Google vulnerabilities

CVE-2026-0136 High · 7.5 CWE-120 Jun 16, 2026

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead...

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0135 High · 7.8 CWE-125 Jun 16, 2026

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead...

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0134 Medium · 4.0 CWE-1188 Jun 16, 2026

In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a factory...

In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a factory reset due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0133 High · 7.8 CWE-862 Jun 16, 2026

In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime...

In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0132 High · 8.8 CWE-122 Jun 16, 2026

In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead...

In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0131 High · 7.3 CWE-125 Jun 16, 2026

In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow....

In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2026-0130 Medium · 4.3 CWE-122 Jun 16, 2026

In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer...

In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2026-0129 Medium · 4.3 CWE-120 Jun 16, 2026

In RtcpByePacket::decodeByePacket, there is a possible due to a missing bounds check. This could...

In RtcpByePacket::decodeByePacket, there is a possible due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2026-0128 Medium · 6.5 CWE-190 Jun 16, 2026

In RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an integer...

In RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2026-0127 Medium · 6.5 CWE-125 Jun 16, 2026

In NrmmMsgCodec::DecodeUPUTransparentContext of cn_NrmmDecoder.cpp, there is a possible out-of...

In NrmmMsgCodec::DecodeUPUTransparentContext of cn_NrmmDecoder.cpp, there is a possible out-of-bounds read due to memory corruption. This could lead to remote denial of service causing a communication processor crash with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0126 Critical · 9.8 CWE-787 Jun 16, 2026

WC-Radio out-of-bounds write with possible remote code execution (CVE-2026-0126)

In WC-Radio, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-0125 High · 7.0 CWE-416 Jun 16, 2026

In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition....

In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-11624 Critical · 9.4 CWE-346 Jun 13, 2026

The Model Context Protocol has a security warning advising servers to validate the…

The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all incoming connections to prevent DNS rebinding attacks. Prior to the v0.25.0 release, users had no way to validate the origin's host. In v0.25.0, a new "--allowed-hosts" flag was introduced alongside the existing "--allowed-origins" flag, enabling users to specify permitted hosts at server startup. Both flags default to "*", allowing users to implement strict access controls as needed without breaking existing setups. If either flag is set to "*", the server will output a startup warning about potential vulnerabilities. Documentation has also been updated to highlight these security considerations.

CVE-2026-12035 High · 8.8 CWE-416 Jun 11, 2026

Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote...

Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-12034 High · 8.3 CWE-20 Jun 11, 2026

Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux...

Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

CVE-2026-12033 Medium · 5.3 CWE-125 Jun 11, 2026

Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote...

Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the GPU process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-12032 Low · 3.1 CWE-346 Jun 11, 2026

Inappropriate implementation in Passwords in Google Chrome on Android prior to…

Inappropriate implementation in Passwords in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)

CVE-2026-12031 High · 8.3 CWE-693 Jun 11, 2026

Inappropriate implementation in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed...

Inappropriate implementation in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-12030 High · 8.3 CWE-122 Jun 11, 2026

Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote...

Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-12029 High · 8.3 CWE-416 Jun 11, 2026

Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote...

Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-12028 High · 8.3 CWE-416 Jun 11, 2026

Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote...

Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-12027 Critical · 9.6 CWE-250 Jun 11, 2026

Google Chrome Headless sandbox escape via inappropriate implementation

Inappropriate implementation in Headless in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-12026 Medium · 6.5 CWE-125 Jun 11, 2026

Out of bounds read in Video in Google Chrome on ChromeOS prior to 149.0.7827.115 allowed a remote...

Out of bounds read in Video in Google Chrome on ChromeOS prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-12025 Medium · 5.3 CWE-20 Jun 11, 2026

Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.115...

Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-12024 Medium · 6.5 CWE-346 Jun 11, 2026

Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.115 allowed a...

Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)