Início / CVEs
Base de CVEs
Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.
CVE-2026-11050
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11049
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11042
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in Views in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11040
Alta · 8.3
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11030
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: Medium)
CVE-2026-11028
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in Media in Google Chrome on Linux and ChromeOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11012
Alta · 8.3
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in Serial in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11010
Alta · 8.3
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in WebShare in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11009
Crítica · 9.6
CWE-416 04/06/2026
Google Chrome: use-after-free no USB permite fuga de sandbox
Use after free no componente USB do Google Chrome no Windows anterior à 149.0.7827.53 permitiu que um atacante remoto potencialmente realizasse uma fuga de sandbox por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Média)
CVE-2026-11003
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-11002
Crítica · 9.6
CWE-416 04/06/2026
Use-after-free no Autofill do Google Chrome com possível escape de sandbox
Use after free no Autofill do Google Chrome anterior a 149.0.7827.53 permitiu que um atacante remoto que tivesse comprometido o processo renderer executasse potencialmente um escape de sandbox por meio de uma pagina HTML elaborada. (Gravidade de seguranca do Chromium: Media)
CVE-2026-11000
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in Fonts in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-10991
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-10990
Crítica · 9.6
CWE-416 04/06/2026
Google Chrome Glic: use-after-free com possível fuga do sandbox
Use after free no Glic no Google Chrome anterior à 149.0.7827.53 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse uma fuga do sandbox por meio de uma página HTML criada para esse fim. (Severidade de segurança do Chromium: Média)
CVE-2026-10988
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in Views in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-10982
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in WebXR in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-10978
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: High)
CVE-2026-10975
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-10972
Crítica · 9.6
CWE-416 04/06/2026
Use-after-free no Ozone do Google Chrome no Linux
Use after free no Ozone no Google Chrome no Linux anterior à 149.0.7827.53 permitiu que um atacante remoto potencialmente realizasse uma fuga do sandbox por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Alta)
CVE-2026-10967
Alta · 8.3
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in SurfaceCapture in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-10961
Alta · 8.3
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-10959
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in Input in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-10958
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2026-10957
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-10956
Alta · 8.8
CWE-416 04/06/2026
Use After Free em Google Chrome
Use after free in MimeHandlerView in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)