CVE Intelligence

Vulnerabilidades de Google

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Google: 4077 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-95329 Crítica · 9.6 CWE-787 29/09/2026
Out-of-bounds Write em Google Chrome
Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-95328 Média · 6.5 CWE-441 29/09/2026
Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed…
Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. (Chromium security severity: Low)
CVE-2026-95327 Média · 6.5 CWE-200 29/09/2026
Exposure of Sensitive Information em Google Chrome
Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-95326 Alta · 8.4 CWE-459 29/09/2026
Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote…
Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-95325 Crítica · 9.6 CWE-416 29/09/2026
Use After Free em Google Chrome
Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-95324 Baixa · 3.4 CWE-908 29/09/2026
Use of Uninitialized Resource em Google Chrome
Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-95323 Média · 5.4 CWE-451 29/09/2026
UI misrepresentation in Chromium in Google Chrome on on iOS prior to 154.0.8037.57…
UI misrepresentation in Chromium in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-95322 Alta · 8.3 CWE-787 29/09/2026
Out-of-bounds Write em Google Chrome
Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-95321 Média · 5.4 CWE-451 29/09/2026
UI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8037.57…
UI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-95320 Média · 5.4 CWE-862 29/09/2026
Missing Authorization em Google Chrome
Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-95319 Alta · 8.3 CWE-416 29/09/2026
Use After Free em Google Chrome
Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-95318 Crítica · 9.6 CWE-122 29/09/2026
Heap-based Buffer Overflow em Google Chrome
Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-95317 Baixa · 3.1 CWE-863 29/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-95316 Baixa · 2.9 CWE-252 29/09/2026
Unchecked Return Value em Google Chrome
Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a local program. (Chromium security severity: Low)
CVE-2026-95315 Alta · 7.8 CWE-416 29/09/2026
Use After Free em Google Chrome
Use after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: High)
CVE-2026-95314 Alta · 8.1 CWE-863 29/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-95313 Crítica · 9.6 CWE-416 29/09/2026
Use After Free em Google Chrome
Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-95312 Baixa · 3.1 CWE-200 29/09/2026
Exposure of Sensitive Information em Google Chrome
Information leak in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-95311 Crítica · 9.6 CWE-590 29/09/2026
Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a…
Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-95310 Crítica · 9.6 CWE-416 29/09/2026
Use After Free em Google Chrome
Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-95309 Média · 5.4 CWE-451 29/09/2026
UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed…
UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-95308 Baixa · 3.4 CWE-190 29/09/2026
Integer Overflow or Wraparound em Google Chrome
Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-95307 Média · 5.4 CWE-451 29/09/2026
UI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 allowed a…
UI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-95306 Alta · 8.8 CWE-843 29/09/2026
Type Confusion em Google Chrome
Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-95305 Média · 4.8 CWE-451 29/09/2026
UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a…
UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low)