Browse all 5695 CVE security advisories affecting Google. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Google operates as a multinational technology conglomerate primarily known for internet-related services and products, including search, cloud computing, and online advertising. With 3,691 recorded Common Vulnerabilities and Exposures (CVEs), its software ecosystem has historically been susceptible to remote code execution, cross-site scripting, and privilege escalation flaws. These vulnerabilities often stem from complex web applications and backend infrastructure components. Notable security incidents include data breaches affecting user accounts and critical bugs in Chrome’s rendering engine that allowed sandbox escapes. The company maintains a robust bug bounty program to incentivize responsible disclosure, yet the sheer scale of its digital footprint ensures a high volume of discovered defects. Security teams continuously patch these issues, though the breadth of services creates a large attack surface that requires rigorous, ongoing monitoring and defense-in-depth strategies to mitigate potential exploitation by malicious actors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-14541 | Authentication Bypass and Audience Confusion in MCP Toolbox OAuth Provider — mcp-toolboxCWE-287 | 8.0 | High | 2026-07-31 |
| CVE-2026-14540 | Server-Side Request Forgery via Unrestricted HTTP Redirection in MCP Toolbox — mcp-toolboxCWE-918 | 8.0 | High | 2026-07-31 |
| CVE-2026-14539 | Denial of Service via Unrestricted Payload Buffering in MCP Toolbox — mcp-toolboxCWE-770 | 6.6 | Medium | 2026-07-31 |
| CVE-2026-14538 | BigQuery Dataset Allowlist Bypass via Metadata Dry-Run in MCP Toolbox — mcp-toolboxCWE-285 | 5.7 | Medium | 2026-07-31 |
| CVE-2026-14537 | Authorization Bypass in MCP Toolbox Legacy HTTP Endpoints — mcp-toolboxCWE-863 | 8.1 | High | 2026-07-31 |
This page lists every published CVE security advisory associated with Google. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.