Vulnerabilidades de Google
CVEs publicadas que afetam produtos de Google: 4517 registro(s), com severidade, exploração e correções.
Chrome 3829Android 628Mcp Toolbox For Databases 14MCP Toolbox for Databases (googleapis/mcp-toolbox) 6Mcp-toolbox 5SAM 3Chrome-devtools-mcp 3Libjxl 2Keras 2gVisor 2Android Xr 2Go-attestation 2OSV-SCALIBR 2Turbinia 1Nest 1Tink Java 1A2ui/web Core 1Common Expression Language 1Tink-Android 1Google-ADK 1Agent Development Kit (ADK) for Python 1Woff2 1Langfun 1Android Wear 1Cel-go 1Site Kit by Google 1Protobuf-javascript (aka Google-protobuf Npm Package) 1Mcp-toolbox-sdk-python 1Fuse-archive 1ADK TypeScript (@google/adk) 1Brotli 1Agent Development Kit (ADK) for Java 1Gerrit 1V8 1Libvpx 1Libwebp 1Security Operations Soar 1Nest Wifi Router Firmware 1Nest Wifi Point Firmware 1Nest Wifi Pro Firmware 1
CVE-2026-11073
Média · 6.5
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in WebGL in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11072
Alta · 7.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to execute arbitrary code via a malicious file. (Chromium security severity: Medium)
CVE-2026-11071
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in Base in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11070
Crítica · 9.6
CWE-20 04/06/2026
Falha de Validação de Entrada no Chromoting do Google Chrome que Permite Escape de Sandbox
Validação insuficiente de entrada não confiável no Chromoting do Google Chrome no Windows, em versões anteriores à 149.0.7827.53, permitiu que um atacante remoto que tivesse comprometido o processo de rede realizasse potencialmente um escape de sandbox por meio de tráfego de rede malicioso. (Severidade de segurança do Chromium: Média)
CVE-2026-11069
Média · 6.5
CWE-20 04/06/2026
Improper Input Validation em Google Chrome
Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11068
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in WebSockets in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11067
Média · 6.5
CWE-457 04/06/2026
Use of Uninitialized Variable em Google Chrome
Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11066
Crítica · 9.6
CWE-20 04/06/2026
Falha de validação de entrada no ANGLE do Google Chrome permite possível fuga de sandbox
Validação insuficiente de entrada não confiável no ANGLE do Google Chrome anterior à 149.0.7827.53 permitiu que um atacante remoto potencialmente realizasse uma fuga de sandbox por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Média)
CVE-2026-11065
Crítica · 9.6
CWE-416 04/06/2026
Use after free no ANGLE do Google Chrome com possível fuga de sandbox
Use after free no ANGLE do Google Chrome anterior à versão 149.0.7827.53 permitiu que um atacante remoto que tivesse comprometido o processo renderer realizasse, potencialmente, um escape do sandbox por meio de uma página HTML elaborada. (Severidade de segurança do Chromium: Média)
CVE-2026-11064
Média · 6.5
CWE-457 04/06/2026
Use of Uninitialized Variable em Google Chrome
Race in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11063
Crítica · 9.6
CWE-20 04/06/2026
Google Chrome: falha de validação de entrada no WebNN permite fuga de sandbox
Validação insuficiente de entrada não confiável no WebNN do Google Chrome no Windows anterior à 149.0.7827.53 permitiu que um atacante remoto que tivesse comprometido o processo de renderização potencialmente realizasse uma fuga do sandbox por meio de uma página HTML elaborada. (Gravidade de segurança do Chromium: Média)
CVE-2026-11062
Média · 4.3
CWE-602 04/06/2026
Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53…
Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: Medium)
CVE-2026-11061
Crítica · 9.6
CWE-125 04/06/2026
Confusão de Tipo (Type Confusion) no ANGLE do Google Chrome com Possível Fuga de Sandbox (CVE-2026-11061)
Confusão de tipo (Type Confusion) no ANGLE no Google Chrome anterior à versão 149.0.7827.53 permitiu que um invasor remoto potencialmente realizasse uma fuga de sandbox por meio de uma página HTML criada com esse fim. (Gravidade de segurança do Chromium: Média)
CVE-2026-11060
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in Media in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11059
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11058
Alta · 7.5
CWE-472 04/06/2026
Integer overflow in CredentialProvider in Google Chrome on Windows prior to…
Integer overflow in CredentialProvider in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform OS-level privilege escalation via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11057
Média · 6.5
CWE-457 04/06/2026
Use of Uninitialized Variable em Google Chrome
Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11056
Crítica · 9.6
CWE-20 04/06/2026
Google Chrome: escape de sandbox no SiteIsolation por validação insuficiente de entrada
Validação insuficiente de entrada não confiável no SiteIsolation do Google Chrome no Windows anterior à versão 149.0.7827.53 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse um escape da sandbox por meio de uma página HTML especialmente elaborada. (Severidade de segurança do Chromium: Média)
CVE-2026-11055
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11054
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11052
Crítica · 9.6
CWE-843 04/06/2026
Confusão de tipo na GPU do Google Chrome no Windows permite escape de sandbox
Confusão de tipo (Type Confusion) no componente GPU do Google Chrome no Windows anterior à 149.0.7827.53 permitiu que um invasor remoto que já tivesse comprometido o processo renderer potencialmente realizasse um escape do sandbox por meio de uma página HTML criada para esse fim. (Gravidade de segurança do Chromium: Média)
CVE-2026-11051
Média · 6.5
CWE-125 04/06/2026
Out-of-bounds Read em Google Chrome
Out of bounds read in ANGLE in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11050
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11049
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11048
Média · 6.5
CWE-346 04/06/2026
Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53…
Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension. (Chromium security severity: Medium)