Log in Start free

Google LLC

Products

ProductCVEsExploitedLatest
Asylo16–Aug 2, 2021
Dart SDK4–Feb 18, 2022
fscrypt3–Feb 25, 2022
guest-oslogin3–Jun 22, 2020
Fuchsia2–Feb 25, 2022
Fuchsia Kernel2–May 3, 2022
libjxl2–Nov 1, 2021
AWS S3 Crypto SDK for GoLang2–Aug 11, 2020
Gerrit1–Feb 17, 2021
go-attestation1–Feb 4, 2022
Google Cloud IoT Device SDK for Embedded C1–May 4, 2021
Google Earth Pro1–May 4, 2020
Google Exposure-notifications-verification-server1–Dec 9, 2021
Google-oauth-java-client1–May 3, 2022
Google Play Services SDK1–Jul 29, 2022
google-protobuf [JRuby Gem]1–Jan 7, 2022
google/go-tpm library1–Aug 11, 2020
google/sa360-webquery-bigquery1–Mar 18, 2022
Guava1–Dec 10, 2020
Kubevirt1–Sep 15, 2022
Perfetto Dev Scripts1–Mar 29, 2022
Play Services SDK1–Aug 12, 2022
Protobuf1–Jan 26, 2022
protobuf-cpp1–Sep 22, 2022
protobuf-java1–Jan 7, 2022
protobuf-kotlin1–Jan 7, 2022
protobuf-python1–Sep 22, 2022
Protocolbuffers1–Oct 12, 2022
Rendertron1–Feb 23, 2021
SLO Generator1–Oct 4, 2021
Tink1–Oct 19, 2020
VSCode-Bazel1–Apr 16, 2021
Android Play Core1–Aug 12, 2020
wpantund1–Jul 7, 2020
Bazel1–Oct 26, 2022
Bindiff1–Jun 29, 2021
Brotli1–Sep 15, 2020
Dart1–Oct 27, 2022
Data-Transfer-Project1–Mar 29, 2022
Drive for Desktop MacOS1–Oct 17, 2022
Exposure Notifications Verification Server1–Mar 31, 2021

Exploited and recent CVEs

  • CVE-2022-3095 Critical 9.8 Incorrect parsing of the backslash characters in Dart library 1.2%
  • CVE-2022-3474 Medium 5.1 Bazel leaks user credentials through the remote assets API 0.4%
  • CVE-2022-3421 Medium 5.6 Privilege escalation in Google Drive for Desktop on MacOS 0.1%
  • CVE-2022-3171 Medium 4.3 Memory handling vulnerability in ProtocolBuffers Java core and lite 1.3%
  • CVE-2022-1941 High 7.5 Out of Memory issue in ProtocolBuffers for cpp and python 1.5%
  • CVE-2022-1941 High 7.5 Out of Memory issue in ProtocolBuffers for cpp and python 1.5%
  • CVE-2022-1798 High 8.7 Path Traversal vulnerability in Kubevirt 0.4%
  • CVE-2022-2390 Medium 6.1 Mutable pending intent in Google Play services SDK 0.1%
  • CVE-2022-1799 Medium 5.7 Incorrect signature verification on Google play-services-basement in Google Play SDK 0.3%
  • CVE-2022-0882 Medium 5.3 Illegal access to Kernel log in Fuchsia 0.1%
  • CVE-2021-22556 Medium 5.3 Integer Overflow in Fuchsia Kernel 0.2%
  • CVE-2021-22573 High 8.7 Incorrect signature verification on Google-oauth-java-client 0.3%
  • CVE-2022-0343 Low 3.3 Local Priviledge escalation in Perfetto Dev scripts <0.1%
  • CVE-2021-22572 Medium 5.5 Data-transfer-project information disclosure via tmp directory 0.1%
  • CVE-2021-22571 Medium 5.5 Information Leak in SA360-webquery-bigquery through read on /tmp 0.2%
  • CVE-2022-0247 High 7.5 Write access to VMO data through copy-on-write in Fuchsia <0.1%
  • CVE-2022-25328 Medium 5.0 Privilege escalation through command injection in fscrypt 0.2%
  • CVE-2022-25327 Medium 5.5 Local Denial of Service in fscrypt PAM module 0.1%
  • CVE-2022-25326 Medium 5.5 Denial of Service in fscrypt 0.1%
  • CVE-2022-0451 Medium 6.5 Auth bypass in Dark SDK 1.0%
  • CVE-2022-0317 Medium 4.0 Improper Input Validation in AKPublic.Verify in go-attestation <0.1%
  • CVE-2021-22570 Medium 6.5 Nullptr Dereference in Protobuf 2.7%
  • CVE-2021-22566 Medium 5.1 Incorrect mapping of Executable bits in Fuchsia Kernel 0.3%
  • CVE-2021-22569 High 7.5 Denial of Service of protobuf-java parsing procedure 1.8%
  • CVE-2021-22569 High 7.5 Denial of Service of protobuf-java parsing procedure 1.8%
  • CVE-2021-22569 High 7.5 Denial of Service of protobuf-java parsing procedure 1.8%
  • CVE-2021-22567 Medium 4.6 Bidirectional Override in Dart SDK 0.6%
  • CVE-2021-22568 High 8.8 Dart - Publishing to third-party package repositories may expose pub.dev credentials 0.9%
  • CVE-2021-22565 Medium 6.5 Insufficient Granularity of Access Control in GAEN Notification Server 0.4%
  • CVE-2021-22564 Medium 4.5 Out of bounds Copy in Libjxl in large image groups 0.3%