Skip to content
COOEY

FEDRAMP CATALOG › Google Workspace

Google Workspace

Google · package F1206081364

Current status Authorized · High impact · since 2026-07-07 Service modelSaaS MarketplaceRev5 · source: marketplace Security posture 27 critical 72 high 72 on KEV · 99 correlated CVEs
CMMC DOMAINS ADDRESSED
SC · System and Communications ProtectionIA · Identification and AuthenticationMP · Media ProtectionAT · Awareness and Training
STATUS TIMELINE · SCD2
STATUSFROMTO
Authorized2026-07-07current
AUTHORIZATIONS
AGENCYTYPEDATE
JAB AuthorizationJAB2021-10-27
EXPOSED CVEs · CORRELATED TO THIS PRODUCT all exposures
SEVERITYCVETITLE
CRITICALCVE-2026-14537CVE-2026-14537: Incorrect Authorization in the direct HTTP API tool invocation endpoint in Googl
CRITICALCVE-2026-13775CVE-2026-13775: Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote a
CRITICALCVE-2026-13776CVE-2026-13776: Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote
CRITICALCVE-2026-13780CVE-2026-13780: Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 15
CRITICALCVE-2026-13781CVE-2026-13781: Insufficient validation of untrusted input in Skia in Google Chrome prior to 150
CRITICALCVE-2026-13782CVE-2026-13782: Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remo
CRITICALCVE-2026-13785CVE-2026-13785: Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allow
CRITICALCVE-2026-14101CVE-2026-14101: Insufficient policy enforcement in Sandbox in Google Chrome on Mac prior to 150.
CRITICALCVE-2026-14104CVE-2026-14104: Insufficient validation of untrusted input in WebAppInstalls in Google Chrome pr
CRITICALCVE-2026-14106CVE-2026-14106: Insufficient validation of untrusted input in Text in Google Chrome on Android p
CRITICALCVE-2026-14109CVE-2026-14109: Insufficient policy enforcement in Mojo in Google Chrome prior to 150.0.7871.47
CRITICALCVE-2026-14120CVE-2026-14120: Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47
CRITICALCVE-2026-11720CVE-2026-11720: A path traversal vulnerability exists in the HTTP tool URL builder of googleapis
HIGHCVE-2026-11645Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
CRITICALCVE-2026-34691CVE-2026-34691: Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are af
CRITICALCVE-2026-10931CVE-2026-10931: Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a r
CRITICALCVE-2026-10966CVE-2026-10966: Inappropriate implementation in Codecs in Google Chrome prior to 149.0.7827.53 a
CRITICALCVE-2026-10971CVE-2026-10971: Insufficient validation of untrusted input in Printing in Google Chrome on Windo
CRITICALCVE-2026-10972CVE-2026-10972: Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed
CRITICALCVE-2026-10974CVE-2026-10974: Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 14
CRITICALCVE-2026-10990CVE-2026-10990: Use after free in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote
CRITICALCVE-2026-11002CVE-2026-11002: Use after free in Autofill in Google Chrome prior to 149.0.7827.53 allowed a rem
CRITICALCVE-2026-11029CVE-2026-11029: Insufficient validation of untrusted input in Drag and Drop in Google Chrome on
CRITICALCVE-2026-11113CVE-2026-11113: Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 14
CRITICALCVE-2026-11120CVE-2026-11120: Insufficient validation of untrusted input in Enterprise Reporting in Google Chr
CRITICALCVE-2026-9874CVE-2026-9874: Use after free in Dawn in Google Chrome prior to 148.0.7778.216 allowed a remote
HIGHCVE-2026-5281Google Dawn Use-After-Free Vulnerability
HIGHCVE-2026-3909Google Skia Out-of-Bounds Write Vulnerability
HIGHCVE-2026-3910Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
HIGHCVE-2026-2441Google Chromium CSS Use-After-Free Vulnerability
HIGHCVE-2025-14174Google Chromium Out of Bounds Memory Access Vulnerability
HIGHCVE-2025-13223Google Chromium V8 Type Confusion Vulnerability
CRITICALCVE-2025-10585CVE-2025-10585: Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote a
HIGHCVE-2025-10585Google Chromium V8 Type Confusion Vulnerability
HIGHCVE-2025-6558Google Chromium ANGLE and GPU Improper Input Validation Vulnerability
HIGHCVE-2025-6554Google Chromium V8 Type Confusion Vulnerability
HIGHCVE-2025-5419Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
HIGHCVE-2025-2783Google Chromium Mojo Sandbox Escape Vulnerability
HIGHCVE-2024-7965Google Chromium V8 Inappropriate Implementation Vulnerability
HIGHCVE-2024-7971Google Chromium V8 Type Confusion Vulnerability
HIGHCVE-2024-5274Google Chromium V8 Type Confusion Vulnerability
HIGHCVE-2024-4947Google Chromium V8 Type Confusion Vulnerability
HIGHCVE-2024-4761Google Chromium V8 Out-of-Bounds Memory Write Vulnerability
HIGHCVE-2024-4671Google Chromium Visuals Use-After-Free Vulnerability
HIGHCVE-2023-4762Google Chromium V8 Type Confusion Vulnerability
HIGHCVE-2024-0519Google Chromium V8 Out-of-Bounds Memory Access Vulnerability
HIGHCVE-2023-7024Google Chromium WebRTC Heap Buffer Overflow Vulnerability
HIGHCVE-2023-6345Google Skia Integer Overflow Vulnerability
HIGHCVE-2023-5217Google Chromium libvpx Heap Buffer Overflow Vulnerability
HIGHCVE-2023-4863Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
HIGHCVE-2023-3079Google Chromium V8 Type Confusion Vulnerability
HIGHCVE-2023-2136Google Chrome Skia Integer Overflow Vulnerability
HIGHCVE-2023-2033Google Chromium V8 Type Confusion Vulnerability
HIGHCVE-2022-3038Google Chromium Network Service Use-After-Free Vulnerability
HIGHCVE-2022-4262Google Chromium V8 Type Confusion Vulnerability
HIGHCVE-2022-4135Google Chromium GPU Heap Buffer Overflow Vulnerability
HIGHCVE-2022-3723Google Chromium V8 Type Confusion Vulnerability
HIGHCVE-2022-3075Google Chromium Mojo Insufficient Data Validation Vulnerability
HIGHCVE-2022-2856Google Chromium Intents Insufficient Input Validation Vulnerability
HIGHCVE-2021-30533Google Chromium PopupBlocker Security Bypass Vulnerability
HIGHCVE-2016-1646Google Chromium V8 Out-of-Bounds Read Vulnerability
HIGHCVE-2016-5198Google Chromium V8 Out-of-Bounds Memory Vulnerability
HIGHCVE-2017-5030Google Chromium V8 Memory Corruption Vulnerability
HIGHCVE-2017-5070Google Chromium V8 Type Confusion Vulnerability
HIGHCVE-2018-17463Google Chromium V8 Remote Code Execution Vulnerability
HIGHCVE-2018-17480Google Chromium V8 Out-of-Bounds Write Vulnerability
HIGHCVE-2018-6065Google Chromium V8 Integer Overflow Vulnerability
HIGHCVE-2019-5825Google Chromium V8 Out-of-Bounds Write Vulnerability
HIGHCVE-2019-13720Google Chrome WebAudio Use-After-Free Vulnerability
HIGHCVE-2019-5786Google Chrome Blink Use-After-Free Vulnerability
HIGHCVE-2022-1364Google Chromium V8 Type Confusion Vulnerability
HIGHCVE-2021-39793Google Pixel Out-of-Bounds Write Vulnerability
HIGHCVE-2022-1096Google Chromium V8 Type Confusion Vulnerability
HIGHCVE-2022-0609Google Chromium Animation Use-After-Free Vulnerability
HIGHCVE-2020-6572Google Chrome Media Use-After-Free Vulnerability
HIGHCVE-2021-4102Google Chromium V8 Use-After-Free Vulnerability
HIGHCVE-2020-15999Google Chrome FreeType Heap Buffer Overflow Vulnerability
HIGHCVE-2020-16009Google Chromium V8 Type Confusion Vulnerability
HIGHCVE-2020-16010Google Chrome for Android UI Heap Buffer Overflow Vulnerability
HIGHCVE-2020-16013Google Chromium V8 Incorrect Implementation Vulnerabililty
HIGHCVE-2020-16017Google Chrome Use-After-Free Vulnerability
HIGHCVE-2020-6418Google Chromium V8 Type Confusion Vulnerability
HIGHCVE-2021-21148Google Chromium V8 Heap Buffer Overflow Vulnerability
HIGHCVE-2021-21166Google Chromium Race Condition Vulnerability
HIGHCVE-2021-21193Google Chromium Blink Use-After-Free Vulnerability
HIGHCVE-2021-21206Google Chromium Blink Use-After-Free Vulnerability
HIGHCVE-2021-21220Google Chromium V8 Improper Input Validation Vulnerability
HIGHCVE-2021-21224Google Chromium V8 Type Confusion Vulnerability
HIGHCVE-2021-30551Google Chromium V8 Type Confusion Vulnerability
HIGHCVE-2021-30554Google Chromium WebGL Use-After-Free Vulnerability
HIGHCVE-2021-30563Google Chromium V8 Type Confusion Vulnerability
HIGHCVE-2021-30632Google Chromium V8 Out-of-Bounds Write Vulnerability
HIGHCVE-2021-30633Google Chromium Indexed DB API Use-After-Free Vulnerability
HIGHCVE-2021-37973Google Chromium Portals Use-After-Free Vulnerability
HIGHCVE-2021-37975Google Chromium V8 Use-After-Free Vulnerability
HIGHCVE-2021-37976Google Chromium Information Disclosure Vulnerability
HIGHCVE-2021-38000Google Chromium Intents Improper Input Validation Vulnerability
HIGHCVE-2021-38003Google Chromium V8 Memory Corruption Vulnerability
CRITICALCVE-2016-1019CVE-2016-1019: Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a den