Vulnerabilidades en Google
5244 resultadosAnálisis Vexday
Com 4.763 CVEs catalogadas e 77 confirmadas em exploração ativa pelo CISA KEV, a taxa de exploração dos produtos Google é 3,6 vezes superior à média geral do catálogo, sinalizando risco operacional elevado para organizações que dependem desse ecossistema. O volume de 1.225 CVEs surgidas nos últimos 90 dias indica cadência intensa de descobertas, exigindo ciclos de patching ágeis. O tipo de falha mais recorrente é CWE-416 (use-after-free), classe de vulnerabilidade que frequentemente viabiliza execução de código arbitrário e escalada de privilégios. Destaque especial para CVE-2023-4863, com EPSS de 0,9974 — valor próximo ao máximo possível —, indicando probabilidade altíssima de exploração ativa e merecendo tratamento prioritário imediato.
CVE-2018-9441MEDIUMIn sdp_copy_raw_data of sdp_discovery.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local EPSS 0.1%CVE-2026-11281MEDIUMInteger overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive iEPSS 0.1%CVE-2024-40677HIGHIn shouldSkipForInitialSUW of AdvancedPowerUsageDetail.java, there is a possible way to bypass factory reset protections due to a missing peEPSS 0.1%CVE-2024-29738MEDIUMIn gov_init, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no aEPSS 0.1%CVE-2025-32345HIGHIn updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disable the primary userEPSS 0.1%CVE-2025-0082MEDIUMIn multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confuseEPSS 0.1%CVE-2023-21349—In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informaEPSS 0.1%CVE-2024-25987MEDIUMIn pt_sysctl_command of pt.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation EPSS 0.1%CVE-2018-9345MEDIUMIn BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This coEPSS 0.1%CVE-2025-6177HIGHChromeOS MiniOS Root Code Execution Bypass While Dev Mode BlockedEPSS 0.1%CVE-2025-26419LOWIn initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. This could lead to localEPSS 0.1%CVE-2023-21373—In Telephony, there is a possible way for a guest user to change the preferred SIM due to a missing permission check. This could lead to locEPSS 0.1%CVE-2026-0055MEDIUMIn createSessionInternal of PackageInstallerService.java, there is a possible to update a Device Policy Controller (DPC) into an invalid dirEPSS 0.1%CVE-2024-43095HIGHIn multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This could lead to local esEPSS 0.1%CVE-2018-9398HIGHIn fm_set_stat of mediatek FM radio driver, there is a possible OOB write
due to improper input validation. This could lead to local escEPSS 0.1%CVE-2018-9346MEDIUMIn BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This coEPSS 0.1%CVE-2018-9404HIGHIn oemCallback of ril.cpp, there is a possible out of bounds write due to an
integer overflow. This could lead to local escalation of prEPSS 0.1%CVE-2018-9400HIGHIn gt1x_debug_write_proc and gt1x_tool_write of
drivers/input/touchscreen/mediatek/GT1151/gt1x_generic.c and gt1x_tools.c,
there is EPSS 0.1%CVE-2025-26420MEDIUMIn multiple functions of GrantPermissionsActivity.java , there is a possible way to trick the user into granting the incorrect permission duEPSS 0.1%CVE-2023-21269—In startActivityInner of ActivityStarter.java, there is a possible way to launch an activity into PiP mode from the background due to BAL byEPSS 0.1%