Início / CVEs
Base de CVEs
Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.
CVE-2026-14044
Crítica · 9.6
CWE-416 30/06/2026
Use after free in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had...
Use after free in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-14043
Crítica · 9.6
CWE-416 30/06/2026
Use after free in GetUserMedia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker...
Use after free in GetUserMedia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-14040
Alta · 8.8
CWE-416 30/06/2026
Use after free in BrowserTag in Google Chrome prior to 150.0.7871.47 allowed an attacker who...
Use after free in BrowserTag in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Low)
CVE-2026-14032
Alta · 8.1
CWE-416 30/06/2026
Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed an attacker...
Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: Low)
CVE-2026-14027
Alta · 8.8
CWE-416 30/06/2026
Use after free in SignIn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...
Use after free in SignIn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-14025
Alta · 8.8
CWE-416 30/06/2026
Use after free in Views in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker...
Use after free in Views in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-14024
Alta · 8.8
CWE-416 30/06/2026
Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote...
Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-14018
Alta · 7.8
CWE-416 30/06/2026
Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local...
Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Medium)
CVE-2026-14006
Alta · 8.8
CWE-416 30/06/2026
Use after free in Navigation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...
Use after free in Navigation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-14005
Alta · 8.8
CWE-416 30/06/2026
Use after free in Omnibox in Google Chrome on Android prior to 150.0.7871.47 allowed a remote...
Use after free in Omnibox in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13965
Alta · 8.8
CWE-416 30/06/2026
Use after free in Oilpan in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...
Use after free in Oilpan in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13918
Alta · 8.8
CWE-416 30/06/2026
Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote...
Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13915
Alta · 8.8
CWE-416 30/06/2026
Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote...
Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13899
Alta · 8.8
CWE-416 30/06/2026
Use after free in HTML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...
Use after free in HTML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13898
Alta · 8.8
CWE-416 30/06/2026
Use after free in Cast Receiver in Google Chrome prior to 150.0.7871.47 allowed a remote attacker...
Use after free in Cast Receiver in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13888
Alta · 8.8
CWE-416 30/06/2026
Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...
Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13885
Alta · 8.8
CWE-416 30/06/2026
Use after free in Skia in Google Chrome on Android prior to 150.0.7871.47 allowed a remote...
Use after free in Skia in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13880
Crítica · 9.6
CWE-416 30/06/2026
Google Chrome para macOS: use-after-free no componente USB (CVE-2026-13880)
Use after free no componente USB do Google Chrome para Mac anterior à versão 150.0.7871.47 permitia que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse um escape do sandbox por meio de uma página HTML elaborada. (Severidade de segurança do Chromium: Média)
CVE-2026-13879
Média · 6.5
CWE-416 30/06/2026
Use after free in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed an attacker on the...
Use after free in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain potentially sensitive information from process memory via a malicious peripheral. (Chromium security severity: Medium)
CVE-2026-13878
Crítica · 9.6
CWE-416 30/06/2026
Use-After-Free no Bluetooth do Google Chrome para Mac com Possível Fuga do Sandbox
Use after free no Bluetooth do Google Chrome no Mac anterior à 150.0.7871.47 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse uma fuga do sandbox por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Média)
CVE-2026-13870
Alta · 8.8
CWE-416 30/06/2026
Use After Free em Google Chrome
Use after free in WebView in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-13869
Crítica · 9.6
CWE-416 30/06/2026
Use-after-free no componente Device do Google Chrome no Windows permite fuga do sandbox
Use after free no componente Device do Google Chrome no Windows anterior à 150.0.7871.47 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse uma fuga do sandbox por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Média)
CVE-2026-13861
Crítica · 9.6
CWE-416 30/06/2026
Google Chrome: use-after-free no componente Core com possível fuga do sandbox (CWE-416)
Use after free em Core no Google Chrome anterior à 150.0.7871.47 permitiu que um atacante remoto que tivesse comprometido o processo renderizador potencialmente realizasse uma fuga do sandbox por meio de uma página HTML criada para esse fim. (Gravidade de segurança do Chromium: Média)
CVE-2026-13855
Alta · 7.5
CWE-416 30/06/2026
Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote...
Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13854
Crítica · 9.6
CWE-416 30/06/2026
Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote...
Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)