Vulnerabilidades de Google
CVEs publicadas que afetam produtos de Google: 4079 registro(s), com severidade, exploração e correções.
Chrome 3398Android 627Mcp Toolbox For Databases 14MCP Toolbox for Databases (googleapis/mcp-toolbox) 6Mcp-toolbox 5SAM 2Libjxl 2Keras 2gVisor 2Go-attestation 2OSV-SCALIBR 2Chrome-devtools-mcp 2Android Xr 2Site Kit by Google 1WearOS 1Fuse-archive 1Guava 1Google Devices 1Mcp-toolbox-sdk-python 1Nest 1Protobuf-javascript (aka Google-protobuf Npm Package) 1Tink Java 1Langfun 1Cel-go 1A2ui/web Core 1Common Expression Language 1Tink-Android 1Google-ADK 1Android Wear 1Turbinia 1Sentencepiece 1Security Operations Soar 1Nest Wifi Router Firmware 1Nest Wifi Point Firmware 1Nest Wifi Pro Firmware 1Web Designer 1Cloud Build 1Clasp 1Gerrit 1AngularJS 1
CVE-2026-79243
Média · 6.5
CWE-20 25/08/2026
Improper Input Validation em Google Chrome
Improper input validation in ReadingList in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79242
Média · 5.3
CWE-203 25/08/2026
Observable Discrepancy em Google Chrome
Observable discrepancy in HTML in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79241
Média · 6.5
CWE-125 25/08/2026
Out-of-bounds Read em Google Chrome
Out of bounds read in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79240
Alta · 8.8
CWE-787 25/08/2026
Out-of-bounds Write em Google Chrome
Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-79239
Média · 6.5
CWE-125 25/08/2026
Out-of-bounds Read em Google Chrome
Out of bounds read in Tint in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79238
Média · 4.3
CWE-863 25/08/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-79237
Média · 4.3
CWE-863 25/08/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79236
Alta · 8.8
CWE-843 25/08/2026
Type Confusion em Google Chrome
Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-79235
Crítica · 9.6
CWE-416 25/08/2026
Use After Free em Google Chrome
Use after free in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-79234
Média · 6.5
CWE-74 25/08/2026
Injection em Google Chrome
Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79233
Média · 4.3
CWE-451 25/08/2026
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65…
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79232
Crítica · 9.6
CWE-416 25/08/2026
Use After Free em Google Chrome
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-79231
Alta · 8.8
CWE-122 25/08/2026
Heap-based Buffer Overflow em Google Chrome
Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79230
Alta · 8.8
CWE-20 25/08/2026
Improper Input Validation em Google Chrome
Improper input validation in ANGLE in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79229
Média · 6.5
CWE-908 25/08/2026
Use of Uninitialized Resource em Google Chrome
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79228
Baixa · 3.1
CWE-863 25/08/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation into a privileged page via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79227
Alta · 8.8
CWE-843 25/08/2026
Type Confusion em Google Chrome
Type confusion in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79226
Alta · 8.8
CWE-269 25/08/2026
Improper Privilege Management em Google Chrome
Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-79225
Média · 4.3
CWE-863 25/08/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Browser in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via UI Interaction. (Chromium security severity: Low)
CVE-2026-79224
Alta · 8.3
CWE-416 25/08/2026
Use After Free em Google Chrome
Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-79223
Alta · 8.8
CWE-190 25/08/2026
Integer Overflow or Wraparound em Google Chrome
Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted file. (Chromium security severity: Low)
CVE-2026-79222
Média · 4.3
CWE-863 25/08/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-installed app. (Chromium security severity: Medium)
CVE-2026-79221
Média · 6.5
CWE-908 25/08/2026
Use of Uninitialized Resource em Google Chrome
Uninitialized resource in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79220
Média · 5.3
CWE-200 25/08/2026
Exposure of Sensitive Information em Google Chrome
Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79219
Alta · 8.8
CWE-416 25/08/2026
Use After Free em Google Chrome
Use after free in Bluetooth in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)