Vulnerabilidades em Google
5.229 resultadosAnálise Vexday
Com 4.763 CVEs catalogadas e 77 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração dos produtos Google é 3,6 vezes superior à média geral do catálogo, sinalizando risco operacional elevado para organizações que dependem desse ecossistema. O volume de 1.225 CVEs surgidas nos últimos 90 dias indica cadência intensa de descobertas, exigindo ciclos de patching ágeis. O tipo de falha mais recorrente é CWE-416 (use-after-free), classe de vulnerabilidade que frequentemente viabiliza execução de código arbitrário e escalada de privilégios. Destaque especial para CVE-2023-4863, com EPSS de 0,9974 — valor próximo ao máximo possível —, indicando probabilidade altíssima de exploração ativa e merecendo tratamento prioritário imediato.
CVE-2018-9434HIGHIn multiple functions of Parcel.cpp, there is a possible way to bypass address space layout randomization. This could lead to local escalatiEPSS 0.1%CVE-2025-48552HIGHIn saveGlobalProxyLocked of DevicePolicyManagerService.java, there is a possible way to desync from persistence due to a logic error in the EPSS 0.1%CVE-2026-0026HIGHIn removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due to a logic error inEPSS 0.1%CVE-2025-22406HIGHIn bnepu_check_send_packet of bnep_utils.cc, there is a possible way to achieve code execution due to a use after free. This could lead to lEPSS 0.1%CVE-2023-35670HIGHIn computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private directories due to a patEPSS 0.1%CVE-2023-35665—In multiple files, there is a possible way to import a contact from another user due to a missing permission check. This could lead to localEPSS 0.1%CVE-2024-47031HIGHAndroid before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-329163861.EPSS 0.1%CVE-2026-0017HIGHIn onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code. This could leadEPSS 0.1%CVE-2023-21310—In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with SEPSS 0.1%CVE-2025-48637HIGHIn multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalatEPSS 0.1%CVE-2023-48402—In ppcfw_enable of ppcfw.c, there is a possible EoP due to a missing permission check. This could lead to local escalation of privilege withEPSS 0.1%CVE-2023-35679—In MtpPropertyValue of MtpProperty.h, there is a possible out of bounds read due to uninitialized data. This could lead to local informationEPSS 0.1%CVE-2023-35676—In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsafEPSS 0.1%CVE-2023-21254—In getCurrentState of OneTimePermissionUserManager.java, there is a possible way to hold one-time permissions after the app is being killed EPSS 0.1%CVE-2025-22405HIGHIn multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of priEPSS 0.1%CVE-2023-35682HIGHIn hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a confused deputy. ThEPSS 0.1%CVE-2025-48638HIGHIn __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalaEPSS 0.1%CVE-2025-48527MEDIUMIn multiple locations, there is a possible way to leak hidden work profile notifications due to a logic error in the code. This could lead tEPSS 0.1%CVE-2025-22410HIGHIn multiple locations, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of priEPSS 0.1%CVE-2025-48651MEDIUMIn importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validatioEPSS 0.1%