Google

Records17248All Threatist records

Exploited (KEV)99In CISA KEV

CVSS critical1626CVSS 9.0–10.0

CVSS high7971CVSS 7.0–8.9

Exploited now

Google records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-42236 Google Pixel Improper Authorization Vulnerability CRITICAL 97KEV 2026-09-16 TI-2026-59711 Google Chromium V8 Out of Bounds Write Vulnerability CRITICAL 97KEV 2026-09-09 TI-2026-58426 Google Chromium V8 Type Confusion Vulnerability CRITICAL 97KEV 2026-09-04 TI-2026-10055 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability CRITICAL 97KEV 2026-06-09 TI-2025-30872 Android Framework Integer Overflow Vulnerability CRITICAL 96KEV 2026-06-02

Components

Products in the NVD configurations · select one to filter the records

Android 8411 records CRITICAL Chrome 7587 records CRITICAL Tensorflow 431 records HIGH Chrome Os 67 records HIGH V8 34 records CRITICAL Asylo 16 records MEDIUM Blink 12 records MEDIUM Mcp Toolbox For Databases 11 records MEDIUM

Records

8 records in Mini Search Appliance · all components

TI-2005-03551 CVE-2005-3757 · GHSA-794r-h374-p262

The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search…

MEDIUM 61

The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive information and execute arbitrary code via dangerous Java class methods in select a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.4125 Published 2005-11-22 No fix listed

TI-2005-03552 CVE-2005-3758 · GHSA-jhj4-7hpf-cgpg

Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly…

LOW 38

Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via a proxyst…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.1911 Published 2005-11-22 No fix listed

TI-2006-04835 CVE-2006-5019 · GHSA-22wf-v4rq-wv6g

Google Mini 4.4.102.M.36 and earlier allows remote attackers to obtain sensitive…

LOW 30

Google Mini 4.4.102.M.36 and earlier allows remote attackers to obtain sensitive information via a direct request for /search with an invalid client parameter, which reveals the path in an error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04139 Published 2006-09-27 No fix listed

TI-2005-03549 CVE-2005-3755 · GHSA-7v8f-p668-mq6v

Directory traversal vulnerability in Google Mini Search Appliance, and possibly Google…

LOW 29

Directory traversal vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to determine the existence of arbitrary files via a relative path from a style sheet direct…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03599 Published 2005-11-22 No fix listed

TI-2005-03550 CVE-2005-3756 · GHSA-3xhg-f42j-mq9r

Google Mini Search Appliance, and possibly Google Search Appliance, allows remote…

LOW 27

Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to port scan arbitrary hosts via URLs with modified targets and ports, then comparing the resulting error messages to determine…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01848 Published 2005-11-22 No fix listed

TI-2006-05987 CVE-2006-6223 · GHSA-pm73-cpw4-m5p4

Cross-site scripting (XSS) vulnerability in Google Search Appliance and Google Mini…

LOW 26

Cross-site scripting (XSS) vulnerability in Google Search Appliance and Google Mini allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded q parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03064 Published 2006-12-02 No fix listed

TI-2007-05060 CVE-2007-5255 · GHSA-x859-c3r4-93fq

Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance 3.4.14 allows…

LOW 25

Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance 3.4.14 allows remote attackers to inject arbitrary web script or HTML via the ie parameter to the /search URI.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02692 Published 2007-10-06 No fix listed CWE-79

TI-2005-03548 CVE-2005-3754 · GHSA-g3r4-vfx7-4frf

Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly…

LOW 24

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02283 Published 2005-11-22 No fix listed

Open these records in search →

Critical	1626
High	7971
Medium	7211
Low	391
No CVSS	49