Google

Records17248All Threatist records

Exploited (KEV)99In CISA KEV

CVSS critical1626CVSS 9.0–10.0

CVSS high7971CVSS 7.0–8.9

Exploited now

Google records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-42236 Google Pixel Improper Authorization Vulnerability CRITICAL 97KEV 2026-09-16 TI-2026-59711 Google Chromium V8 Out of Bounds Write Vulnerability CRITICAL 97KEV 2026-09-09 TI-2026-58426 Google Chromium V8 Type Confusion Vulnerability CRITICAL 97KEV 2026-09-04 TI-2026-10055 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability CRITICAL 97KEV 2026-06-09 TI-2025-30872 Android Framework Integer Overflow Vulnerability CRITICAL 96KEV 2026-06-02

Components

Products in the NVD configurations · select one to filter the records

Android 8411 records CRITICAL Chrome 7587 records CRITICAL Tensorflow 431 records HIGH Chrome Os 67 records HIGH V8 34 records CRITICAL Asylo 16 records MEDIUM Blink 12 records MEDIUM Mcp Toolbox For Databases 11 records MEDIUM

Records

12 records in Blink · all components

TI-2011-02043 CVE-2011-2337 · GHSA-3ccx-q8q7-xf6x

A wrong type is used for a return value from strlen in WebKit in Google Chrome before Blink M12 on 64-bit platforms.

MEDIUM 44

A wrong type is used for a return value from strlen in WebKit in Google Chrome before Blink M12 on 64-bit platforms.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00809 Published 2019-11-07 No fix listed CWE-704

TI-2011-01282 CVE-2011-1460 · GHSA-4hxv-57v2-52jp

WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks.

MEDIUM 44

WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00914 Published 2019-11-05 No fix listed CWE-704

TI-2011-02041 CVE-2011-2335 · GHSA-7pfw-rp8m-2c7m

A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector function.

LOW 34

A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00605 Published 2019-11-12 No fix listed CWE-415

TI-2011-01139 CVE-2011-1298 · GHSA-9m9p-5rp9-q72v

An Integer Overflow exists in WebKit in Google Chrome before Blink M11 in the macOS…

LOW 34

An Integer Overflow exists in WebKit in Google Chrome before Blink M11 in the macOS WebCore::GraphicsContext::fillRect function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00864 Published 2019-11-06 No fix listed CWE-190

TI-2011-02465 CVE-2011-2808 · GHSA-7rmf-f3fj-4gh7

Improper input validation in Google Chrome

LOW 31

A stale layout root is set as an input element in WebKit in Google Chrome before Blink M13 when a child of a keygen with autofocus is accessed.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00972 Published 2019-11-06 No fix listed CWE-20

TI-2011-02058 CVE-2011-2353 · GHSA-5g8w-4pxv-9r69

Use after free in Google Chrome

LOW 30

Use after free vulnerability in documentloader in WebKit in Google Chrome before Blink M13 in DocumentWriter::replaceDocument function.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00676 Published 2019-11-07 No fix listed CWE-416

TI-2011-02042 CVE-2011-2336 · GHSA-85wx-jj2j-45cm

Improper handling of exceptional conditions in Google Chrome

LOW 30

An issue exists in WebKit in Google Chrome before Blink M12.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00605 Published 2019-11-07 No fix listed CWE-755

TI-2011-01578 CVE-2011-1802 · GHSA-wwc8-gxf2-3q24

NULL pointer dereference in Google Chrome

LOW 30

WebKit in Google Chrome before Blink M11 and M12 does not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption).

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00617 Published 2019-11-12 No fix listed CWE-476

TI-2011-01281 CVE-2011-1459 · GHSA-f5v9-gx6m-f8qq

The WebKit::WebPluginContainerImpl::handleEvent function in Google Chrome before Blink…

LOW 30

The WebKit::WebPluginContainerImpl::handleEvent function in Google Chrome before Blink M11 allows an attacker to cause a denial of service (crash) via the htmlpluginelement.cpp plugin.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00654 Published 2019-11-05 No fix listed CWE-400

TI-2011-02464 CVE-2011-2807 · GHSA-v6jg-j6xh-j95v

Incorrect handling of timer information in Timer.cpp in WebKit in Google Chrome before Blink M13.

LOW 29

Incorrect handling of timer information in Timer.cpp in WebKit in Google Chrome before Blink M13.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00471 Published 2019-11-07 No fix listed CWE-755

TI-2011-02040 CVE-2011-2334 · GHSA-576h-8966-v2qv

Use after free in Google Chrome

LOW 29

Use after free vulnerability exists in WebKit in Google Chrome before Blink M12 in RenderLayerwhen removing elements with reflections.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00471 Published 2019-11-12 No fix listed CWE-416

TI-2011-01579 CVE-2011-1803 · GHSA-gr6g-35w9-33vr

Double free in Google Chrome

LOW 29

An issue exists in third_party/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Blink M11 and M12 when trying to access a removed smil element.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00471 Published 2019-11-12 No fix listed CWE-415

Open these records in search →

Critical	1626
High	7971
Medium	7211
Low	391
No CVSS	49