Vulnerabilidades do Google Chrome

CVE-2026-10976 Alta · 7.4 CWE-457 04/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10975 Alta · 8.8 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10974 Crítica · 9.6 CWE-20 04/06/2026

Google Chrome ANGLE: validação insuficiente de entrada com possível fuga de sandbox

Validação insuficiente de entrada não confiável no ANGLE do Google Chrome anterior à versão 149.0.7827.53 permitiu que um atacante remoto potencialmente realizasse uma fuga do sandbox por meio de uma página HTML criada para esse fim. (Gravidade de segurança do Chromium: Alta)

CVE-2026-10973 Alta · 7.4 CWE-457 04/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10972 Crítica · 9.6 CWE-416 04/06/2026

Use-after-free no Ozone do Google Chrome no Linux

Use after free no Ozone no Google Chrome no Linux anterior à 149.0.7827.53 permitiu que um atacante remoto potencialmente realizasse uma fuga do sandbox por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Alta)

CVE-2026-10971 Crítica · 9.6 CWE-20 04/06/2026

Google Chrome: validação insuficiente em impressão permite fuga do sandbox no Windows

Validação insuficiente de entrada não confiável em Impressão no Google Chrome no Windows anterior à 149.0.7827.53 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse uma fuga do sandbox por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Alta)

CVE-2026-10970 Alta · 8.3 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in InterestGroups in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10969 Alta · 7.5 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10968 Alta · 7.4 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10967 Alta · 8.3 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in SurfaceCapture in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10966 Crítica · 9.6 CWE-20 04/06/2026

Implementação inadequada em Codecs do Google Chrome permite fuga de sandbox via arquivo de vídeo manipulado

Implementação inadequada em Codecs no Google Chrome anterior à versão 149.0.7827.53 permitia que um atacante remoto potencialmente realizasse uma fuga de sandbox por meio de um arquivo de vídeo manipulado. (Gravidade de segurança do Chromium: Alta)

CVE-2026-10965 Alta · 8.8 CWE-472 04/06/2026

Integer overflow in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote…

Integer overflow in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10964 Alta · 8.8 CWE-472 04/06/2026

Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker…

Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10963 Alta · 8.8 CWE-472 04/06/2026

Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker…

Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10962 Alta · 8.8 CWE-843 04/06/2026

Type Confusion em Google Chrome

Type Confusion in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10961 Alta · 8.3 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10960 Alta · 8.3 CWE-457 04/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10959 Alta · 8.8 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in Input in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10958 Alta · 8.8 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10957 Alta · 8.8 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10956 Alta · 8.8 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in MimeHandlerView in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10955 Alta · 8.8 CWE-843 04/06/2026

Type Confusion em Google Chrome

Type Confusion in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10954 Alta · 8.8 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in Actor in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10953 Alta · 8.3 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in Core in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10952 Alta · 8.8 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)