https://db.gcve.eu/cna-root/Google/recent 2026-08-27T23:19:19.521880+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Latest vulnerabilities published by the CNAs operating under the Google root of the CVE Program. https://db.gcve.eu/vuln/cve-2026-19485 2026-08-26T18:06:00.596000+00:00 Bucket Squatting in Vertex AI Search for Commerce

Bucket Squatting in Vertex AI Search for Commerce

2026-08-26T18:06:00.596000+00:00 https://db.gcve.eu/vuln/cve-2026-75062 2026-08-26T14:50:50.604000+00:00 Eval Injection in google/langfun via default lf.query protocol

Eval Injection in google/langfun via default lf.query protocol

2026-08-26T14:50:50.604000+00:00 https://db.gcve.eu/vuln/cve-2026-12717 2026-08-26T12:59:56.543000+00:00 Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection

Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection

2026-08-26T12:59:56.543000+00:00 https://db.gcve.eu/vuln/cve-2026-78964 2026-08-25T20:11:00.195000+00:00 Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

2026-08-25T20:11:00.195000+00:00 https://db.gcve.eu/vuln/cve-2026-78914 2026-08-25T20:10:59.988000+00:00 Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

2026-08-25T20:10:59.988000+00:00 https://db.gcve.eu/vuln/cve-2026-79254 2026-08-25T20:10:59.800000+00:00 Incorrect reference resolution in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

Incorrect reference resolution in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

2026-08-25T20:10:59.800000+00:00 https://db.gcve.eu/vuln/cve-2026-79260 2026-08-25T20:10:59.611000+00:00 Improper input validation in Cookies in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

Improper input validation in Cookies in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

2026-08-25T20:10:59.611000+00:00 https://db.gcve.eu/vuln/cve-2026-79253 2026-08-25T20:10:59.420000+00:00 Improper input validation in Network in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)

Improper input validation in Network in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)

2026-08-25T20:10:59.420000+00:00 https://db.gcve.eu/vuln/cve-2026-78915 2026-08-25T20:10:59.220000+00:00 Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Low)

Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Low)

2026-08-25T20:10:59.220000+00:00 https://db.gcve.eu/vuln/cve-2026-79126 2026-08-25T20:10:59.024000+00:00 Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially obtain sensitive information via crafted network traffic. (Chromium security severity: Low)

Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially obtain sensitive information via crafted network traffic. (Chromium security severity: Low)

2026-08-25T20:10:59.024000+00:00