Vulnerabilidades de Google
CVEs publicadas que afetam produtos de Google: 4434 registro(s), com severidade, exploração e correções.
Chrome 3751Android 627Mcp Toolbox For Databases 14MCP Toolbox for Databases (googleapis/mcp-toolbox) 6Mcp-toolbox 5SAM 3Libjxl 2Keras 2gVisor 2Go-attestation 2Android Xr 2OSV-SCALIBR 2Chrome-devtools-mcp 2Google-ADK 1Google Devices 1Nest 1Tink Java 1A2ui/web Core 1Common Expression Language 1Tink-Android 1WearOS 1Turbinia 1Langfun 1Android Wear 1Cel-go 1Site Kit by Google 1Protobuf-javascript (aka Google-protobuf Npm Package) 1Mcp-toolbox-sdk-python 1Fuse-archive 1ADK TypeScript (@google/adk) 1Protobuf 1Security Operations Soar 1Nest Wifi Router Firmware 1Nest Wifi Point Firmware 1Nest Wifi Pro Firmware 1Web Designer 1Cloud Build 1Clasp 1Gerrit 1Sentencepiece 1
CVE-2026-17835
Média · 6.5
CWE-451 29/07/2026
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17834
Crítica · 9.6
CWE-20 29/07/2026
Improper Input Validation em Google Chrome
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17833
Média · 4.3
CWE-346 29/07/2026
Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72…
Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17832
Crítica · 9.6
CWE-416 29/07/2026
Use After Free em Google Chrome
Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17831
Média · 6.5
CWE-20 29/07/2026
Improper Input Validation em Google Chrome
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17830
Média · 6.5
CWE-284 29/07/2026
Improper Access Control em Google Chrome
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17829
Média · 4.3
CWE-346 29/07/2026
Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72…
Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17828
Média · 6.5
CWE-451 29/07/2026
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17827
Média · 6.1
CWE-79 29/07/2026
Cross-site Scripting (XSS) em Google Chrome
Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17826
Baixa · 3.1
CWE-346 29/07/2026
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17825
Média · 6.5
CWE-284 29/07/2026
Improper Access Control em Google Chrome
Insufficient policy enforcement in Passwords in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17824
Média · 6.5
CWE-284 29/07/2026
Improper Access Control em Google Chrome
Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17823
Média · 6.5
CWE-346 29/07/2026
Insufficient policy enforcement in WebXR in Google Chrome prior to 151.0.7922.72 allowed…
Insufficient policy enforcement in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17822
Média · 6.5
CWE-362 29/07/2026
Race Condition em Google Chrome
Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17821
Média · 6.5
CWE-602 29/07/2026
Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72…
Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)
CVE-2026-17820
Média · 4.3
CWE-346 29/07/2026
Insufficient policy enforcement in Autofill in Google Chrome prior to 151.0.7922.72…
Insufficient policy enforcement in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17819
Média · 6.5
CWE-451 29/07/2026
Inappropriate implementation in WebAppInstalls in Google Chrome prior to 151.0.7922.72…
Inappropriate implementation in WebAppInstalls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17818
Média · 6.1
CWE-79 29/07/2026
Cross-site Scripting (XSS) em Google Chrome
Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17817
Média · 4.3
CWE-346 29/07/2026
Inappropriate implementation in ReportingAndNEL in Google Chrome prior to 151.0.7922.72…
Inappropriate implementation in ReportingAndNEL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17816
Alta · 7.5
CWE-269 29/07/2026
Improper Privilege Management em Google Chrome
Insufficient policy enforcement in Speech in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17815
Média · 4.3
CWE-346 29/07/2026
Insufficient policy enforcement in GuestView in Google Chrome prior to 151.0.7922.72…
Insufficient policy enforcement in GuestView in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17814
Média · 6.5
CWE-20 29/07/2026
Improper Input Validation em Google Chrome
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17813
Média · 6.5
CWE-602 29/07/2026
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to…
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17812
Média · 5.4
CWE-451 29/07/2026
Inappropriate implementation in DigitalCredentials in Google Chrome prior to…
Inappropriate implementation in DigitalCredentials in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17811
Alta · 7.1
CWE-416 29/07/2026
Use After Free em Google Chrome
Use after free in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)