Vulnerabilidades en google
5202 resultadosCVE-2026-13794HIGHInsufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker whEPSS 0.4%CVE-2022-3314MEDIUMUse after free in logging in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentialEPSS 0.4%CVE-2025-6192HIGHUse after free in Metrics in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially exploit heap corruption via a crEPSS 0.4%CVE-2024-0806HIGHUse after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via speEPSS 0.4%CVE-2026-4677HIGHInappropriate implementation in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memoEPSS 0.4%CVE-2022-0301—Heap buffer overflow in DevTools in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to install a malicious exteEPSS 0.4%CVE-2022-1497—Inappropriate implementation in Input in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to spoof the contents of cross-origiEPSS 0.4%CVE-2025-0443HIGHInsufficient data validation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage EPSS 0.4%CVE-2025-0447HIGHInappropriate implementation in Navigation in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform privilege escalationEPSS 0.4%CVE-2023-1224—Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation rEPSS 0.4%CVE-2018-18358—Lack of special casing of localhost in WPAD files in Google Chrome prior to 71.0.3578.80 allowed an attacker on the local network segment toEPSS 0.4%CVE-2021-21200—Out of bounds read in WebUI Settings in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform an out of bounds memory reaEPSS 0.4%CVE-2025-13224HIGHType Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a craftedEPSS 0.4%CVE-2021-4321—Policy bypass in Blink in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTMLEPSS 0.4%CVE-2024-7003MEDIUMInappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in spEPSS 0.4%CVE-2023-1979MEDIUMAuth bypass in Web Stories for WordPress pluginEPSS 0.4%CVE-2023-21242—In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in theEPSS 0.4%CVE-2022-4186—Insufficient validation of untrusted input in Downloads in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to EPSS 0.4%CVE-2023-35649—In several functions of Exynos modem files, there is a possible out of bounds write due to a missing bounds check. This could lead to remoteEPSS 0.4%CVE-2019-13690CRITICALInappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform OS-level privilegEPSS 0.4%