Skip to content

Google · weakness class

Denial of Service

337 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
1

Every one of the 337 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors relate…CVE-2013-2842Google · 12% likely

    CWE-399

  2. Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this librar…CVE-2018-10237Google · 8.4% likely

    CWE-770

  3. Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrar…CVE-2010-0655Google · 7.5% likely

    CWE-399

  4. Use-after-free vulnerability in the SVG implementation in WebKit, as used in Google Chrome before 22.0.1229.94, allows remote attackers to execute arbitrary code via unspecified v…CVE-2012-5112Google · 4.6% likely

    CWE-399

  5. The tooltip manager (chrome/views/tooltip_manager.cc) in Google Chrome 0.2.149.29 Build 1798 and possibly other versions before 0.2.149.30 allows remote attackers to cause a denia…CVE-2008-7061Google · 4.3% likely

    CWE-399

  6. The GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows man-in-the-middle attackers to cause…CVE-2016-5348Google · 4.0% likely

    CWE-399

  7. Use-after-free vulnerability in Google Chrome before 19.0.1084.52 allows remote attackers to execute arbitrary code via vectors related to the browser cache.CVE-2011-3108Google · 3.5% likely

    CWE-399

  8. Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involv…CVE-2011-3086Google · 3.3% likely

    CWE-399

  9. The image decoder in WebKit before r52833, as used in Google Chrome before 4.0.249.78, does not properly handle a failure of memory allocation, which allows remote attackers to ex…CVE-2010-0659Google · 3.2% likely

    CWE-399

  10. Google Chrome 1.0.154.53 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a throw statement with a long exception value.CVE-2009-1514Google · 2.8% likely

    CWE-399

  11. Stack overflow in Protocol Buffers Java LiteCVE-2024-7254Google · CVSS 8.7 · 2.8% likely

    CWE-400

  12. Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involv…CVE-2011-3089Google · 2.6% likely

    CWE-399

  13. Use-after-free vulnerability in the PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other…CVE-2011-3099Google · 2.5% likely

    CWE-399

  14. Use-after-free vulnerability in International Components for Unicode (ICU), as used in Google Chrome before 30.0.1599.66 and other products, allows remote attackers to cause a den…CVE-2013-2924Google · 2.5% likely

    CWE-399

  15. libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might allow remote attackers to cause a denial of service (applica…CVE-2012-2870Google · 2.5% likely

    CWE-399

  16. Google Chrome 0.2.149.29 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a "printing DoS at…CVE-2008-7246Google · 2.4% likely

    CWE-399

  17. Multiple use-after-free vulnerabilities in the layout implementation in Blink, as used in Google Chrome before 33.0.1750.117, allow remote attackers to cause a denial of service o…CVE-2013-6658Google · 2.3% likely

    CWE-399

  18. Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote servers to execute arbitrary code via crafted response traffic after a URL request.CVE-2013-2870Google · 2.3% likely

    CWE-399

  19. Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified…CVE-2011-3091Google · 2.2% likely

    CWE-399

  20. In bta_scan_results_cb_impl of btif_ble_scanner.cc, there is possible resource exhaustion if a large number of repeated BLE scan results are received. This could lead to a remote…CVE-2017-13211Google Inc. · 2.2% likely

    CWE-400

  21. In several places in ihevcd_decode.c, a dead loop could occur due to incomplete frames which could lead to memory leaks. This could lead to a remote denial of service of a critica…CVE-2017-13196Google Inc. · 2.2% likely

    CWE-772

  22. In ihevcd_decode.c there is a possible infinite loop due to bytes for an sps of unsupported resolution resulting in the same sps being fed in over and over. This could lead to a r…CVE-2017-13193Google Inc. · 2.2% likely

    CWE-835

  23. The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not i…CVE-2014-7940Google · 2.1% likely

    CWE-399

  24. The PDF functionality in Google Chrome before 24.0.1312.52 does not properly perform a cast of an unspecified variable during processing of the root of the structure tree, which a…CVE-2013-0828Google · 2.0% likely

    CWE-399

  25. Use-after-free vulnerability in the Pepper plugins in Google Chrome before 39.0.2171.65 allows remote attackers to cause a denial of service or possibly have unspecified other imp…CVE-2014-7906Google · 1.9% likely

    CWE-399

  26. Use-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics/SVGImage.cpp in the SVG implementation in Blink, as used in Google Chrome before 33.0.…CVE-2013-6663Google · 1.8% likely

    CWE-399

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.