Vulnerabilidades do Google Chrome

CVE-2026-11228 Média · 4.3 CWE-451 04/06/2026

Inappropriate implementation in File Input in Google Chrome prior to 149.0.7827.53…

Inappropriate implementation in File Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11227 Média · 6.5 CWE-451 04/06/2026

Incorrect security UI in Tab Hover Cards in Google Chrome prior to 149.0.7827.53 allowed…

Incorrect security UI in Tab Hover Cards in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security severity: Low)

CVE-2026-11226 Média · 6.5 CWE-346 04/06/2026

Insufficient policy enforcement in PreviewTab in Google Chrome on Android prior to…

Insufficient policy enforcement in PreviewTab in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11225 Média · 6.5 CWE-451 04/06/2026

Inappropriate implementation in WebUI in Google Chrome prior to 149.0.7827.53 allowed a…

Inappropriate implementation in WebUI in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security severity: Low)

CVE-2026-11224 Alta · 8.1 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Low)

CVE-2026-11223 Média · 6.5 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11222 Média · 6.5 CWE-451 04/06/2026

Incorrect security UI in Tab Strip in Google Chrome prior to 149.0.7827.53 allowed a…

Incorrect security UI in Tab Strip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11221 Média · 4.3 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in PointerLock in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11220 Média · 6.5 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11219 Média · 4.3 CWE-693 04/06/2026

Inappropriate implementation in Navigation in Google Chrome prior to 149.0.7827.53…

Inappropriate implementation in Navigation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11218 Média · 6.8 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Inappropriate implementation in PlatformIntegration in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a malicious file. (Chromium security severity: Low)

CVE-2026-11217 Média · 6.5 CWE-346 04/06/2026

Inappropriate implementation in Fenced Frames in Google Chrome prior to 149.0.7827.53…

Inappropriate implementation in Fenced Frames in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11216 Média · 4.3 CWE-451 04/06/2026

Incorrect security UI in File Input in Google Chrome prior to 149.0.7827.53 allowed a…

Incorrect security UI in File Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11215 Média · 6.5 CWE-451 04/06/2026

Inappropriate implementation in Cronet in Google Chrome on Android prior to…

Inappropriate implementation in Cronet in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security severity: Medium)

CVE-2026-11214 Média · 6.5 CWE-346 04/06/2026

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11213 Crítica · 9.6 CWE-20 04/06/2026

Google Chrome Modo de Leitura: fuga de sandbox por validação insuficiente de entrada

Validação insuficiente de entrada não confiável no Modo de Leitura do Google Chrome anterior à versão 149.0.7827.53 permitiu que um invasor remoto que tivesse comprometido o processo renderizador potencialmente realizasse uma fuga do sandbox por meio de uma página HTML criada com esse fim. (Gravidade de segurança do Chromium: Média)

CVE-2026-11212 Média · 4.3 CWE-284 04/06/2026

Improper Access Control em Google Chrome

Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Medium)

CVE-2026-11211 Alta · 8.8 CWE-472 04/06/2026

Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker…

Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11210 Média · 6.5 CWE-284 04/06/2026

Improper Access Control em Google Chrome

Inappropriate implementation in Safe Browsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted RAR file. (Chromium security severity: Medium)

CVE-2026-11209 Média · 6.5 CWE-200 04/06/2026

Exposure of Sensitive Information em Google Chrome

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11208 Média · 6.5 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11207 Crítica · 9.6 CWE-20 04/06/2026

Falha de validação de entrada no Autofill do Google Chrome com possível fuga de sandbox

Validação insuficiente de entrada não confiável no Autofill do Google Chrome anterior à 149.0.7827.53 permitiu que um atacante remoto potencialmente realizasse uma fuga de sandbox por meio de tráfego de rede malicioso. (Severidade de segurança do Chromium: Média)

CVE-2026-11206 Média · 6.5 CWE-693 04/06/2026

Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 149.0.7827.53…

Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11205 Média · 6.1 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML (UXSS) via a crafted QR code. (Chromium security severity: Medium)

CVE-2026-11204 Média · 6.5 CWE-284 04/06/2026

Improper Access Control em Google Chrome

Inappropriate implementation in Signin in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)