Vulnerabilidades em google
7.003 resultadosAnálise Vexday
Google registra presença mínima no panorama de risco com apenas 4 vulnerabilidades na base, nenhuma sob exploração ativa (KEV) e apenas 1 crítica identificada. A fraqueza dominante relaciona-se a validação inadequada de entrada (CWE-20), indicando risco controlado e sem pressão temporal dado que não há publicações nos últimos 90 dias.
CVE-2025-48630HIGHIn drawLayersInternal of SkiaRenderEngine.cpp, there is a possible way to access the GPU cache due to side channel information disclosure. TEPSS 0.1%CVE-2026-58721MEDIUMIn multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information discEPSS 0.1%CVE-2026-58739MEDIUMIn platform_msg_handler_init of default_msg_handlers.c, there is a possible confused deputy due to a confused deputy. This could lead to locEPSS 0.1%CVE-2023-21384—In Package Manager, there is a possible possible permissions bypass due to an unsafe PendingIntent. This could lead to local information disEPSS 0.1%CVE-2025-0080HIGHIn multiple locations, there is a possible way to overlay the installation confirmation dialog due to a tapjacking/overlay attack. This coulEPSS 0.1%CVE-2026-56879MEDIUMIn gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a confused deputy. This could lead to local escalation of pEPSS 0.1%CVE-2026-56950MEDIUMIn validate_ns_buf of mbu_class.rs, there is a possible information disclosure due to improper input validation. This could lead to local inEPSS 0.1%CVE-2025-48596HIGHIn appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of prEPSS 0.1%CVE-2026-7941MEDIUMInsufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 148.0.7778.96 allowed a local attacker to inject aEPSS 0.1%CVE-2024-29749HIGHIn tmu_set_tr_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatioEPSS 0.1%CVE-2026-11229MEDIUMInappropriate implementation in Enterprise in Google Chrome prior to 149.0.7827.53 allowed a local attacker to perform privilege escalation EPSS 0.1%CVE-2023-21299—In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informaEPSS 0.1%CVE-2025-48640HIGHIn multiple locations, there is a possible 3rd party passkey entry pairing approval due to a missing permission check. This could lead to reEPSS 0.1%CVE-2023-21300—In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informatEPSS 0.1%CVE-2025-32323HIGHIn getCallingAppName of Shared.java, there is a possible way to trick users into granting file access via deceptive text in a permission popEPSS 0.1%CVE-2024-47030MEDIUMAndroid before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-315191818.EPSS 0.1%CVE-2023-21328—In Package Installer, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permissiEPSS 0.1%CVE-2026-106340MEDIUMMissing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitiEPSS 0.1%CVE-2024-23704HIGHIn onCreate of WifiDialogActivity.java, there is a possible way to bypass the DISALLOW_ADD_WIFI_CONFIG restriction due to a missing permissiEPSS 0.1%CVE-2023-21355—In libaudioclient, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with noEPSS 0.1%