
3
google fuchsia
3
google guest-oslogin
3
google looker studio
3
google mcp-toolbox
3
google nexus 5x
3
google nexus 6p firmware
3
google protobuf-java
3
google android bluetooth
2
google android fastboot
2
google angularjs
2
google asylo
2
google chrome (chromium)
2

Google Compute EngineMissing Authorization in Compute Engine allows Cross-Project Disk Exfiltration

Risk 44
Severity
8.3
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear

A Missing Authorization vulnerability in the disks.createSnapshot and regionDisks.createSnapshot APIs in Google Compute Engine versions prior to 2026-08-31 on Google Cloud Platform allows an authenticated attacker to exfiltrate cross-project disk data.

This vulnerability was patched on 31 August 2026, and no customer action is needed.

First published (updated )
CVE-2026-85299

Google Cloud Run MCPBucket Squatting in Cloud Run MCP leads to Service Account Takeover

Risk 71
Severity
7.7
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber

Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data.

Users must upgrade to Cloud Run MCP version 1.11.0 or later.

First published (updated )
CVE-2026-85297

Google ChromeHigh Improper input validation in FileSystem

Risk 77
Severity
8.8
Input Validation
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113175: Improper input validation

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113175

Google ChromeHigh Use after free in SVG

Risk 77
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113339: Use after free

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113339

Google Google ChromeCritical Memory corruption in Paint

Risk 77
Severity
8.8
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113280: Memory corruption

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113280

Google ChromeCritical Use after free in Accessibility

Risk 77
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113271: Use after free

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113271

Google ChromeCritical Memory corruption in Accessibility

Risk 77
Severity
8.8
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113279: Memory corruption

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113279

Google Cloud ShellCross-Site WebSocket Hijacking in Google Cloud Shell

Risk 78
Severity
8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear

A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an unauthenticated attacker to hijack an active Cloud Shell session and exfiltrate the user's OAuth access token using a cross-origin WebSocket request.

This vulnerability was patched on 22 July 2026, and no customer action is needed.

First published (updated )
CVE-2026-85267

Google ChromeUse after free in Input on 2026-10-12

Risk 77
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-112993: Use after free

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-112993

Google ChromeMemory corruption in Paint on 2026-10-11

Risk 77
Severity
8.8
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113000: Memory corruption

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113000

Google ChromeUse after free in Turbolev on 2026-10-05

Risk 77
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113019: Use after free

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113019

Google ChromeImproper input validation in GPU on 2026-10-01

Risk 77
Severity
8.8
Input Validation
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113012: Improper input validation

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113012

Google ChromeImproper input validation in Proxy on 2026-10-02

Risk 77
Severity
8.8
Input Validation
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113040: Improper input validation

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113040

Google Google ChromeUse after free in Turbolev on 2026-09-28

Risk 77
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113338: Use after free

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113338

Google ChromeMemory corruption in WebRTC on 2026-10-15

Risk 77
Severity
8.8
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113303: Memory corruption

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113303

Google Google ChromeHigh Use after free in WebUI on 2026-08-22

Risk 77
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113058: Use after free

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113058

Google ChromeMemory corruption in V8 on 2026-10-02

Risk 77
Severity
8.8
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113192: Memory corruption

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113192

Google Google ChromeOut of bounds read in Focus on 2026-10-05

Risk 77
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113095: Out of bounds read

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113095

Google ChromeHigh Use after free in FileSystem on 2026-06-20

Risk 77
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113097: Use after free

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113097

Google ChromeUse after free in ReadingMode on 2026-10-06

Risk 77
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113274: Use after free

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113274

Google ChromeMedium Use after free in Input

Risk 77
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113068: Use after free

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113068

Google ChromeMemory corruption in Canvas on 2026-10-04

Risk 77
Severity
8.8
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113154: Memory corruption

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113154

Google ChromeMemory corruption in Frames on 2026-07-16

Risk 77
Severity
8.8
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113104: Memory corruption

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113104

Google ChromeMemory corruption in PDF on 2026-10-10

Risk 33
Severity
7
Buffer Overflow

Chromium CVE-2026-113212: Memory corruption

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113212

Google ChromeUse after free in Canvas on 2026-08-26

Risk 77
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113253: Use after free

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113253

Google ChromeUse after free in Paint on 2026-10-12

Risk 77
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113179: Use after free

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113179

Google ChromeUse after free in Navigation on 2026-10-04

Risk 77
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113181: Use after free

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113181

Google ChromeImproper input validation in Input on 2026-09-29

Risk 77
Severity
8.8
Input Validation
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113086: Improper input validation

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113086

Google ChromeUse after free in WebRTC on 2026-10-02

Risk 77
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113161: Use after free

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113161

Google ChromeUse after free in Turbolev on 2026-10-05

Risk 77
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113160: Use after free

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-113160

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203