Início / CVEs
Base de CVEs
Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.
CVE-2026-87650
Crítica · 9.6
CWE-125 08/09/2026
Out-of-bounds Read em Google Chrome
Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87646
Crítica · 9.6
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87643
Crítica · 9.6
CWE-190 08/09/2026
Integer Overflow or Wraparound em Google Chrome
Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87638
Crítica · 9.6
CWE-787 08/09/2026
Out-of-bounds Write em Google Chrome
Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87637
Crítica · 9.6
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87634
Crítica · 9.6
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87621
Crítica · 9.6
CWE-787 08/09/2026
Out-of-bounds Write em Google Chrome
Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87613
Crítica · 9.0
CWE-706 08/09/2026
Use of Incorrectly-Resolved Name or Reference em Google Chrome
Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)
CVE-2026-87609
Crítica · 9.6
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)
CVE-2026-87607
Crítica · 9.6
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in Device in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87595
Crítica · 9.8
CWE-918 08/09/2026
Server-Side Request Forgery (SSRF) em Google Chrome
Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87581
Crítica · 9.6
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87558
Crítica · 9.6
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87547
Crítica · 9.6
CWE-706 08/09/2026
Use of Incorrectly-Resolved Name or Reference em Google Chrome
Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87544
Crítica · 9.8
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87534
Crítica · 9.8
CWE-862 08/09/2026
Missing Authorization em Google Chrome
Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)
CVE-2026-87529
Crítica · 9.6
CWE-197 08/09/2026
Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a…
Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87528
Crítica · 9.6
CWE-843 08/09/2026
Type Confusion em Google Chrome
Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87527
Crítica · 9.6
CWE-122 08/09/2026
Heap-based Buffer Overflow em Google Chrome
Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-87526
Crítica · 9.6
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: Medium)
CVE-2026-87520
Crítica · 9.6
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87512
Crítica · 9.6
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87504
Crítica · 9.6
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-87500
Crítica · 9.6
CWE-129 08/09/2026
Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36…
Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87494
Crítica · 9.6
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)