Vulnerabilidades do Google Chrome

CVE-2026-11103 Alta · 7.8 CWE-269 04/06/2026

Improper Privilege Management em Google Chrome

Inappropriate implementation in Installer in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Medium)

CVE-2026-11102 Alta · 8.8 CWE-474 04/06/2026

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to…

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a malicious file. (Chromium security severity: Medium)

CVE-2026-11101 Média · 6.5 CWE-457 04/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11100 Crítica · 9.6 CWE-416 04/06/2026

Use-After-Free no File Input do Google Chrome no Mac

Use after free em File Input no Google Chrome para Mac anterior a 149.0.7827.53 permitiu que um atacante remoto que convencesse um usuário a realizar gestos específicos na interface potencialmente executasse uma fuga de sandbox por meio de uma página HTML elaborada. (Gravidade de segurança do Chromium: Média)

CVE-2026-11098 Média · 5.3 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11097 Média · 6.5 CWE-474 04/06/2026

Inappropriate implementation in WebView in Google Chrome on Android prior to…

Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11096 Média · 6.5 CWE-125 04/06/2026

Out-of-bounds Read em Google Chrome

Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11095 Crítica · 9.6 CWE-20 04/06/2026

Google Chrome: validação insuficiente de entrada em Codecs com possível escape de sandbox

Validação insuficiente de entrada não confiável em Codecs no Google Chrome anterior à versão 149.0.7827.53 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse um escape de sandbox por meio de uma página HTML especialmente construída. (Gravidade de segurança do Chromium: Média)

CVE-2026-11094 Crítica · 9.6 CWE-416 04/06/2026

Use-after-free no componente Codecs do Google Chrome para Windows

Use after free em Codecs no Google Chrome para Windows anterior à 149.0.7827.53 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse uma fuga da sandbox por meio de uma página HTML elaborada. (Gravidade de segurança do Chromium: Média)

CVE-2026-11093 Média · 6.5 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Inappropriate implementation in Printing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11092 Alta · 8.8 CWE-602 04/06/2026

Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.53…

Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. (Chromium security severity: Medium)

CVE-2026-11091 Alta · 8.8 CWE-125 04/06/2026

Out-of-bounds Read em Google Chrome

Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11090 Média · 6.5 CWE-457 04/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11089 Média · 6.5 CWE-457 04/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11088 Crítica · 9.6 CWE-472 04/06/2026

Estouro de inteiro no ANGLE do Google Chrome com possível fuga de sandbox (CVE-2026-11088)

Estouro de inteiro (integer overflow) no ANGLE do Google Chrome anterior à versão 149.0.7827.53 permitiu que um atacante remoto que tivesse comprometido o processo de renderização potencialmente realizasse uma fuga do sandbox por meio de uma página HTML elaborada. (Gravidade de segurança do Chromium: Média)

CVE-2026-11087 Média · 6.5 CWE-457 04/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11086 Alta · 8.8 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11085 Alta · 8.8 CWE-472 04/06/2026

Integer overflow in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a…

Integer overflow in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11084 Média · 6.5 CWE-346 04/06/2026

Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53…

Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11083 Média · 6.5 CWE-346 04/06/2026

Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53…

Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11082 Crítica · 9.6 CWE-416 04/06/2026

Condição de corrida na GPU do Google Chrome para Android com possível fuga de sandbox

Condição de corrida na GPU do Google Chrome no Android anterior à versão 149.0.7827.53 permitiu que um atacante remoto que tivesse comprometido o processo de renderização potencialmente realizasse uma fuga de sandbox por meio de uma página HTML elaborada. (Gravidade de segurança do Chromium: Média)

CVE-2026-11081 Média · 6.5 CWE-346 04/06/2026

Inappropriate implementation in Canvas in Google Chrome prior to 149.0.7827.53 allowed a…

Inappropriate implementation in Canvas in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11080 Alta · 8.8 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11079 Alta · 8.8 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory write via a crafted video file. (Chromium security severity: Medium)

CVE-2026-11078 Média · 6.5 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Inappropriate implementation in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)