# Google security incidents · pwn.watch

> Security incidents tagged Google (vendor, product, platform or attack type).

Page: https://pwn.watch/t/google · generated 2026-10-22T16:23:59.585Z

## Status (as of 2026-10-22)
- Incidents: 35 (0 live, 0 live and not fully patched, 35 patched)
- Days without a Google security incident: 36
- Newest incident started: 2026-09-16

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/google.json
- RSS (every update): https://pwn.watch/t/google/feed.xml
- This file: https://pwn.watch/t/google/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [Google Pixel: Google Pixel Improper Authorization Vulnerability](https://pwn.watch/i/google-pixel-cve-2026-58704) ([json](https://pwn.watch/i/google-pixel-cve-2026-58704.json)): high, closed, patched, started 2026-09-16, CVE-2026-58704
- [Chrome zero-day CVE-2026-87491 (V8 OOB write)](https://pwn.watch/i/chrome-zero-day-cve-2026-87491) ([json](https://pwn.watch/i/chrome-zero-day-cve-2026-87491.json)): high, closed, patched, started 2026-09-09, CVE-2026-87491
- [Chrome zero-day CVE-2026-85046 (V8 type confusion)](https://pwn.watch/i/chrome-zero-day-cve-2026-85046) ([json](https://pwn.watch/i/chrome-zero-day-cve-2026-85046.json)): high, closed, patched, started 2026-09-04, CVE-2026-85046
- [Chrome zero-day CVE-2026-11645 (V8 OOB)](https://pwn.watch/i/chrome-zero-day-cve-2026-11645) ([json](https://pwn.watch/i/chrome-zero-day-cve-2026-11645.json)): high, closed, patched, started 2026-06-01, CVE-2026-11645
- [Chrome zero-day CVE-2026-5281 (Dawn / WebGPU UAF)](https://pwn.watch/i/chrome-zero-day-cve-2026-5281-dawn) ([json](https://pwn.watch/i/chrome-zero-day-cve-2026-5281-dawn.json)): high, closed, patched, started 2026-04-01, CVE-2026-5281
- [Chrome zero-days CVE-2026-3909 (Skia) and CVE-2026-3910 (V8)](https://pwn.watch/i/chrome-zero-days-cve-2026-3909-3910) ([json](https://pwn.watch/i/chrome-zero-days-cve-2026-3909-3910.json)): high, closed, patched, started 2026-03-01, CVE-2026-3909, CVE-2026-3910
- [Chrome zero-day CVE-2026-2441 (CSS use-after-free)](https://pwn.watch/i/chrome-zero-day-cve-2026-2441) ([json](https://pwn.watch/i/chrome-zero-day-cve-2026-2441.json)): high, closed, patched, started 2026-02-13, CVE-2026-2441
- [Google Chromium: Chromium Out of Bounds Memory Access Vulnerability](https://pwn.watch/i/google-chromium-cve-2025-14174) ([json](https://pwn.watch/i/google-chromium-cve-2025-14174.json)): high, closed, patched, started 2025-12-12, CVE-2025-14174
- [Google Chromium V8: Chromium V8 Type Confusion Vulnerability](https://pwn.watch/i/google-chromium-v8-cve-2025-13223) ([json](https://pwn.watch/i/google-chromium-v8-cve-2025-13223.json)): high, closed, patched, started 2025-11-19, CVE-2025-13223
- [Google Chromium V8: Chromium V8 Type Confusion Vulnerability](https://pwn.watch/i/google-chromium-v8-cve-2025-10585) ([json](https://pwn.watch/i/google-chromium-v8-cve-2025-10585.json)): high, closed, patched, started 2025-09-23, CVE-2025-10585
- [Google Chromium: Chromium ANGLE and GPU Improper Input Validation Vulnerability](https://pwn.watch/i/google-chromium-cve-2025-6558) ([json](https://pwn.watch/i/google-chromium-cve-2025-6558.json)): high, closed, patched, started 2025-07-22, CVE-2025-6558
- [Google Chromium V8: Chromium V8 Type Confusion Vulnerability](https://pwn.watch/i/google-chromium-v8-cve-2025-6554) ([json](https://pwn.watch/i/google-chromium-v8-cve-2025-6554.json)): high, closed, patched, started 2025-07-02, CVE-2025-6554
- [Google Chromium V8: Chromium V8 Out-of-Bounds Read and Write Vulnerability](https://pwn.watch/i/google-chromium-v8-cve-2025-5419) ([json](https://pwn.watch/i/google-chromium-v8-cve-2025-5419.json)): high, closed, patched, started 2025-06-05, CVE-2025-5419
- [Vishing campaign steals Salesforce data from Google and others (UNC6040 / ShinyHunters)](https://pwn.watch/i/salesforce-vishing-data-theft-unc6040-2025) ([json](https://pwn.watch/i/salesforce-vishing-data-theft-unc6040-2025.json)): high, closed, no-fix-needed, started 2025-06-04
- [Google Chromium Mojo: Chromium Mojo Sandbox Escape Vulnerability](https://pwn.watch/i/google-chromium-mojo-cve-2025-2783) ([json](https://pwn.watch/i/google-chromium-mojo-cve-2025-2783.json)): high, closed, patched, started 2025-03-27, CVE-2025-2783
- [Google Chromium V8 Inappropriate Implementation](https://pwn.watch/i/google-chromium-v8-cve-2024-7965) ([json](https://pwn.watch/i/google-chromium-v8-cve-2024-7965.json)): high, closed, patched, started 2024-08-21, CVE-2024-7965
- [Google Chromium V8 Type Confusion](https://pwn.watch/i/google-chromium-v8-cve-2024-7971) ([json](https://pwn.watch/i/google-chromium-v8-cve-2024-7971.json)): high, closed, patched, started 2024-08-21, CVE-2024-7971
- [Android Pixel Privilege Escalation](https://pwn.watch/i/android-pixel-cve-2024-32896) ([json](https://pwn.watch/i/android-pixel-cve-2024-32896.json)): high, closed, patched, started 2024-06-13, CVE-2024-32896
- [Google Chromium V8 Type Confusion](https://pwn.watch/i/google-chromium-v8-cve-2024-5274) ([json](https://pwn.watch/i/google-chromium-v8-cve-2024-5274.json)): high, closed, patched, started 2024-05-28, CVE-2024-5274
- [Google Chromium V8 Type Confusion](https://pwn.watch/i/google-chromium-v8-cve-2024-4947) ([json](https://pwn.watch/i/google-chromium-v8-cve-2024-4947.json)): critical, closed, patched, started 2024-05-15, CVE-2024-4947
- [Google Chromium V8 Out-of-Bounds Memory Write](https://pwn.watch/i/google-chromium-v8-cve-2024-4761) ([json](https://pwn.watch/i/google-chromium-v8-cve-2024-4761.json)): high, closed, patched, started 2024-05-14, CVE-2024-4761
- [Google Chromium Visuals Use-After-Free](https://pwn.watch/i/google-chromium-cve-2024-4671) ([json](https://pwn.watch/i/google-chromium-cve-2024-4671.json)): critical, closed, patched, started 2024-05-09, CVE-2024-4671
- [Android Pixel: 2 actively exploited vulnerabilities](https://pwn.watch/i/android-pixel-cve-2024-29745-29748) ([json](https://pwn.watch/i/android-pixel-cve-2024-29745-29748.json)): high, closed, patched, started 2024-04-04, CVE-2024-29745, CVE-2024-29748
- [Android Pixel Information Disclosure](https://pwn.watch/i/android-pixel-cve-2023-21237) ([json](https://pwn.watch/i/android-pixel-cve-2023-21237.json)): medium, closed, patched, started 2024-03-05, CVE-2023-21237
- [Google Chromium V8 Type Confusion](https://pwn.watch/i/google-chromium-v8-cve-2023-4762) ([json](https://pwn.watch/i/google-chromium-v8-cve-2023-4762.json)): high, closed, patched, started 2024-02-06, CVE-2023-4762
- [Google Chromium V8 Out-of-Bounds Memory Access](https://pwn.watch/i/google-chromium-v8-cve-2024-0519) ([json](https://pwn.watch/i/google-chromium-v8-cve-2024-0519.json)): high, closed, patched, started 2024-01-16, CVE-2024-0519
- [Google Chromium WebRTC Heap Buffer Overflow](https://pwn.watch/i/google-chromium-webrtc-cve-2023-7024) ([json](https://pwn.watch/i/google-chromium-webrtc-cve-2023-7024.json)): high, closed, patched, started 2024-01-02, CVE-2023-7024
- [Google Chromium Skia: Integer Overflow (CVE-2023-6345)](https://pwn.watch/i/google-chromium-skia-cve-2023-6345) ([json](https://pwn.watch/i/google-chromium-skia-cve-2023-6345.json)): critical, closed, patched, started 2023-11-30, CVE-2023-6345
- [Google Chromium libvpx: Heap Buffer Overflow (CVE-2023-5217)](https://pwn.watch/i/google-chromium-libvpx-cve-2023-5217) ([json](https://pwn.watch/i/google-chromium-libvpx-cve-2023-5217.json)): high, closed, patched, started 2023-10-02, CVE-2023-5217
- [libwebp heap overflow exploited in the wild (CVE-2023-4863)](https://pwn.watch/i/libwebp-heap-overflow-cve-2023-4863) ([json](https://pwn.watch/i/libwebp-heap-overflow-cve-2023-4863.json)): high, closed, patched, started 2023-09-11, CVE-2023-4863
- [HTTP/2 Rapid Reset: record-breaking DDoS attacks (CVE-2023-44487)](https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487) ([json](https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487.json)): high, closed, patched, started 2023-08-25, CVE-2023-44487
- [Google Chromium V8: Type Confusion (CVE-2023-3079)](https://pwn.watch/i/google-chromium-v8-cve-2023-3079) ([json](https://pwn.watch/i/google-chromium-v8-cve-2023-3079.json)): high, closed, patched, started 2023-06-07, CVE-2023-3079
- [Google Chromium Skia: Chrome Skia Integer Overflow (CVE-2023-2136)](https://pwn.watch/i/google-chromium-skia-cve-2023-2136) ([json](https://pwn.watch/i/google-chromium-skia-cve-2023-2136.json)): critical, closed, patched, started 2023-04-21, CVE-2023-2136
- [Google Chromium V8: Type Confusion (CVE-2023-2033)](https://pwn.watch/i/google-chromium-v8-cve-2023-2033) ([json](https://pwn.watch/i/google-chromium-v8-cve-2023-2033.json)): high, closed, patched, started 2023-04-17, CVE-2023-2033
- [Google Chromium Network Service: Use-After-Free (CVE-2022-3038)](https://pwn.watch/i/google-chromium-network-service-cve-2022-3038) ([json](https://pwn.watch/i/google-chromium-network-service-cve-2022-3038.json)): high, closed, patched, started 2023-03-30, CVE-2022-3038