Vulnerabilidades de Google
CVEs publicadas que afetam produtos de Google: 4517 registro(s), com severidade, exploração e correções.
Chrome 3829Android 628Mcp Toolbox For Databases 14MCP Toolbox for Databases (googleapis/mcp-toolbox) 6Mcp-toolbox 5SAM 3Chrome-devtools-mcp 3Libjxl 2Keras 2gVisor 2Android Xr 2Go-attestation 2OSV-SCALIBR 2Turbinia 1Nest 1Tink Java 1A2ui/web Core 1Common Expression Language 1Tink-Android 1Google-ADK 1Agent Development Kit (ADK) for Python 1Woff2 1Langfun 1Android Wear 1Cel-go 1Site Kit by Google 1Protobuf-javascript (aka Google-protobuf Npm Package) 1Mcp-toolbox-sdk-python 1Fuse-archive 1ADK TypeScript (@google/adk) 1Brotli 1Agent Development Kit (ADK) for Java 1Gerrit 1V8 1Libvpx 1Libwebp 1Security Operations Soar 1Nest Wifi Router Firmware 1Nest Wifi Point Firmware 1Nest Wifi Pro Firmware 1
CVE-2026-11124
Alta · 8.8
CWE-122 04/06/2026
Heap-based Buffer Overflow em Google Chrome
Integer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11123
Média · 6.5
CWE-457 04/06/2026
Use of Uninitialized Variable em Google Chrome
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11122
Média · 6.1
CWE-358 04/06/2026
Inappropriate implementation in Keyboard in Google Chrome prior to 149.0.7827.53 allowed…
Inappropriate implementation in Keyboard in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11121
Média · 6.5
CWE-20 04/06/2026
Improper Input Validation em Google Chrome
Insufficient validation of untrusted input in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11120
Crítica · 9.6
CWE-20 04/06/2026
Escape de sandbox por validação insuficiente no Enterprise Reporting do Google Chrome
Validação insuficiente de entrada não confiável no Enterprise Reporting do Google Chrome anterior à 149.0.7827.53 permitiu que um atacante remoto que tivesse comprometido o processo de renderização potencialmente realizasse uma fuga do sandbox por meio de uma página HTML criada para esse fim. (Severidade de segurança do Chromium: Média)
CVE-2026-11119
Crítica · 9.6
CWE-20 04/06/2026
Google Chrome para Android: fuga de sandbox pelo componente GPU com página HTML manipulada
Implementação inadequada em GPU no Google Chrome para Android anterior a 149.0.7827.53 permitiu que um atacante remoto que tivesse comprometido o processo renderer executasse potencialmente uma fuga do sandbox por meio de uma página HTML criada para esse fim. (Gravidade de segurança do Chromium: Média)
CVE-2026-11118
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11117
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in Views in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11116
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Medium)
CVE-2026-11115
Alta · 7.3
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in Updater in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Medium)
CVE-2026-11114
Crítica · 9.6
CWE-416 04/06/2026
Use After Free no Device Trust do Google Chrome no macOS (CVE-2026-11114)
Use after free no Device Trust no Google Chrome no Mac, em versões anteriores à 149.0.7827.53, permitiu que um atacante remoto que tivesse comprometido o processo renderer realizasse potencialmente uma fuga do sandbox por meio de uma página HTML elaborada. (Gravidade de segurança do Chromium: Média)
CVE-2026-11113
Crítica · 9.6
CWE-20 04/06/2026
Falha de validação de entrada no ANGLE do Google Chrome com possível escape de sandbox
Validação insuficiente de entrada não confiável no ANGLE no Google Chrome anterior à 149.0.7827.53 permitiu que um atacante remoto que tivesse comprometido o processo de renderização potencialmente realizasse um escape do sandbox por meio de uma página HTML manipulada. (Gravidade de segurança do Chromium: Média)
CVE-2026-11112
Crítica · 9.6
CWE-20 04/06/2026
Falha de Validação de Entrada no Chromoting do Google Chrome no Linux com Possível Fuga do Sandbox
Validação insuficiente de entrada não confiável no Chromoting do Google Chrome no Linux anterior à 149.0.7827.53 permitiu que um atacante remoto que tivesse comprometido o processo de renderização potencialmente realizasse uma fuga do sandbox por meio de uma extensão do Chrome especialmente elaborada. (Gravidade de segurança do Chromium: Média)
CVE-2026-11111
Alta · 8.1
CWE-125 04/06/2026
Out-of-bounds Read em Google Chrome
Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11110
Média · 6.5
CWE-457 04/06/2026
Use of Uninitialized Variable em Google Chrome
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11109
Média · 6.5
CWE-457 04/06/2026
Use of Uninitialized Variable em Google Chrome
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11108
Alta · 8.8
CWE-269 04/06/2026
Improper Privilege Management em Google Chrome
Inappropriate implementation in NFC in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11107
Média · 4.3
CWE-451 04/06/2026
Inappropriate implementation in Downloads in Google Chrome prior to 149.0.7827.53…
Inappropriate implementation in Downloads in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11106
Média · 6.5
CWE-352 04/06/2026
Cross-Site Request Forgery (CSRF) em Google Chrome
Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11105
Média · 6.5
CWE-20 04/06/2026
Improper Input Validation em Google Chrome
Insufficient validation of untrusted input in WebUI in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11104
Média · 6.5
CWE-457 04/06/2026
Use of Uninitialized Variable em Google Chrome
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11103
Alta · 7.8
CWE-269 04/06/2026
Improper Privilege Management em Google Chrome
Inappropriate implementation in Installer in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Medium)
CVE-2026-11102
Alta · 8.8
CWE-474 04/06/2026
Inappropriate implementation in Isolated Web Apps in Google Chrome prior to…
Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a malicious file. (Chromium security severity: Medium)
CVE-2026-11101
Média · 6.5
CWE-457 04/06/2026
Use of Uninitialized Variable em Google Chrome
Uninitialized Use in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11100
Crítica · 9.6
CWE-416 04/06/2026
Use-After-Free no File Input do Google Chrome no Mac
Use after free em File Input no Google Chrome para Mac anterior a 149.0.7827.53 permitiu que um atacante remoto que convencesse um usuário a realizar gestos específicos na interface potencialmente executasse uma fuga de sandbox por meio de uma página HTML elaborada. (Gravidade de segurança do Chromium: Média)