Vendor

    Google

    14 known vulnerabilities in products by Google, 0 of them actively exploited (CISA KEV).

    Key figures

    14

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Google
    HighCVE-2012-5389

    Dart Powertcp Webserver For Activex: NULL Pointer Dereference

    		7.5
    CriticalCVE-2022-3095

    Incorrect parsing of the backslash characters in Dart library

    also in 1 other product

    		9.8
    MediumCVE-2020-35669

    Dart HTTP: CRLF Injection

    		6.1
    HighCVE-2021-22568

    Dart - Publishing to third-party package repositories may expose pub.dev credentials

    also in 1 other product

    		8.8
    Not ratedCVE-2008-4652

    Dart Communications PowerTCP TFP for ActiveX: Buffer Overflow

    		—
    Not ratedCVE-2007-2856

    Dart Communications PowerTCP ZIP Compression: Buffer Overflow

    		—
    Not ratedCVE-2007-2855

    Dart Communications Dart ZipLite Compression: Buffer Overflow

    		—
    MediumCVE-2022-0451

    Auth bypass in Dark SDK

    also in 1 other product

    		6.5
    HighCVE-2026-27704

    Dart SDK and Flutter SDK have Zip slip in Dart Pub package extraction

    		7.5
    Not ratedCVE-2012-3819

    Dart Powertcp Activex: Denial of Service

    		—
    MediumCVE-2021-22540

    XSS in Dart SDK

    also in 1 other product

    		6.1
    MediumCVE-2014-125098

    Dart http_server Directory Listing virtual_directory.dart VirtualDirectory cross site scripting

    		4.3
    MediumCVE-2021-22567

    Bidirectional Override in Dart SDK

    also in 1 other product

    		4.6
    MediumCVE-2020-8923

    XSS in Dart

    also in 1 other product

    		5.4

    Products

    Products by Google
    Google Dart SDK70