Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Google LLC — Vulnerabilities & Security Advisories 64

Browse all 64 CVE security advisories affecting Google LLC. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Google LLC operates as a multinational technology conglomerate specializing in internet-related services and products, including search engines, cloud computing, and online advertising. Its extensive software ecosystem, encompassing Android, Chrome, and Google Workspace, presents a broad attack surface that has historically been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities. With 64 recorded Common Vulnerabilities and Exposures, the company frequently addresses issues related to memory corruption and sandbox escape techniques. Notable security characteristics include rigorous automated patching and the widespread adoption of zero-trust principles across its infrastructure. While major public incidents are relatively rare due to proactive threat hunting, the sheer scale of its user base makes it a high-value target for state-sponsored actors and criminal syndicates seeking data exfiltration or persistent access.

CVE ID Title CVSS Severity Published
CVE-2022-3095 Incorrect parsing of the backslash characters in Dart library — Dart CWE-20 9.8 Critical 2022-10-27
CVE-2022-3474 Bazel leaks user credentials through the remote assets API — Bazel CWE-522 4.3 - 2022-10-26
CVE-2022-3421 Privilege escalation in Google Drive for Desktop on MacOS — Drive for Desktop MacOS CWE-264 5.6 Medium 2022-10-17
CVE-2022-3171 Memory handling vulnerability in ProtocolBuffers Java core and lite — Protocolbuffers CWE-20 4.3 Medium 2022-10-12
CVE-2022-1941 Out of Memory issue in ProtocolBuffers for cpp and python — protobuf-cpp CWE-1286 7.5 - 2022-09-22
CVE-2022-1798 Path Traversal vulnerability in Kubevirt — Kubevirt CWE-20 8.7 High 2022-09-15
CVE-2022-2390 Mutable pending intent in Google Play services SDK — Play Services SDK CWE-471 6.1 Medium 2022-08-12
CVE-2022-1799 Incorrect signature verification on Google play-services-basement in Google Play SDK — Google Play Services SDK CWE-501 5.7 Medium 2022-07-29
CVE-2022-0882 Illegal access to Kernel log in Fuchsia — Fuchsia Kernel CWE-200 5.3 Medium 2022-05-03
CVE-2021-22556 Integer Overflow in Fuchsia Kernel — Fuchsia Kernel CWE-190 5.3 Medium 2022-05-03
CVE-2021-22573 Incorrect signature verification on Google-oauth-java-client — Google-oauth-java-client CWE-347 8.7 High 2022-05-03
CVE-2022-0343 Local Priviledge escalation in Perfetto Dev scripts — Perfetto Dev Scripts CWE-275 3.3 Low 2022-03-29
CVE-2021-22572 Data-transfer-project information disclosure via tmp directory — Data-Transfer-Project CWE-377 5.5 Medium 2022-03-29
CVE-2021-22571 Information Leak in SA360-webquery-bigquery through read on /tmp — google/sa360-webquery-bigquery CWE-275 5.5 Medium 2022-03-18
CVE-2022-0247 Write access to VMO data through copy-on-write in Fuchsia — Fuchsia CWE-732 7.5 High 2022-02-25
CVE-2022-25328 Privilege escalation through command injection in fscrypt — fscrypt CWE-78 5.0 Medium 2022-02-25
CVE-2022-25327 Local Denial of Service in fscrypt PAM module — fscrypt CWE-255 5.5 Medium 2022-02-25
CVE-2022-25326 Denial of Service in fscrypt — fscrypt CWE-400 5.5 Medium 2022-02-25
CVE-2022-0451 Auth bypass in Dark SDK — Dart SDK CWE-305 6.5 Medium 2022-02-18
CVE-2022-0317 Improper Input Validation in AKPublic.Verify in go-attestation — go-attestation CWE-20 4.0 Medium 2022-02-04
CVE-2021-22570 Nullptr Dereference in Protobuf — Protobuf CWE-476 6.5 Medium 2022-01-26
CVE-2021-22566 Incorrect mapping of Executable bits in Fuchsia Kernel — Fuchsia CWE-275 8.8 - 2022-01-18
CVE-2021-22569 Denial of Service of protobuf-java parsing procedure — protobuf-java CWE-696 7.5 High 2022-01-07
CVE-2021-22567 Bidirectional Override in Dart SDK — Dart SDK CWE-284 4.6 Medium 2022-01-05
CVE-2021-22568 Dart - Publishing to third-party package repositories may expose pub.dev credentials — Dart SDK CWE-255 8.8 High 2021-12-09
CVE-2021-22565 Insufficient Granularity of Access Control in GAEN Notification Server — Google Exposure-notifications-verification-server CWE-284 6.5 Medium 2021-12-09
CVE-2021-22564 Out of bounds Copy in Libjxl in large image groups — libjxl CWE-122 4.5 Medium 2021-11-01
CVE-2021-22563 Memory Overread in libjxl — libjxl CWE-126 4.5 Medium 2021-11-01
CVE-2021-22557 Code execution in SLO Generator via YAML Payload — SLO Generator CWE-94 5.3 Medium 2021-10-04
CVE-2021-22552 Memory overread secure enclave in Asylo 0.6.2 — Asylo CWE-126 5.3 Medium 2021-08-02

This page lists every published CVE security advisory associated with Google LLC. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.