Vulnerabilidades de Google
CVEs publicadas que afetam produtos de Google: 4517 registro(s), com severidade, exploração e correções.
Chrome 3829Android 628Mcp Toolbox For Databases 14MCP Toolbox for Databases (googleapis/mcp-toolbox) 6Mcp-toolbox 5SAM 3Chrome-devtools-mcp 3Libjxl 2Keras 2gVisor 2Android Xr 2Go-attestation 2OSV-SCALIBR 2Turbinia 1Nest 1Tink Java 1A2ui/web Core 1Common Expression Language 1Tink-Android 1Google-ADK 1Agent Development Kit (ADK) for Python 1Woff2 1Langfun 1Android Wear 1Cel-go 1Site Kit by Google 1Protobuf-javascript (aka Google-protobuf Npm Package) 1Mcp-toolbox-sdk-python 1Fuse-archive 1ADK TypeScript (@google/adk) 1Brotli 1Agent Development Kit (ADK) for Java 1Gerrit 1V8 1Libvpx 1Libwebp 1Security Operations Soar 1Nest Wifi Router Firmware 1Nest Wifi Point Firmware 1Nest Wifi Pro Firmware 1
CVE-2026-11299
Média · 6.5
CWE-125 04/06/2026
Out-of-bounds Read em Google Chrome
Integer overflow in Fonts in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-11298
Média · 4.3
CWE-346 04/06/2026
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-11297
Alta · 7.7
CWE-20 04/06/2026
Improper Input Validation em Google Chrome
Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to bypass navigation restrictions via a malicious file. (Chromium security severity: Low)
CVE-2026-11296
Alta · 7.5
CWE-269 04/06/2026
Improper Privilege Management em Google Chrome
Inappropriate implementation in ImageCapture in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-11295
Alta · 8.8
CWE-269 04/06/2026
Improper Privilege Management em Google Chrome
Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-11294
Média · 4.3
CWE-451 04/06/2026
Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53…
Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-11293
Crítica · 9.6
CWE-416 04/06/2026
Use-after-free no Input do Google Chrome com possível fuga de sandbox
Use after free no componente Input do Google Chrome anterior à versão 149.0.7827.53 permitia que um atacante remoto potencialmente realizasse uma fuga de sandbox por meio de uma página HTML especialmente criada. (Gravidade de segurança do Chromium: Baixa)
CVE-2026-11292
Média · 4.3
CWE-693 04/06/2026
Insufficient policy enforcement in Blink in Google Chrome prior to 149.0.7827.53 allowed…
Insufficient policy enforcement in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-11291
Média · 4.3
CWE-346 04/06/2026
Inappropriate implementation in Android Autofill in Google Chrome on Android prior to…
Inappropriate implementation in Android Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-11290
Média · 5.0
CWE-472 04/06/2026
Integer overflow in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a…
Integer overflow in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to cause a denial of service via a malicious file. (Chromium security severity: Low)
CVE-2026-11289
Média · 6.5
CWE-1300 04/06/2026
Side-channel information leakage in Paint in Google Chrome prior to 149.0.7827.53…
Side-channel information leakage in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-11288
Média · 6.5
CWE-693 04/06/2026
Insufficient policy enforcement in CSS in Google Chrome prior to 149.0.7827.53 allowed a…
Insufficient policy enforcement in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-11287
Média · 6.5
CWE-20 04/06/2026
Improper Input Validation em Google Chrome
Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-11286
Média · 4.3
CWE-20 04/06/2026
Improper Input Validation em Google Chrome
Insufficient validation of untrusted input in Wallet in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-11285
Média · 4.3
CWE-451 04/06/2026
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-11284
Média · 6.5
CWE-1300 04/06/2026
Side-channel information leakage in PerformanceAPIs in Google Chrome prior to…
Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-11283
Média · 6.5
CWE-20 04/06/2026
Improper Input Validation em Google Chrome
Insufficient validation of untrusted input in Shortcuts in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a malicious file. (Chromium security severity: Low)
CVE-2026-11282
Crítica · 9.6
CWE-693 04/06/2026
Falha de imposição de política no Sandbox do Google Chrome no Linux
Imposição insuficiente de política no Sandbox do Google Chrome no Linux anterior à versão 149.0.7827.53 permitiu que um atacante remoto potencialmente realizasse uma fuga do sandbox por meio de uma página HTML especialmente elaborada. (Gravidade de segurança do Chromium: Baixa)
CVE-2026-11281
Média · 5.0
CWE-472 04/06/2026
Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53…
Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted ETW event. (Chromium security severity: Low)
CVE-2026-11280
Média · 4.3
CWE-20 04/06/2026
Improper Input Validation em Google Chrome
Inappropriate implementation in Signin in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-11279
Alta · 8.8
CWE-125 04/06/2026
Out-of-bounds Read em Google Chrome
Out of bounds read in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-11278
Média · 6.5
CWE-346 04/06/2026
Inappropriate implementation in CustomTabs in Google Chrome on Android prior to…
Inappropriate implementation in CustomTabs in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-11277
Média · 4.3
CWE-284 04/06/2026
Improper Access Control em Google Chrome
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-11276
Média · 5.1
CWE-269 04/06/2026
Improper Privilege Management em Google Chrome
Inappropriate implementation in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to bypass discretionary access control via malicious network traffic. (Chromium security severity: Low)
CVE-2026-11275
Média · 6.5
CWE-284 04/06/2026
Improper Access Control em Google Chrome
Inappropriate implementation in Page Info in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)