CVEs
Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.
Google has 14,498 CVEs, 87 exploited. Pick a weakness or a product to list them.
By weakness
- Memory Corruption6,128 · 69 exploited
- Access Control2,294 · 4 exploited
- Input Validation and Logic1,755 · 5 exploited
- Information Disclosure817
- Misconfiguration and Insecure Design373 · 1 exploited
- Race Conditions362 · 1 exploited
- Denial of Service337
- Other weaknesses171
- Cross-site Scripting145
- Authentication129 · 1 exploited
- Cryptography128 · 1 exploited
- File and Path Handling83
- Command and Code Injection62
- Injection and Smuggling50 · 1 exploited
- Server-Side Request Forgery41
- Cross-Site Request Forgery38
- SQL Injection29
- Deserialization and Object Injection28
- Open Redirect11 · 1 exploited
- Insecure Direct Object Reference5
- Supply Chain and Malicious Code3
- No weakness recorded1,509 · 3 exploited
By product
- Chrome7,499 · 71 exploited
- Android6,317 · 11 exploited
- Tensorflow30
- Chrome Os21
- Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.8…21
- Google Chrome prior to 62.0.3202.6220
- Google Chrome prior to 63.0.3239.84 unknown18
- MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8195, MT8791,…17
- Asylo16
- Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.8…16
- Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.1…15
- MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582_90, MT6589, MT6589TD, MT6592…14
- MT5522, MT5527, MT5597, MT5598, MT5599, MT6580, MT6735, MT6737, MT6739, MT6750S…13
- V813
- ChromeOS12
- Picasa11
- Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Andr…9
- Gvisor9
- Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux and Android8
- Cr-48 Chromebook7
- Mini Search Appliance7
- Tunnelblick7
- AngularJS6
- gRPC6
- MCP Toolbox for Databases (googleapis/mcp-toolbox)6
- Sketchup6
- Dart SDK5
- Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.9…5 · 1 exploited
- Google Chrome prior to 60.0.3112.78 for Linux, Windows and Mac5
- Google Chrome prior to 61.0.3163.79 for Mac, Windows and Linux, and 61.0.3163.8…5
Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.