Vulnerabilidades de Google
CVEs publicadas que afetam produtos de Google: 4077 registro(s), com severidade, exploração e correções.
Chrome 3398Android 627Mcp Toolbox For Databases 14MCP Toolbox for Databases (googleapis/mcp-toolbox) 6Mcp-toolbox 5Go-attestation 2Libjxl 2Keras 2gVisor 2OSV-SCALIBR 2Chrome-devtools-mcp 2Android Xr 2V8 1Guava 1Google Devices 1Nest 1Tink Java 1A2ui/web Core 1Common Expression Language 1Tink-Android 1Google-ADK 1Libvpx 1Turbinia 1Langfun 1Android Wear 1Cel-go 1Site Kit by Google 1Protobuf-javascript (aka Google-protobuf Npm Package) 1Mcp-toolbox-sdk-python 1Fuse-archive 1Nest Wifi Pro Firmware 1Clasp 1Sentencepiece 1Protobuf 1Cloud Build 1Gemini-cli 1Run-gemini-cli 1Matter 1Web Designer 1Gerrit 1
CVE-2026-102322
Crítica · 9.6
CWE-863 06/10/2026
Incorrect Authorization em Google Chrome
Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2026-0198
Média · 4.4
CWE-862 06/10/2026
Missing Authorization em Google Android
In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58880
Alta · 7.0
CWE-362 05/10/2026
Race Condition em Google Android
In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58865
Alta · 7.5
CWE-119 05/10/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Google Android
In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58859
Alta · 7.8
CWE-248 05/10/2026
In multiple places, there is a possible denial of service due to an uncaught exception…
In multiple places, there is a possible denial of service due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58856
Baixa · 3.3
CWE-119 05/10/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Google Android
In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58854
Alta · 7.8
CWE-843 05/10/2026
Type Confusion em Google Android
In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58841
Alta · 7.8
CWE-269 05/10/2026
Improper Privilege Management em Google Android
In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58835
Alta · 8.8
CWE-122 05/10/2026
Heap-based Buffer Overflow em Google Android
In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58834
Média · 5.5
CWE-20 05/10/2026
Improper Input Validation em Google Android
In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-58815
Alta · 7.8
CWE-119 05/10/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Google Android
In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55286
Alta · 7.8
CWE-119 05/10/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Google Android
In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55280
Alta · 8.8
CWE-457 05/10/2026
Use of Uninitialized Variable em Google Android
In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55270
Alta · 7.8
CWE-441 05/10/2026
In dialInternal in multiple locations, there is a possible permission bypass due to a…
In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55269
Alta · 7.8
CWE-20 05/10/2026
Improper Input Validation em Google Android
In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55266
Alta · 7.8
CWE-400 05/10/2026
Uncontrolled Resource Consumption em Google Android
In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-55265
Média · 6.5
CWE-119 05/10/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Google Android
In multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-49937
Alta · 7.8
CWE-119 05/10/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Google Android
In multiple functions of MessageQueueBase.h, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-49933
Alta · 7.8
CWE-824 05/10/2026
In handle_le_monitor_device_event of msft.cc, there is a possible control-flow hijack in…
In handle_le_monitor_device_event of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-49885
Alta · 7.8
CWE-190 05/10/2026
Integer Overflow or Wraparound em Google Android
In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-49880
Alta · 7.8
CWE-119 05/10/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Google Android
In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-49878
Alta · 7.2
CWE-787 05/10/2026
Out-of-bounds Write em Google Android
In wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-45524
Alta · 8.8
CWE-862 05/10/2026
Missing Authorization em Google Android
In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-28667
Média · 5.5
CWE-119 05/10/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Google Android
In multiple functions of rw_t5t.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-28648
Alta · 7.8
CWE-441 05/10/2026
In Settings, there is a possible permission bypass due to a confused deputy. This could…
In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.