Base de CVEs

CVE-2026-13942 Baixa · 3.3 CWE-20 30/06/2026

Inappropriate implementation in Video Capture in Google Chrome on ChromeOS prior to 150.0.7871.47...

Inappropriate implementation in Video Capture in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a local attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13939 Baixa · 3.1 CWE-20 30/06/2026

Insufficient validation of untrusted input in WebShare in Google Chrome on Android prior to 150.0...

Insufficient validation of untrusted input in WebShare in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13934 Crítica · 9.6 CWE-20 30/06/2026

Google Chrome no Android: escape de sandbox no Dawn por validação inadequada de entrada

Validação insuficiente de entrada não confiável no Dawn, no Google Chrome para Android anterior à versão 150.0.7871.47, permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse um escape do sandbox por meio de uma página HTML elaborada. (Gravidade de segurança do Chromium: Média)

CVE-2026-13929 Média · 5.5 CWE-20 30/06/2026

Insufficient policy enforcement in DevTools in Google Chrome on Android prior to 150.0.7871.47...

Insufficient policy enforcement in DevTools in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to bypass navigation restrictions via a malicious file. (Chromium security severity: Medium)

CVE-2026-13928 Alta · 8.8 CWE-20 30/06/2026

Insufficient validation of untrusted input in Enterprise in Google Chrome prior to 150.0.7871.47...

Insufficient validation of untrusted input in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13927 Alta · 7.8 CWE-20 30/06/2026

Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 150.0.7871...

Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Medium)

CVE-2026-13926 Média · 6.5 CWE-20 30/06/2026

Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47...

Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13925 Alta · 7.5 CWE-20 30/06/2026

Inappropriate implementation in Downloads in Google Chrome on Windows prior to 150.0.7871.47...

Inappropriate implementation in Downloads in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13924 Média · 6.5 CWE-20 30/06/2026

Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 150.0...

Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13921 Média · 6.5 CWE-20 30/06/2026

Insufficient validation of untrusted input in DeviceBoundSessionCredentials in Google Chrome...

Insufficient validation of untrusted input in DeviceBoundSessionCredentials in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13920 Crítica · 9.6 CWE-20 30/06/2026

Google Chrome: Validação Imprópria de Entrada em Media Permite Possível Escape de Sandbox

Validação insuficiente de entrada não confiável em Media no Google Chrome para Windows anterior à 150.0.7871.47 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse uma fuga do sandbox por meio de uma página HTML elaborada. (Severidade de segurança do Chromium: Média)

CVE-2026-13917 Média · 6.5 CWE-20 30/06/2026

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150...

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13911 Média · 5.3 CWE-20 30/06/2026

Insufficient policy enforcement in Spellcheck in Google Chrome prior to 150.0.7871.47 allowed a...

Insufficient policy enforcement in Spellcheck in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13908 Média · 6.5 CWE-20 30/06/2026

Insufficient validation of untrusted input in Omnibox in Google Chrome on iOS prior to 150.0.7871...

Insufficient validation of untrusted input in Omnibox in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via malicious network traffic. (Chromium security severity: Medium)

CVE-2026-13901 Crítica · 9.6 CWE-20 30/06/2026

Google Chrome, componente Serial: fuga de sandbox por aplicação insuficiente de política

Aplicação insuficiente de política no Serial no Google Chrome anterior à 150.0.7871.47 permitiu que um atacante remoto que tivesse comprometido o processo de renderização potencialmente realizasse uma fuga do sandbox por meio de uma página HTML elaborada. (Gravidade de segurança do Chromium: Média)

CVE-2026-13900 Média · 6.5 CWE-20 30/06/2026

Inappropriate implementation in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a...

Inappropriate implementation in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13893 Média · 6.5 CWE-20 30/06/2026

Insufficient validation of untrusted input in WebUI in Google Chrome prior to 150.0.7871.47...

Insufficient validation of untrusted input in WebUI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via malicious network traffic. (Chromium security severity: Medium)

CVE-2026-13891 Alta · 7.5 CWE-20 30/06/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13889 Média · 6.5 CWE-20 30/06/2026

Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871...

Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13877 Média · 5.3 CWE-20 30/06/2026

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47...

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13875 Média · 5.3 CWE-20 30/06/2026

Insufficient validation of untrusted input in GPU in Google Chrome on Windows prior to 150.0.7871...

Insufficient validation of untrusted input in GPU in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13872 Crítica · 9.1 CWE-20 30/06/2026

Google Chrome para Android: validação inadequada de entrada em WebAppInstalls com possível escape de sandbox

Validação insuficiente de entrada não confiável em WebAppInstalls no Google Chrome para Android anterior à 150.0.7871.47 permitia que um atacante local potencialmente realizasse um escape de sandbox por meio de um arquivo malicioso. (Gravidade de segurança do Chromium: Média)

CVE-2026-13866 Média · 6.5 CWE-20 30/06/2026

Inappropriate implementation in Input in Google Chrome on Android prior to 150.0.7871.47 allowed...

Inappropriate implementation in Input in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13865 Média · 4.3 CWE-20 30/06/2026

Insufficient validation of untrusted input in Enterprise in Google Chrome prior to 150.0.7871.47...

Insufficient validation of untrusted input in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13863 Alta · 7.8 CWE-20 30/06/2026

Insufficient validation of untrusted input in CustomTabs in Google Chrome on Android prior to 150...

Insufficient validation of untrusted input in CustomTabs in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Medium)