Vulnerabilidades do Google Chrome

CVE-2026-11303 Alta · 8.8 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: Low)

CVE-2026-11302 Média · 4.3 CWE-284 04/06/2026

Improper Access Control em Google Chrome

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11301 Alta · 8.8 CWE-125 04/06/2026

Out-of-bounds Read em Google Chrome

Inappropriate implementation in LiveCaption in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via malicious network traffic. (Chromium security severity: Low)

CVE-2026-11300 Média · 4.3 CWE-451 04/06/2026

Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53…

Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11299 Média · 6.5 CWE-125 04/06/2026

Out-of-bounds Read em Google Chrome

Integer overflow in Fonts in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11298 Média · 4.3 CWE-346 04/06/2026

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11297 Alta · 7.7 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to bypass navigation restrictions via a malicious file. (Chromium security severity: Low)

CVE-2026-11296 Alta · 7.5 CWE-269 04/06/2026

Improper Privilege Management em Google Chrome

Inappropriate implementation in ImageCapture in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11295 Alta · 8.8 CWE-269 04/06/2026

Improper Privilege Management em Google Chrome

Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11294 Média · 4.3 CWE-451 04/06/2026

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53…

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11293 Crítica · 9.6 CWE-416 04/06/2026

Use-after-free no Input do Google Chrome com possível fuga de sandbox

Use after free no componente Input do Google Chrome anterior à versão 149.0.7827.53 permitia que um atacante remoto potencialmente realizasse uma fuga de sandbox por meio de uma página HTML especialmente criada. (Gravidade de segurança do Chromium: Baixa)

CVE-2026-11292 Média · 4.3 CWE-693 04/06/2026

Insufficient policy enforcement in Blink in Google Chrome prior to 149.0.7827.53 allowed…

Insufficient policy enforcement in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11291 Média · 4.3 CWE-346 04/06/2026

Inappropriate implementation in Android Autofill in Google Chrome on Android prior to…

Inappropriate implementation in Android Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11290 Média · 5.0 CWE-472 04/06/2026

Integer overflow in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a…

Integer overflow in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to cause a denial of service via a malicious file. (Chromium security severity: Low)

CVE-2026-11289 Média · 6.5 CWE-1300 04/06/2026

Side-channel information leakage in Paint in Google Chrome prior to 149.0.7827.53…

Side-channel information leakage in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11288 Média · 6.5 CWE-693 04/06/2026

Insufficient policy enforcement in CSS in Google Chrome prior to 149.0.7827.53 allowed a…

Insufficient policy enforcement in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11287 Média · 6.5 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11286 Média · 4.3 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Wallet in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11285 Média · 4.3 CWE-451 04/06/2026

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11284 Média · 6.5 CWE-1300 04/06/2026

Side-channel information leakage in PerformanceAPIs in Google Chrome prior to…

Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11283 Média · 6.5 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Shortcuts in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a malicious file. (Chromium security severity: Low)

CVE-2026-11282 Crítica · 9.6 CWE-693 04/06/2026

Falha de imposição de política no Sandbox do Google Chrome no Linux

Imposição insuficiente de política no Sandbox do Google Chrome no Linux anterior à versão 149.0.7827.53 permitiu que um atacante remoto potencialmente realizasse uma fuga do sandbox por meio de uma página HTML especialmente elaborada. (Gravidade de segurança do Chromium: Baixa)

CVE-2026-11281 Média · 5.0 CWE-472 04/06/2026

Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53…

Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted ETW event. (Chromium security severity: Low)

CVE-2026-11280 Média · 4.3 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Inappropriate implementation in Signin in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11279 Alta · 8.8 CWE-125 04/06/2026

Out-of-bounds Read em Google Chrome

Out of bounds read in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)