Vulnerabilidades de Google
CVEs publicadas que afetam produtos de Google: 4496 registro(s), com severidade, exploração e correções.
Chrome 3808Android 628Mcp Toolbox For Databases 14MCP Toolbox for Databases (googleapis/mcp-toolbox) 6Mcp-toolbox 5SAM 3Chrome-devtools-mcp 3Libjxl 2Keras 2gVisor 2Android Xr 2Go-attestation 2OSV-SCALIBR 2Turbinia 1Nest 1Tink Java 1A2ui/web Core 1Common Expression Language 1Tink-Android 1Google-ADK 1Agent Development Kit (ADK) for Python 1Woff2 1Langfun 1Android Wear 1Cel-go 1Site Kit by Google 1Protobuf-javascript (aka Google-protobuf Npm Package) 1Mcp-toolbox-sdk-python 1Fuse-archive 1ADK TypeScript (@google/adk) 1Brotli 1Agent Development Kit (ADK) for Java 1Gerrit 1V8 1Libvpx 1Libwebp 1Security Operations Soar 1Nest Wifi Router Firmware 1Nest Wifi Point Firmware 1Nest Wifi Pro Firmware 1
CVE-2026-0140
Média · 4.3
CWE-125 16/06/2026
In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overflow....
In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
CVE-2026-0139
Alta · 8.8
CWE-119 16/06/2026
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead...
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0138
Alta · 7.8
CWE-120 16/06/2026
In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to...
In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0137
Alta · 7.8
CWE-416 16/06/2026
In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of...
In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of privilege due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0136
Alta · 7.5
CWE-120 16/06/2026
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead...
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0135
Alta · 7.8
CWE-125 16/06/2026
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead...
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0134
Média · 4.0
CWE-1188 16/06/2026
In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a factory...
In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a factory reset due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0133
Alta · 7.8
CWE-862 16/06/2026
In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime...
In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0132
Alta · 8.8
CWE-122 16/06/2026
In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead...
In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0131
Alta · 7.3
CWE-125 16/06/2026
In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow....
In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVE-2026-0130
Média · 4.3
CWE-122 16/06/2026
In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer...
In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
CVE-2026-0129
Média · 4.3
CWE-120 16/06/2026
In RtcpByePacket::decodeByePacket, there is a possible due to a missing bounds check. This could...
In RtcpByePacket::decodeByePacket, there is a possible due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
CVE-2026-0128
Média · 6.5
CWE-190 16/06/2026
In RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an integer...
In RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
CVE-2026-0127
Média · 6.5
CWE-125 16/06/2026
In NrmmMsgCodec::DecodeUPUTransparentContext of cn_NrmmDecoder.cpp, there is a possible out-of...
In NrmmMsgCodec::DecodeUPUTransparentContext of cn_NrmmDecoder.cpp, there is a possible out-of-bounds read due to memory corruption. This could lead to remote denial of service causing a communication processor crash with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-0126
Crítica · 9.8
CWE-787 16/06/2026
Escrita fora dos limites no WC-Radio com possível execução remota de código (CVE-2026-0126)
No WC-Radio, há uma possível escrita fora dos limites devido a uma verificação de limites ausente. Isso pode levar à execução remota de código sem privilégios de execução adicionais. Não é necessária interação do usuário para a exploração.
CVE-2026-0125
Alta · 7.0
CWE-416 16/06/2026
In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition....
In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-11624
Crítica · 9.4
CWE-346 13/06/2026
The Model Context Protocol has a security warning advising servers to validate the…
The Model Context Protocol has a security warning advising servers to validate the "Origin" header on all incoming connections to prevent DNS rebinding attacks. Prior to the v0.25.0 release, users had no way to validate the origin's host. In v0.25.0, a new "--allowed-hosts" flag was introduced alongside the existing "--allowed-origins" flag, enabling users to specify permitted hosts at server startup. Both flags default to "*", allowing users to implement strict access controls as needed without breaking existing setups. If either flag is set to "*", the server will output a startup warning about potential vulnerabilities. Documentation has also been updated to highlight these security considerations.
CVE-2026-12035
Alta · 8.8
CWE-416 11/06/2026
Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote...
Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-12034
Alta · 8.3
CWE-20 11/06/2026
Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux...
Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
CVE-2026-12033
Média · 5.3
CWE-125 11/06/2026
Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote...
Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the GPU process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
CVE-2026-12032
Baixa · 3.1
CWE-346 11/06/2026
Inappropriate implementation in Passwords in Google Chrome on Android prior to…
Inappropriate implementation in Passwords in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
CVE-2026-12031
Alta · 8.3
CWE-693 11/06/2026
Inappropriate implementation in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed...
Inappropriate implementation in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-12030
Alta · 8.3
CWE-122 11/06/2026
Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote...
Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-12029
Alta · 8.3
CWE-416 11/06/2026
Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote...
Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-12028
Alta · 8.3
CWE-416 11/06/2026
Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote...
Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)