Base de CVEs

CVE-2026-13853 Crítica · 9.6 CWE-416 30/06/2026

Use-after-free no Journeys do Google Chrome com possível fuga de sandbox (CVE-2026-13853)

Use after free em Journeys no Google Chrome anterior à 150.0.7871.47 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse uma fuga do sandbox por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Alta)

CVE-2026-13848 Alta · 8.8 CWE-416 30/06/2026

Use after free in Forms in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

Use after free in Forms in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13846 Crítica · 9.6 CWE-416 30/06/2026

Use-After-Free no componente USB do Google Chrome para Mac com risco de fuga do sandbox (CVE-2026-13846)

Use after free em USB no Google Chrome para Mac anterior a 150.0.7871.47 permitia que um invasor remoto que tivesse comprometido o processo renderer realizasse potencialmente uma fuga do sandbox por meio de uma página HTML criada para esse fim. (Gravidade de segurança do Chromium: Alta)

CVE-2026-13845 Alta · 8.8 CWE-416 30/06/2026

Use after free in DOM in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

Use after free in DOM in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13844 Alta · 7.8 CWE-416 30/06/2026

Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local...

Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)

CVE-2026-13832 Alta · 8.3 CWE-416 30/06/2026

Use after free in Headless in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...

Use after free in Headless in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13831 Alta · 7.5 CWE-416 30/06/2026

Out of bounds read and write in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote...

Out of bounds read and write in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13830 Alta · 8.8 CWE-416 30/06/2026

Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote...

Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: High)

CVE-2026-13827 Alta · 7.8 CWE-416 30/06/2026

Use after free in Updater in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker...

Use after free in Updater in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: High)

CVE-2026-13823 Alta · 8.3 CWE-416 30/06/2026

Use after free in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had...

Use after free in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13821 Alta · 8.8 CWE-416 30/06/2026

Use after free in Canvas in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

Use after free in Canvas in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13815 Alta · 8.8 CWE-416 30/06/2026

Use after free in Blink in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

Use after free in Blink in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13814 Alta · 7.5 CWE-416 30/06/2026

Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...

Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13811 Alta · 8.8 CWE-416 30/06/2026

Use after free in IME in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

Use after free in IME in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13807 Alta · 7.5 CWE-416 30/06/2026

Use after free in Import in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker...

Use after free in Import in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a malicious file. (Chromium security severity: High)

CVE-2026-13805 Alta · 8.8 CWE-416 30/06/2026

Use after free in GFX in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to...

Use after free in GFX in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13804 Alta · 8.3 CWE-416 30/06/2026

Use after free in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker...

Use after free in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13802 Alta · 7.5 CWE-416 30/06/2026

Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...

Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13799 Alta · 8.1 CWE-416 30/06/2026

Use after free in QUIC in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

Use after free in QUIC in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: High)

CVE-2026-13792 Crítica · 9.6 CWE-416 30/06/2026

Google Chrome no macOS: Use-After-Free no componente Touch Bar com possível fuga de sandbox

Use after free no Touchbar no Google Chrome para Mac anterior à 150.0.7871.47 permitia que um atacante remoto potencialmente realizasse uma fuga de sandbox por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Alta)

CVE-2026-13789 Crítica · 9.6 CWE-416 30/06/2026

Use-after-free na GPU do Google Chrome com possível escape de sandbox (CVE-2026-13789)

Use after free na GPU do Google Chrome anterior à versão 150.0.7871.47 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse um escape do sandbox por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Alta)

CVE-2026-13788 Alta · 8.8 CWE-416 30/06/2026

Use after free in Fullscreen in Google Chrome on Android prior to 150.0.7871.47 allowed a remote...

Use after free in Fullscreen in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-13787 Alta · 8.1 CWE-416 30/06/2026

Use after free in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote...

Use after free in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Critical)

CVE-2026-13786 Alta · 8.8 CWE-416 30/06/2026

Use after free in Ozone in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

Use after free in Ozone in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-13785 Crítica · 9.6 CWE-416 30/06/2026

Google Chrome para Mac: use-after-free no Bluetooth com possível fuga de sandbox

Use após liberação (use after free) no Bluetooth do Google Chrome no Mac anterior à versão 150.0.7871.47 permitia que um atacante remoto que convencesse um usuário a executar gestos específicos na interface realizasse potencialmente uma fuga de sandbox por meio de uma página HTML criada para isso. (Gravidade de segurança do Chromium: Crítica)