Email, files and business apps

Google (Workspace, Chrome, Android) security incident history

Updated Oct 26, 2026. Data gathered daily from official public sources.

As of Oct 26, 2026, Vendor History found 2 state breach notices and 92 actively exploited security flaws for Google (Workspace, Chrome, Android), dated May 6, 2016 to Sep 16, 2026. The most recent breach notice or SEC filing was on Jun 29, 2017. Sources checked: the California and Washington Attorney General breach lists, SEC EDGAR (Form 8-K, Item 1.05) and CISA's Known Exploited Vulnerabilities catalog.

Breach notices and SEC cyber filings

1. Jun 29, 2017Breach notice

   Google Inc. filed a data breach notice with the California Attorney General. Breach date(s) listed: 08/10/2016, 03/09/2017.

   Source: California Attorney General

2. May 6, 2016Breach notice

   Google Inc. filed a data breach notice with the California Attorney General. Breach date(s) listed: 03/29/2016.

   Source: California Attorney General

Got a breach letter from Google (Workspace, Chrome, Android)? What to do when a vendor has a data breach.

Actively exploited security flaws

Flaws in Google (Workspace, Chrome, Android) products that CISA lists as exploited by attackers. If you use an affected product, check that it's updated. What a listing means.

1. Sep 16, 2026Exploited flaw

   Google Pixel Improper Authorization Vulnerability (CVE-2026-58704). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

2. Sep 9, 2026Exploited flaw

   Google Chromium V8 Out of Bounds Write Vulnerability (CVE-2026-87491). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

3. Sep 4, 2026Exploited flaw

   Google Chromium V8 Type Confusion Vulnerability (CVE-2026-85046). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

4. Jun 9, 2026Exploited flaw

   Google Chromium V8 Out-of-Bounds Read and Write Vulnerability (CVE-2026-11645). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

5. Jun 2, 2026Exploited flaw

   Android Framework Integer Overflow Vulnerability (CVE-2025-48595). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

6. Apr 1, 2026Exploited flaw

   Google Dawn Use-After-Free Vulnerability (CVE-2026-5281). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

7. Mar 13, 2026Exploited flaw

   Google Skia Out-of-Bounds Write Vulnerability (CVE-2026-3909). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

8. Mar 13, 2026Exploited flaw

   Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability (CVE-2026-3910). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

9. Feb 17, 2026Exploited flaw

   Google Chromium CSS Use-After-Free Vulnerability (CVE-2026-2441). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

10. Dec 12, 2025Exploited flaw

    Google Chromium Out of Bounds Memory Access Vulnerability (CVE-2025-14174). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

11. Dec 2, 2025Exploited flaw

    Android Framework Privilege Escalation Vulnerability (CVE-2025-48572). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

12. Dec 2, 2025Exploited flaw

    Android Framework Information Disclosure Vulnerability (CVE-2025-48633). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

13. Nov 19, 2025Exploited flaw

    Google Chromium V8 Type Confusion Vulnerability (CVE-2025-13223). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

14. Sep 23, 2025Exploited flaw

    Google Chromium V8 Type Confusion Vulnerability (CVE-2025-10585). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

15. Sep 4, 2025Exploited flaw

    Android Runtime Use-After-Free Vulnerability (CVE-2025-48543). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

16. Jul 22, 2025Exploited flaw

    Google Chromium ANGLE and GPU Improper Input Validation Vulnerability (CVE-2025-6558). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

17. Jul 2, 2025Exploited flaw

    Google Chromium V8 Type Confusion Vulnerability (CVE-2025-6554). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

18. Jun 5, 2025Exploited flaw

    Google Chromium V8 Out-of-Bounds Read and Write Vulnerability (CVE-2025-5419). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

19. Mar 27, 2025Exploited flaw

    Google Chromium Mojo Sandbox Escape Vulnerability (CVE-2025-2783). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

20. Nov 7, 2024Exploited flaw

    Android Framework Privilege Escalation Vulnerability (CVE-2024-43093). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

21. Aug 28, 2024Exploited flaw

    Google Chromium V8 Inappropriate Implementation Vulnerability (CVE-2024-7965). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

22. Aug 26, 2024Exploited flaw

    Google Chromium V8 Type Confusion Vulnerability (CVE-2024-7971). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

23. Aug 7, 2024Exploited flaw

    Android Kernel Remote Code Execution Vulnerability (CVE-2024-36971). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

24. Jun 13, 2024Exploited flaw

    Android Pixel Privilege Escalation Vulnerability (CVE-2024-32896). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

25. May 28, 2024Exploited flaw

    Google Chromium V8 Type Confusion Vulnerability (CVE-2024-5274). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

26. May 20, 2024Exploited flaw

    Google Chromium V8 Type Confusion Vulnerability (CVE-2024-4947). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

27. May 16, 2024Exploited flaw

    Google Chromium V8 Out-of-Bounds Memory Write Vulnerability (CVE-2024-4761). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

28. May 13, 2024Exploited flaw

    Google Chromium Visuals Use-After-Free Vulnerability (CVE-2024-4671). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

29. Apr 4, 2024Exploited flaw

    Android Pixel Information Disclosure Vulnerability (CVE-2024-29745). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

30. Apr 4, 2024Exploited flaw

    Android Pixel Privilege Escalation Vulnerability (CVE-2024-29748). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

31. Mar 5, 2024Exploited flaw

    Android Pixel Information Disclosure Vulnerability (CVE-2023-21237). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

32. Feb 6, 2024Exploited flaw

    Google Chromium V8 Type Confusion Vulnerability (CVE-2023-4762). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

33. Jan 17, 2024Exploited flaw

    Google Chromium V8 Out-of-Bounds Memory Access Vulnerability (CVE-2024-0519). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

34. Jan 2, 2024Exploited flaw

    Google Chromium WebRTC Heap Buffer Overflow Vulnerability (CVE-2023-7024). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

35. Nov 30, 2023Exploited flaw

    Google Skia Integer Overflow Vulnerability (CVE-2023-6345). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

36. Oct 2, 2023Exploited flaw

    Google Chromium libvpx Heap Buffer Overflow Vulnerability (CVE-2023-5217). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

37. Sep 13, 2023Exploited flaw

    Android Framework Privilege Escalation Vulnerability (CVE-2023-35674). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

38. Sep 13, 2023Exploited flaw

    Google Chromium WebP Heap-Based Buffer Overflow Vulnerability (CVE-2023-4863). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

39. Jun 7, 2023Exploited flaw

    Google Chromium V8 Type Confusion Vulnerability (CVE-2023-3079). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

40. Apr 21, 2023Exploited flaw

    Google Chrome Skia Integer Overflow Vulnerability (CVE-2023-2136). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

41. Apr 17, 2023Exploited flaw

    Google Chromium V8 Type Confusion Vulnerability (CVE-2023-2033). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

42. Apr 13, 2023Exploited flaw

    Android Framework Privilege Escalation Vulnerability (CVE-2023-20963). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

43. Mar 30, 2023Exploited flaw

    Google Chromium Network Service Use-After-Free Vulnerability (CVE-2022-3038). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

44. Dec 5, 2022Exploited flaw

    Google Chromium V8 Type Confusion Vulnerability (CVE-2022-4262). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

45. Nov 28, 2022Exploited flaw

    Google Chromium GPU Heap Buffer Overflow Vulnerability (CVE-2022-4135). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

46. Oct 28, 2022Exploited flaw

    Google Chromium V8 Type Confusion Vulnerability (CVE-2022-3723). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

47. Sep 8, 2022Exploited flaw

    Android OS Privilege Escalation Vulnerability (CVE-2011-1823). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

48. Sep 8, 2022Exploited flaw

    Google Chromium Mojo Insufficient Data Validation Vulnerability (CVE-2022-3075). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

49. Aug 18, 2022Exploited flaw

    Google Chromium Intents Insufficient Input Validation Vulnerability (CVE-2022-2856). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

50. Jun 27, 2022Exploited flaw

    Google Chromium PopupBlocker Security Bypass Vulnerability (CVE-2021-30533). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

51. Jun 8, 2022Exploited flaw

    Google Chromium V8 Out-of-Bounds Read Vulnerability (CVE-2016-1646). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

52. Jun 8, 2022Exploited flaw

    Google Chromium V8 Out-of-Bounds Memory Vulnerability (CVE-2016-5198). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

53. Jun 8, 2022Exploited flaw

    Google Chromium V8 Memory Corruption Vulnerability (CVE-2017-5030). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

54. Jun 8, 2022Exploited flaw

    Google Chromium V8 Type Confusion Vulnerability (CVE-2017-5070). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

55. Jun 8, 2022Exploited flaw

    Google Chromium V8 Remote Code Execution Vulnerability (CVE-2018-17463). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

56. Jun 8, 2022Exploited flaw

    Google Chromium V8 Out-of-Bounds Write Vulnerability (CVE-2018-17480). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

57. Jun 8, 2022Exploited flaw

    Google Chromium V8 Integer Overflow Vulnerability (CVE-2018-6065). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

58. Jun 8, 2022Exploited flaw

    Google Chromium V8 Out-of-Bounds Write Vulnerability (CVE-2019-5825). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

59. May 23, 2022Exploited flaw

    Google Chrome WebAudio Use-After-Free Vulnerability (CVE-2019-13720). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

60. May 23, 2022Exploited flaw

    Google Chrome Blink Use-After-Free Vulnerability (CVE-2019-5786). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

61. May 23, 2022Exploited flaw

    Android Kernel Race Condition Vulnerability (CVE-2021-0920). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

62. May 23, 2022Exploited flaw

    Android Kernel Use-After-Free Vulnerability (CVE-2021-1048). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

63. Apr 15, 2022Exploited flaw

    Google Chromium V8 Type Confusion Vulnerability (CVE-2022-1364). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

64. Apr 11, 2022Exploited flaw

    Google Pixel Out-of-Bounds Write Vulnerability (CVE-2021-39793). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

65. Mar 28, 2022Exploited flaw

    Google Chromium V8 Type Confusion Vulnerability (CVE-2022-1096). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

66. Feb 15, 2022Exploited flaw

    Google Chromium Animation Use-After-Free Vulnerability (CVE-2022-0609). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

67. Jan 10, 2022Exploited flaw

    Google Chrome Media Use-After-Free Vulnerability (CVE-2020-6572). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

68. Dec 15, 2021Exploited flaw

    Google Chromium V8 Use-After-Free Vulnerability (CVE-2021-4102). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

69. Nov 3, 2021Exploited flaw

    Android Kernel Use-After-Free Vulnerability (CVE-2019-2215). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

70. Nov 3, 2021Exploited flaw

    Android Kernel Out-of-Bounds Write Vulnerability (CVE-2020-0041). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

71. Nov 3, 2021Exploited flaw

    Google Chrome FreeType Heap Buffer Overflow Vulnerability (CVE-2020-15999). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

72. Nov 3, 2021Exploited flaw

    Google Chromium V8 Type Confusion Vulnerability (CVE-2020-16009). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

73. Nov 3, 2021Exploited flaw

    Google Chrome for Android UI Heap Buffer Overflow Vulnerability (CVE-2020-16010). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

74. Nov 3, 2021Exploited flaw

    Google Chromium V8 Incorrect Implementation Vulnerabililty (CVE-2020-16013). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

75. Nov 3, 2021Exploited flaw

    Google Chrome Use-After-Free Vulnerability (CVE-2020-16017). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

76. Nov 3, 2021Exploited flaw

    Google Chromium V8 Type Confusion Vulnerability (CVE-2020-6418). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

77. Nov 3, 2021Exploited flaw

    Google Chromium V8 Heap Buffer Overflow Vulnerability (CVE-2021-21148). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

78. Nov 3, 2021Exploited flaw

    Google Chromium Race Condition Vulnerability (CVE-2021-21166). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

79. Nov 3, 2021Exploited flaw

    Google Chromium Blink Use-After-Free Vulnerability (CVE-2021-21193). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

80. Nov 3, 2021Exploited flaw

    Google Chromium Blink Use-After-Free Vulnerability (CVE-2021-21206). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

81. Nov 3, 2021Exploited flaw

    Google Chromium V8 Improper Input Validation Vulnerability (CVE-2021-21220). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

82. Nov 3, 2021Exploited flaw

    Google Chromium V8 Type Confusion Vulnerability (CVE-2021-21224). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

83. Nov 3, 2021Exploited flaw

    Google Chromium V8 Type Confusion Vulnerability (CVE-2021-30551). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

84. Nov 3, 2021Exploited flaw

    Google Chromium WebGL Use-After-Free Vulnerability (CVE-2021-30554). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

85. Nov 3, 2021Exploited flaw

    Google Chromium V8 Type Confusion Vulnerability (CVE-2021-30563). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

86. Nov 3, 2021Exploited flaw

    Google Chromium V8 Out-of-Bounds Write Vulnerability (CVE-2021-30632). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

87. Nov 3, 2021Exploited flaw

    Google Chromium Indexed DB API Use-After-Free Vulnerability (CVE-2021-30633). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

88. Nov 3, 2021Exploited flaw

    Google Chromium Portals Use-After-Free Vulnerability (CVE-2021-37973). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

89. Nov 3, 2021Exploited flaw

    Google Chromium V8 Use-After-Free Vulnerability (CVE-2021-37975). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

90. Nov 3, 2021Exploited flaw

    Google Chromium Information Disclosure Vulnerability (CVE-2021-37976). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

91. Nov 3, 2021Exploited flaw

    Google Chromium Intents Improper Input Validation Vulnerability (CVE-2021-38000). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

92. Nov 3, 2021Exploited flaw

    Google Chromium V8 Memory Corruption Vulnerability (CVE-2021-38003). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

We check: California and Washington Attorney General breach notices, SEC cyber incident filings (Form 8-K, Item 1.05) and CISA's catalog of actively exploited security flaws. An empty section means we found nothing in those sources. It does not mean nothing happened. How it works

To cite: Vendor History, "Google (Workspace, Chrome, Android) security incident history," vendorhistory.com/vendor/google, data checked Oct 26, 2026. Free to reuse under CC BY 4.0 with credit to Vendor History.