Spremljamo ranljivosti v izdelkih največjih proizvajalcev, kot so Microsoft, Cisco, Fortinet, Citrix in drugi. Izberite proizvajalca za seznam njegovih aktivnih ranljivosti in naših člankov.
Google: ranljivosti v zadnjem letu
| CVE | CVSS | EPSS | CISA KEV | Proizvajalec | Opis (NVD, angleško) |
|---|---|---|---|---|---|
| CVE-2026-106197 | 9,6 Kritično | 0,5 % | – | Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) | |
| CVE-2026-91728 | 9,6 Kritično | 0,4 % | – | Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2025-12428 | 8,8 Visoko | 6,9 % | – | Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2026-106240 | 8,8 Visoko | 0,4 % | – | Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2025-2137 | 8,8 Visoko | 0,4 % | – | Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) | |
| CVE-2026-91745 | 8,8 Visoko | 0,3 % | – | Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2025-1920 | 8,8 Visoko | 0,3 % | – | Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2025-12429 | 8,8 Visoko | 0,3 % | – | Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2025-10502 | 8,8 Visoko | 0,3 % | – | Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: High) | |
| CVE-2025-12727 | 8,8 Visoko | 0,3 % | – | Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2025-12432 | 8,8 Visoko | 0,2 % | – | Race in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2025-0611 | 8,2 Visoko | 0,4 % | – | Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2025-0612 | 7,5 Visoko | 0,5 % | – | Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2025-12433 | 4,3 Srednje | 0,3 % | – | Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) | |
| CVE-2025-11215 | 4,3 Srednje | 0,3 % | – | Off by one error in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) | |
| CVE-2025-12441 | 4,3 Srednje | 0,2 % | – | Out of bounds read in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) | |
| CVE-2025-11219 | 3,1 Nizko | 0,3 % | – | Use after free in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Low) |
Naši članki: Google
2 milijon prenosov: Zlonamerne ‘igralne’ aplikacije na Google Play razkrile. Cyber varnost – Android malware – Trojan horse.
## Cyber Security: Razumevanje Android Malware in Trojan Horse ### Kaj je Android.FakeApp.1669? Android.FakeApp.1669 je unikaten trojanski konj, ki izkorišča spremenjeno knjižnico dnsjava. Ta trojanski konj...
8 Million Android Users Hit by SpyLoan Malware in Loan Apps on Google Play
Overview of SpyLoan Malware in Android Apps Recent findings from McAfee Labs have revealed a concerning issue involving over a dozen malicious Android apps on the...
Secure Your Online Accounts with Google’s New Restore Credentials Tool
Google Introduces Restore Credentials for Easy Account Migration Google has unveiled a new feature called Restore Credentials. This tool helps users restore their account access to...
Unlocking Google Workspace Security: Are You Doing Enough to Protect Your Data?
Google Workspace has quickly become the productivity backbone for businesses worldwide, offering an all-in-one suite with email, cloud storage, and collaboration tools. This single-platform approach makes...
Discover the Latest IT Security Insights: Google’s AI-Powered OSS-Fuzz Unveils 26 Vulnerabilities in Open-Source Projects
Google has made significant strides in open-source security with its AI-powered fuzzing tool, OSS-Fuzz. This cutting-edge technology has successfully identified 26 vulnerabilities in various open-source code...
Researchers Warn of Privilege Escalation Risks in Google’s Vertex AI ML Platform.
Understanding Vulnerabilities in Google’s Vertex ML Platform Cybersecurity researchers have uncovered critical security flaws within Google's Vertex machine learning (ML) platform. These issues, if exploited, could...
Google Warns of Rising Cloaking Scams, AI-Driven Fraud, and Crypto Schemes
Understanding Landing Page Cloaking and Online Scams Google has raised concerns about online scams, particularly those using techniques like landing page cloaking. This tactic allows bad...
Enhancing Security: Google Cloud’s Mandatory Multi-Factor Authentication by 2025
Google Cloud to Implement Mandatory Multi-Factor Authentication (MFA) Google's cloud division has announced a significant security upgrade by enforcing mandatory multi-factor authentication (MFA) for all users....
The Ultimate Guide to Defending Against Lazarus Group’s Google Chrome Exploits
North Korean Cyber Threat: The Lazarus Group and Chrome Exploits The Lazarus Group, a notorious North Korean threat actor, has been linked to zero-day exploitation of...