CVEs we hold for Google
Records whose assigning authority named Google as the affected vendor. Newest identifiers first, capped at 200.
Announced together
One group of these records was published under a single advisory. Its page names that advisory, counts what the group offers, and says what it does not cover.
Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.
CVE-2026-96812Host Root Sandbox Escape in gVisor via Character Device Passthrough and CUSEGoogle gVisor
CVE-2026-95702Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFileGoogle gVisor
200 records, read from the index as it stood on 18 Oct 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.