Vulnerabilidades de Google
CVEs publicadas que afetam produtos de Google: 4077 registro(s), com severidade, exploração e correções.
Chrome 3398Android 627Mcp Toolbox For Databases 14MCP Toolbox for Databases (googleapis/mcp-toolbox) 6Mcp-toolbox 5Go-attestation 2Libjxl 2Keras 2gVisor 2OSV-SCALIBR 2Chrome-devtools-mcp 2Android Xr 2V8 1Guava 1Google Devices 1Nest 1Tink Java 1A2ui/web Core 1Common Expression Language 1Tink-Android 1Google-ADK 1Libvpx 1Turbinia 1Langfun 1Android Wear 1Cel-go 1Site Kit by Google 1Protobuf-javascript (aka Google-protobuf Npm Package) 1Mcp-toolbox-sdk-python 1Fuse-archive 1Nest Wifi Pro Firmware 1Clasp 1Sentencepiece 1Protobuf 1Cloud Build 1Gemini-cli 1Run-gemini-cli 1Matter 1Web Designer 1Gerrit 1
CVE-2026-87551
Média · 4.3
CWE-295 08/09/2026
Improper Certificate Validation em Google Chrome
Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)
CVE-2026-87550
Média · 4.3
CWE-116 08/09/2026
Improper Encoding or Escaping of Output em Google Chrome
Improper encoding or escaping of output in CSS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87549
Média · 6.5
CWE-459 08/09/2026
Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote…
Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87548
Média · 4.3
CWE-754 08/09/2026
Improper Check for Unusual or Exceptional Conditions em Google Chrome
Improper state validation in Installer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87547
Crítica · 9.6
CWE-706 08/09/2026
Use of Incorrectly-Resolved Name or Reference em Google Chrome
Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87546
Média · 4.3
CWE-704 08/09/2026
Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to…
Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chromium security severity: Low)
CVE-2026-87545
Média · 6.5
CWE-200 08/09/2026
Exposure of Sensitive Information em Google Chrome
Information leak in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87544
Crítica · 9.8
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87543
Média · 4.3
CWE-862 08/09/2026
Missing Authorization em Google Chrome
Missing authorization in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87542
Alta · 8.8
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87541
Média · 6.5
CWE-200 08/09/2026
Exposure of Sensitive Information em Google Chrome
Information leak in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87540
Média · 5.4
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87539
Baixa · 3.1
CWE-203 08/09/2026
Observable Discrepancy em Google Chrome
Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87538
Média · 4.2
CWE-1021 08/09/2026
Clickjacking em Google Chrome
Clickjacking in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87537
Alta · 8.1
CWE-862 08/09/2026
Missing Authorization em Google Chrome
Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)
CVE-2026-87536
Alta · 8.8
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87535
Média · 6.5
CWE-221 08/09/2026
Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to…
Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87534
Crítica · 9.8
CWE-862 08/09/2026
Missing Authorization em Google Chrome
Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)
CVE-2026-87533
Alta · 8.1
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)
CVE-2026-87532
Média · 6.5
CWE-754 08/09/2026
Improper Check for Unusual or Exceptional Conditions em Google Chrome
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87531
Baixa · 3.1
CWE-200 08/09/2026
Exposure of Sensitive Information em Google Chrome
Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87530
Alta · 8.1
CWE-427 08/09/2026
Uncontrolled Search Path Element em Google Chrome
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)
CVE-2026-87529
Crítica · 9.6
CWE-197 08/09/2026
Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a…
Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87528
Crítica · 9.6
CWE-843 08/09/2026
Type Confusion em Google Chrome
Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87527
Crítica · 9.6
CWE-122 08/09/2026
Heap-based Buffer Overflow em Google Chrome
Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)