Vulnerabilidades do Google Chrome

CVE-2026-11077 Alta · 8.8 CWE-125 04/06/2026

Out-of-bounds Read em Google Chrome

Bad cast in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11076 Alta · 8.8 CWE-843 04/06/2026

Type Confusion em Google Chrome

Type Confusion in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11075 Média · 6.5 CWE-125 04/06/2026

Out-of-bounds Read em Google Chrome

Out of bounds read in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11074 Alta · 8.8 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in WebRTC in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11073 Média · 6.5 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in WebGL in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11072 Alta · 7.8 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to execute arbitrary code via a malicious file. (Chromium security severity: Medium)

CVE-2026-11071 Alta · 8.8 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in Base in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11070 Crítica · 9.6 CWE-20 04/06/2026

Falha de Validação de Entrada no Chromoting do Google Chrome que Permite Escape de Sandbox

Validação insuficiente de entrada não confiável no Chromoting do Google Chrome no Windows, em versões anteriores à 149.0.7827.53, permitiu que um atacante remoto que tivesse comprometido o processo de rede realizasse potencialmente um escape de sandbox por meio de tráfego de rede malicioso. (Severidade de segurança do Chromium: Média)

CVE-2026-11069 Média · 6.5 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11068 Alta · 8.8 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in WebSockets in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11067 Média · 6.5 CWE-457 04/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11066 Crítica · 9.6 CWE-20 04/06/2026

Falha de validação de entrada no ANGLE do Google Chrome permite possível fuga de sandbox

Validação insuficiente de entrada não confiável no ANGLE do Google Chrome anterior à 149.0.7827.53 permitiu que um atacante remoto potencialmente realizasse uma fuga de sandbox por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Média)

CVE-2026-11065 Crítica · 9.6 CWE-416 04/06/2026

Use after free no ANGLE do Google Chrome com possível fuga de sandbox

Use after free no ANGLE do Google Chrome anterior à versão 149.0.7827.53 permitiu que um atacante remoto que tivesse comprometido o processo renderer realizasse, potencialmente, um escape do sandbox por meio de uma página HTML elaborada. (Severidade de segurança do Chromium: Média)

CVE-2026-11064 Média · 6.5 CWE-457 04/06/2026

Use of Uninitialized Variable em Google Chrome

Race in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11063 Crítica · 9.6 CWE-20 04/06/2026

Google Chrome: falha de validação de entrada no WebNN permite fuga de sandbox

Validação insuficiente de entrada não confiável no WebNN do Google Chrome no Windows anterior à 149.0.7827.53 permitiu que um atacante remoto que tivesse comprometido o processo de renderização potencialmente realizasse uma fuga do sandbox por meio de uma página HTML elaborada. (Gravidade de segurança do Chromium: Média)

CVE-2026-11062 Média · 4.3 CWE-602 04/06/2026

Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53…

Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: Medium)

CVE-2026-11061 Crítica · 9.6 CWE-125 04/06/2026

Confusão de Tipo (Type Confusion) no ANGLE do Google Chrome com Possível Fuga de Sandbox (CVE-2026-11061)

Confusão de tipo (Type Confusion) no ANGLE no Google Chrome anterior à versão 149.0.7827.53 permitiu que um invasor remoto potencialmente realizasse uma fuga de sandbox por meio de uma página HTML criada com esse fim. (Gravidade de segurança do Chromium: Média)

CVE-2026-11060 Alta · 8.8 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in Media in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11059 Alta · 8.8 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11058 Alta · 7.5 CWE-472 04/06/2026

Integer overflow in CredentialProvider in Google Chrome on Windows prior to…

Integer overflow in CredentialProvider in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform OS-level privilege escalation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11057 Média · 6.5 CWE-457 04/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11056 Crítica · 9.6 CWE-20 04/06/2026

Google Chrome: escape de sandbox no SiteIsolation por validação insuficiente de entrada

Validação insuficiente de entrada não confiável no SiteIsolation do Google Chrome no Windows anterior à versão 149.0.7827.53 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse um escape da sandbox por meio de uma página HTML especialmente elaborada. (Severidade de segurança do Chromium: Média)

CVE-2026-11055 Alta · 8.8 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11054 Alta · 8.8 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11052 Crítica · 9.6 CWE-843 04/06/2026

Confusão de tipo na GPU do Google Chrome no Windows permite escape de sandbox

Confusão de tipo (Type Confusion) no componente GPU do Google Chrome no Windows anterior à 149.0.7827.53 permitiu que um invasor remoto que já tivesse comprometido o processo renderer potencialmente realizasse um escape do sandbox por meio de uma página HTML criada para esse fim. (Gravidade de segurança do Chromium: Média)