Vulnerabilities in google

6,721 results
Vexday analysis

Google registra presença mínima no panorama de risco com apenas 4 vulnerabilidades na base, nenhuma sob exploração ativa (KEV) e apenas 1 crítica identificada. A fraqueza dominante relaciona-se a validação inadequada de entrada (CWE-20), indicando risco controlado e sem pressão temporal dado que não há publicações nos últimos 90 dias.

CVE-2026-11030HIGHUse after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via malicEPSS 0.3%CVE-2026-14386MEDIUMOut of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information frEPSS 0.3%CVE-2026-13931MEDIUMInappropriate implementation in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the rEPSS 0.3%CVE-2026-87433HIGHRace condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypaEPSS 0.3%CVE-2026-13985MEDIUMInappropriate implementation in MediaCapture in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the rendeEPSS 0.3%CVE-2026-78942MEDIUMIncorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via cEPSS 0.3%CVE-2026-11037CRITICALOut of bounds write in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via EPSS 0.3%CVE-2026-14388MEDIUMOut of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information frEPSS 0.3%CVE-2026-7910MEDIUMUse after free in Views in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypassEPSS 0.3%CVE-2026-78968MEDIUMMissing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to EPSS 0.3%CVE-2026-102313MEDIUMUninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sEPSS 0.3%CVE-2026-0170HIGHIn Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote EPSS 0.3%CVE-2026-0159HIGHIn Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no aEPSS 0.3%CVE-2026-91720MEDIUMUninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a cEPSS 0.3%CVE-2026-102307MEDIUMUninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read memory outside the saEPSS 0.3%CVE-2026-0146HIGHIn mfc_core_get_dec_metadata_sei_nal of mfc_core_reg_api.c, there is a possible out of bounds write due to a missing bounds check. This coulEPSS 0.3%CVE-2026-14044CRITICALUse after free in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentEPSS 0.3%CVE-2026-3919HIGHUse after free in Extensions in Google Chrome prior to 146.0.7680.71 allowed an attacker who convinced a user to install a malicious extensiEPSS 0.3%CVE-2026-89418HIGHUncontrolled Recursion leading to Denial of Service in protobuf-javascript (google-protobuf)EPSS 0.3%CVE-2026-95330MEDIUMImproper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictionEPSS 0.3%