CVE Intelligence

Vulnerabilidades de Google

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Google: 4517 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2025-71256 Alta · 7.5 05/05/2026
In nr modem, there is a possible improper input validation. This could lead to remote…
In nr modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
CVE-2025-71255 Alta · 7.5 05/05/2026
In Modem IMS, there is a possible improper input validation. This could lead to remote…
In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
CVE-2025-71254 Alta · 7.5 05/05/2026
In Modem IMS, there is a possible improper input validation. This could lead to remote…
In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
CVE-2025-71253 Alta · 7.5 05/05/2026
In Modem IMS, there is a possible improper input validation. This could lead to remote…
In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
CVE-2025-71252 Alta · 7.5 05/05/2026
In Modem IMS, there is a possible improper input validation. This could lead to remote…
In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
CVE-2025-71251 Alta · 7.5 05/05/2026
In IMS, there is a possible system crash due to improper input validation. This could…
In IMS, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
CVE-2026-0073 Alta · 8.8 CWE-303 04/05/2026
In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual...
In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution as the shell user with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-7363 Alta · 8.8 CWE-416 28/04/2026
Use After Free em Google Chrome
Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-7361 Alta · 8.8 CWE-416 28/04/2026
Use After Free em Google Chrome
Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-7360 Baixa · 3.1 CWE-20 28/04/2026
Improper Input Validation em Google Chrome
Insufficient validation of untrusted input. in Compositing in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7359 Alta · 8.8 CWE-416 28/04/2026
Use After Free em Google Chrome
Use after free in ANGLE in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7358 Alta · 8.8 CWE-416 28/04/2026
Use After Free em Google Chrome
Use after free in Animation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7357 Alta · 7.5 CWE-416 28/04/2026
Use After Free em Google Chrome
Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7356 Alta · 8.8 CWE-416 28/04/2026
Use After Free em Google Chrome
Use after free in Navigation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7355 Alta · 8.8 CWE-416 28/04/2026
Use After Free em Google Chrome
Use after free in Media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-7354 Alta · 8.8 CWE-125 28/04/2026
Out-of-bounds Read em Google Chrome
Out of bounds read and write in Angle in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7353 Alta · 8.3 CWE-122 28/04/2026
Heap-based Buffer Overflow em Google Chrome
Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7352 Alta · 8.3 CWE-416 28/04/2026
Use After Free em Google Chrome
Use after free in Media in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7351 Baixa · 3.1 CWE-362 28/04/2026
Race Condition em Google Chrome
Race in MHTML in Google Chrome prior to 147.0.7727.138 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: High)
CVE-2026-7350 Alta · 8.3 CWE-416 28/04/2026
Use After Free em Google Chrome
Use after free in WebMIDI in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7349 Alta · 7.5 CWE-416 28/04/2026
Use After Free em Google Chrome
Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local network segment to execute arbitrary code inside a sandbox via malicious network traffic. (Chromium security severity: High)
CVE-2026-7348 Alta · 8.8 CWE-416 28/04/2026
Use After Free em Google Chrome
Use after free in Codecs in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7347 Alta · 8.1 CWE-416 28/04/2026
Use After Free em Google Chrome
Use after free in Chromoting in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: High)
CVE-2026-7346 Alta · 8.1 CWE-119 28/04/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Google Chrome
Inappropriate implementation in Tint in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7345 Alta · 8.3 CWE-20 28/04/2026
Improper Input Validation em Google Chrome
Insufficient validation of untrusted input in Feedback in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)