https://db.gcve.eu Latest vulnerabilities published by the CNAs operating under the Google root of the CVE Program. http://www.rssboard.org/rss-specification python-feedgen en Thu, 27 Aug 2026 23:19:19 +0000 https://db.gcve.eu/vuln/cve-2026-19485 Bucket Squatting in Vertex AI Search for Commerce Bucket Squatting in Vertex AI Search for Commerce https://db.gcve.eu/vuln/cve-2026-19485 Wed, 26 Aug 2026 18:06:00 +0000 https://db.gcve.eu/vuln/cve-2026-75062 Eval Injection in google/langfun via default lf.query protocol Eval Injection in google/langfun via default lf.query protocol https://db.gcve.eu/vuln/cve-2026-75062 Wed, 26 Aug 2026 14:50:50 +0000 https://db.gcve.eu/vuln/cve-2026-12717 Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection https://db.gcve.eu/vuln/cve-2026-12717 Wed, 26 Aug 2026 12:59:56 +0000 https://db.gcve.eu/vuln/cve-2026-78964 Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) https://db.gcve.eu/vuln/cve-2026-78964 Tue, 25 Aug 2026 20:11:00 +0000 https://db.gcve.eu/vuln/cve-2026-78914 Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low) https://db.gcve.eu/vuln/cve-2026-78914 Tue, 25 Aug 2026 20:10:59 +0000 https://db.gcve.eu/vuln/cve-2026-79254 Incorrect reference resolution in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) Incorrect reference resolution in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) https://db.gcve.eu/vuln/cve-2026-79254 Tue, 25 Aug 2026 20:10:59 +0000 https://db.gcve.eu/vuln/cve-2026-79260 Improper input validation in Cookies in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) Improper input validation in Cookies in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) https://db.gcve.eu/vuln/cve-2026-79260 Tue, 25 Aug 2026 20:10:59 +0000 https://db.gcve.eu/vuln/cve-2026-79253 Improper input validation in Network in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low) Improper input validation in Network in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low) https://db.gcve.eu/vuln/cve-2026-79253 Tue, 25 Aug 2026 20:10:59 +0000 https://db.gcve.eu/vuln/cve-2026-78915 Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Low) Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Low) https://db.gcve.eu/vuln/cve-2026-78915 Tue, 25 Aug 2026 20:10:59 +0000 https://db.gcve.eu/vuln/cve-2026-79126 Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially obtain sensitive information via crafted network traffic. (Chromium security severity: Low) Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially obtain sensitive information via crafted network traffic. (Chromium security severity: Low) https://db.gcve.eu/vuln/cve-2026-79126 Tue, 25 Aug 2026 20:10:59 +0000