CVE Intelligence

Vulnerabilidades de Google

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Google: 4517 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2025-20781 Alta · 7.8 CWE-415 05/01/2026
Double Free em Google Android
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10182914; Issue ID: MSV-4699.
CVE-2025-20780 Alta · 7.8 CWE-416 05/01/2026
Use After Free em Google Android
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184061; Issue ID: MSV-4712.
CVE-2025-20779 Alta · 7.0 CWE-416 05/01/2026
Use After Free em Google Android
In display, there is a possible use after free due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184084; Issue ID: MSV-4720.
CVE-2025-20778 Alta · 7.8 CWE-787 05/01/2026
Out-of-bounds Write em Google Android
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184870; Issue ID: MSV-4729.
CVE-2025-14766 Alta · 8.8 CWE-125 16/12/2025
Out-of-bounds Read em Google Chrome
Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-14765 Alta · 8.8 CWE-416 16/12/2025
Use After Free em Google Chrome
Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-14373 Média · 4.3 CWE-1021 12/12/2025
Clickjacking em Google Chrome
Inappropriate implementation in Toolbar in Google Chrome on Android prior to 143.0.7499.110 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2025-14372 Média · 6.1 CWE-416 12/12/2025
Use After Free em Google Chrome
Use after free in Password Manager in Google Chrome prior to 143.0.7499.110 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2025-14174 Alta · 8.8 KEV Alta · 62 Exploit público CWE-787 12/12/2025
Google Chromium Out of Bounds Memory Access Vulnerability
Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVE-2025-36938 Média · 6.8 CWE-693 11/12/2025
In U-Boot of append_uint32_le(), there is a possible fault injection due to a logic…
In U-Boot of append_uint32_le(), there is a possible fault injection due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36937 Crítica · 9.8 CWE-787 11/12/2025
Out-of-bounds Write em Google Android
In AudioDecoder::HandleProduceRequest of audio_decoder.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36936 Alta · 7.8 CWE-190 11/12/2025
Integer Overflow or Wraparound em Google Android
In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36935 Alta · 7.8 CWE-787 11/12/2025
Out-of-bounds Write em Google Android
In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36934 Alta · 7.4 CWE-362 11/12/2025
Race Condition em Google Android
In bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36932 Alta · 7.8 CWE-20 11/12/2025
Improper Input Validation em Google Android
In tracepoint_msg_handler of cpm/google/lib/tracepoint/tracepoint_ipc.c, there is a possible memory overwrite due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36931 Alta · 7.8 CWE-120 11/12/2025
Classic Buffer Overflow em Google Android
In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36930 Alta · 7.8 CWE-120 11/12/2025
Classic Buffer Overflow em Google Android
In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36929 Média · 5.5 CWE-20 11/12/2025
Improper Input Validation em Google Android
In AreFencesRegistered of gxp_fence_manager.cc, there is a possible information leak due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36928 Alta · 7.8 CWE-120 11/12/2025
Classic Buffer Overflow em Google Android
In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36927 Alta · 7.8 CWE-120 11/12/2025
Classic Buffer Overflow em Google Android
In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36925 Alta · 7.8 CWE-787 11/12/2025
Out-of-bounds Write em Google Android
In WAVES_send_data_to_dsp of libaoc_waves.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36924 Alta · 8.0 CWE-120 11/12/2025
Classic Buffer Overflow em Google Android
In ss_DecodeLcsAssistDataReqMsg(void) of ss_LcsManagement.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36923 Alta · 8.0 CWE-122 11/12/2025
Heap-based Buffer Overflow em Google Android
In NrmmDecoder::DecodeSORTransparentContext of cn_NrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36922 Média · 6.7 CWE-416 11/12/2025
Use After Free em Google Android
In bigo_map of bigo_iommu.c, there is a possible information disclosure due to a use after free. This could lead to local escalation of privilege in the OS Kernel level with System execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36921 Média · 5.5 CWE-125 11/12/2025
Out-of-bounds Read em Google Android
In ProtocolPsUnthrottleApn() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.