Vulnerabilidades de Google
CVEs publicadas que afetam produtos de Google: 4496 registro(s), com severidade, exploração e correções.
Chrome 3808Android 628Mcp Toolbox For Databases 14MCP Toolbox for Databases (googleapis/mcp-toolbox) 6Mcp-toolbox 5SAM 3Chrome-devtools-mcp 3Libjxl 2Keras 2gVisor 2Android Xr 2Go-attestation 2OSV-SCALIBR 2Turbinia 1Nest 1Tink Java 1A2ui/web Core 1Common Expression Language 1Tink-Android 1Google-ADK 1Agent Development Kit (ADK) for Python 1Woff2 1Langfun 1Android Wear 1Cel-go 1Site Kit by Google 1Protobuf-javascript (aka Google-protobuf Npm Package) 1Mcp-toolbox-sdk-python 1Fuse-archive 1ADK TypeScript (@google/adk) 1Brotli 1Agent Development Kit (ADK) for Java 1Gerrit 1V8 1Libvpx 1Libwebp 1Security Operations Soar 1Nest Wifi Router Firmware 1Nest Wifi Point Firmware 1Nest Wifi Pro Firmware 1
CVE-2026-11671
Crítica · 9.6
CWE-416 08/06/2026
Use-after-free na Navegação do Google Chrome permite fuga de sandbox
Use after free em Navigation no Google Chrome anterior à 149.0.7827.103 permitia que um atacante remoto potencialmente realizasse uma fuga de sandbox por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Alta)
CVE-2026-11670
Alta · 8.8
CWE-416 08/06/2026
Use After Free em Google Chrome
Use after free in PDF in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)
CVE-2026-11669
Média · 5.3
CWE-472 08/06/2026
Out of bounds read in Media in Google Chrome on ChromeOS prior to 149.0.7827.103 allowed…
Out of bounds read in Media in Google Chrome on ChromeOS prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11668
Média · 4.3
CWE-457 08/06/2026
Use of Uninitialized Variable em Google Chrome
Uninitialized Use in Codecs in Google Chrome on Linux, ChromeOS prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted video file. (Chromium security severity: High)
CVE-2026-11667
Alta · 7.5
CWE-125 08/06/2026
Out-of-bounds Read em Google Chrome
Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the GPU process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11666
Média · 5.4
CWE-20 08/06/2026
Improper Input Validation em Google Chrome
Insufficient validation of untrusted input in Input in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11665
Média · 4.3
CWE-125 08/06/2026
Out-of-bounds Read em Google Chrome
Out of bounds read in Dawn in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11664
Alta · 8.8
CWE-416 08/06/2026
Use After Free em Google Chrome
Use after free in Payments in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11663
Alta · 8.3
CWE-416 08/06/2026
Use After Free em Google Chrome
Use after free in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11662
Alta · 8.8
CWE-843 08/06/2026
Type Confusion em Google Chrome
Type Confusion in Bindings in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11661
Alta · 8.3
CWE-416 08/06/2026
Use After Free em Google Chrome
Use after free in Views in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11660
Alta · 8.3
CWE-20 08/06/2026
Improper Input Validation em Google Chrome
Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11659
Crítica · 9.6
CWE-20 08/06/2026
Estouro de inteiro na UI do Google Chrome no Linux permite possível escape de sandbox
Estouro de inteiro na UI do Google Chrome no Linux anterior à versão 149.0.7827.103 permitia que um atacante remoto potencialmente realizasse um escape de sandbox por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Alta)
CVE-2026-11658
Média · 6.5
CWE-20 08/06/2026
Improper Input Validation em Google Chrome
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11657
Alta · 8.8
CWE-416 08/06/2026
Use After Free em Google Chrome
Use after free in Payments in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11656
Alta · 8.3
CWE-416 08/06/2026
Use After Free em Google Chrome
Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromium security severity: High)
CVE-2026-11655
Alta · 8.3
CWE-472 08/06/2026
Integer overflow in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a…
Integer overflow in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11654
Crítica · 9.6
CWE-416 08/06/2026
Use-After-Free no CameraCapture do Google Chrome permite fuga de sandbox (CVE-2026-11654)
Use after free em CameraCapture no Google Chrome em Mac anterior à 149.0.7827.103 permitia que um atacante remoto potencialmente realizasse uma fuga de sandbox por meio de uma página HTML criada com esse fim. (Gravidade de segurança do Chromium: Alta)
CVE-2026-11653
Média · 6.5
CWE-20 08/06/2026
Improper Input Validation em Google Chrome
Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11652
Alta · 8.3
CWE-416 08/06/2026
Use After Free em Google Chrome
Use after free in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11651
Crítica · 9.6
CWE-416 08/06/2026
Use-After-Free no Componente Network do Google Chrome
Use after free no componente Network do Google Chrome anterior à 149.0.7827.103 permitia que um atacante remoto executasse código arbitrário dentro de um sandbox por meio de uma página HTML criada especialmente. (Gravidade de segurança do Chromium: Alta)
CVE-2026-11650
Alta · 8.8
CWE-416 08/06/2026
Use After Free em Google Chrome
Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11649
Alta · 8.8
CWE-416 08/06/2026
Use After Free em Google Chrome
Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11648
Alta · 8.8
CWE-416 08/06/2026
Use After Free em Google Chrome
Use after free in FullScreen in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11647
Alta · 8.3
CWE-416 08/06/2026
Use After Free em Google Chrome
Use after free in Printing in Google Chrome on Android prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)