Vulnerabilidades de Google
CVEs publicadas que afetam produtos de Google: 4517 registro(s), com severidade, exploração e correções.
Chrome 3829Android 628Mcp Toolbox For Databases 14MCP Toolbox for Databases (googleapis/mcp-toolbox) 6Mcp-toolbox 5SAM 3Chrome-devtools-mcp 3Libjxl 2Keras 2gVisor 2Android Xr 2Go-attestation 2OSV-SCALIBR 2Turbinia 1Nest 1Tink Java 1A2ui/web Core 1Common Expression Language 1Tink-Android 1Google-ADK 1Agent Development Kit (ADK) for Python 1Woff2 1Langfun 1Android Wear 1Cel-go 1Site Kit by Google 1Protobuf-javascript (aka Google-protobuf Npm Package) 1Mcp-toolbox-sdk-python 1Fuse-archive 1ADK TypeScript (@google/adk) 1Brotli 1Agent Development Kit (ADK) for Java 1Gerrit 1V8 1Libvpx 1Libwebp 1Security Operations Soar 1Nest Wifi Router Firmware 1Nest Wifi Point Firmware 1Nest Wifi Pro Firmware 1
CVE-2025-61609
Alta · 7.5
01/12/2025
In modem, there is a possible system crash due to improper input validation. This could…
In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed
CVE-2025-61608
Alta · 7.5
01/12/2025
In nr modem, there is a possible system crash due to improper input validation. This…
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed
CVE-2025-61607
Alta · 7.5
01/12/2025
In nr modem, there is a possible system crash due to improper input validation. This…
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed
CVE-2025-3012
Alta · 7.5
01/12/2025
In dpc modem, there is a possible system crash due to null pointer dereference. This…
In dpc modem, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed
CVE-2025-11133
Alta · 7.5
01/12/2025
In nr modem, there is a possible system crash due to improper input validation. This…
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed
CVE-2025-11132
Alta · 7.5
01/12/2025
In nr modem, there is a possible system crash due to improper input validation. This…
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed
CVE-2025-11131
Alta · 7.5
01/12/2025
In nr modem, there is a possible system crash due to improper input validation. This…
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed
CVE-2025-13437
Média · 5.6
CWE-706 20/11/2025
Arbitrary node_modules Directory Deletion in Google zx
When zx is invoked with --prefer-local=<path>, the CLI creates a symlink named ./node_modules pointing to <path>/node_modules. Due to a logic error in src/cli.ts (linkNodeModules / cleanup), the function returns the target path instead of the alias (symlink path). The later cleanup routine removes what it received, which deletes the target directory itself. Result: zx can delete an external <path>/node_modules outside the current working directory.
CVE-2025-13425
Baixa · 1.9
CWE-476 20/11/2025
Denial of Service in OSV-SCALIBR
A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next() to overindex an empty slice when ReadDir returns nil for an empty directory, resulting in a panic (index out of range) and an application crash (denial of service) in OSV-SCALIBR.
CVE-2025-48593
Alta · 8.0
CWE-416 18/11/2025
Use After Free em Google Android
In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-13230
Alta · 8.8
CWE-843 17/11/2025
Type Confusion em Google Chrome
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-13229
Alta · 8.8
CWE-843 17/11/2025
Type Confusion em Google Chrome
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-13228
Alta · 8.8
CWE-843 17/11/2025
Type Confusion em Google Chrome
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-13227
Alta · 8.8
CWE-843 17/11/2025
Type Confusion em Google Chrome
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-13226
Alta · 8.8
CWE-843 17/11/2025
Type Confusion em Google Chrome
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-13224
Alta · 8.8
CWE-843 17/11/2025
Type Confusion em Google Chrome
Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-13223
Alta · 8.8
KEV Alta · 55 CWE-843 17/11/2025
Google Chromium V8 Type Confusion Vulnerability
Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-9479
Média · 4.3
CWE-125 14/11/2025
Out-of-bounds Read em Google Chrome
Out of bounds read in V8 in Google Chrome prior to 133.0.6943.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2025-13107
Média · 4.3
CWE-451 14/11/2025
Inappropriate implementation in Compositing in Google Chrome prior to 140.0.7339.80…
Inappropriate implementation in Compositing in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2025-13102
Média · 4.3
CWE-451 14/11/2025
Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to…
Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2025-13097
Média · 5.4
CWE-79 14/11/2025
Cross-site Scripting (XSS) em Google Chrome
Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2024-9126
Alta · 7.5
CWE-416 14/11/2025
Use After Free em Google Chrome
Use after free in Internals in Google Chrome on iOS prior to 127.0.6533.88 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a series of curated UI gestures. (Chromium security severity: Medium)
CVE-2024-7021
Média · 4.3
CWE-451 14/11/2025
Inappropriate implementation in Autofill in Google Chrome on Windows prior to…
Inappropriate implementation in Autofill in Google Chrome on Windows prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2024-7017
Alta · 7.5
CWE-362 14/11/2025
Race Condition em Google Chrome
Inappropriate implementation in DevTools in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2024-13983
Média · 6.3
CWE-601 14/11/2025
Open Redirect em Google Chrome
Inappropriate implementation in Lens in Google Chrome on iOS prior to 136.0.7103.59 allowed a remote attacker to perform UI spoofing via a crafted QR code. (Chromium security severity: Low)