Five programmes: GCVE, Google Cloud Security Bulletins (incl. Chrome stable + Android Security Bulletin redistributions), Project Zero in-the-wild, plus the ~20 Google-maintained open-source projects (Chromium, Android, ChromeOS, Go, Kubernetes, TensorFlow, Angular, Bazel, gRPC, Protobuf, gVisor, Flutter, Dart, Firebase, Skia, Tink, V8, Material, ORTools, Polymer, Istio). Enriched live with Vulnetix VDB exploit intelligence. Latest month: September 2026 · 84 advisories.
There is no single Google security feed. This archive combines GCVE issuances, Google Cloud Security Bulletins (incl. Chrome stable + Android Security Bulletin redistributions), Project Zero in-the-wild entries, and the ~20 Google-maintained open-source projects.
Most Google open-source projects don't issue Google-branded advisories. Their CVEs surface through OSV / GHSA / NVD scoped to the project's vendor or package name. 22 projects tracked.
Five programmes plus 20+ open-source projects. Vulnetix VDB indexes them all in one view.