https://vulnerability.circl.lu/cna-root/Google/recent 2026-08-25T16:40:30.590816+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Latest vulnerabilities published by the CNAs operating under the Google root of the CVE Program. https://vulnerability.circl.lu/vuln/cve-2025-36939 2026-08-24T16:38:45.696000+00:00 Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow.

Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow.

2026-08-24T16:38:45.696000+00:00 https://vulnerability.circl.lu/vuln/cve-2025-36940 2026-08-24T16:33:53.675000+00:00 Use-After-Free vulnerability in a zircon kernel pager proxy (Fuchsia), which could lead to a Privilege Escalation from Userspace to Kernel (AP)

Use-After-Free vulnerability in a zircon kernel pager proxy (Fuchsia), which could lead to a Privilege Escalation from Userspace to Kernel (AP)

2026-08-24T16:33:53.675000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-12710 2026-08-22T08:13:00.095000+00:00 Missing Authorization in Application Integration QueryEngineTask

Missing Authorization in Application Integration QueryEngineTask

2026-08-22T08:13:00.095000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-76023 2026-08-20T20:51:20.725000+00:00 Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

2026-08-20T20:51:20.725000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-76022 2026-08-20T20:51:20.515000+00:00 Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

2026-08-20T20:51:20.515000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-76021 2026-08-20T20:51:20.309000+00:00 Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

2026-08-20T20:51:20.309000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-76020 2026-08-20T20:51:20.076000+00:00 Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

2026-08-20T20:51:20.076000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-76019 2026-08-20T20:51:19.840000+00:00 Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

2026-08-20T20:51:19.840000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-76018 2026-08-20T20:51:19.618000+00:00 Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. (Chromium security severity: High)

Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. (Chromium security severity: High)

2026-08-20T20:51:19.618000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-76017 2026-08-20T20:51:19.395000+00:00 Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)

Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)

2026-08-20T20:51:19.395000+00:00