Vulnerabilidades do Google Chrome

CVE-2026-9895 Alta · 8.3 CWE-125 28/05/2026

Out-of-bounds Read em Google Chrome

Out of bounds read in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-9894 Alta · 8.3 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-9893 Alta · 8.3 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9892 Alta · 8.3 CWE-269 28/05/2026

Improper Privilege Management em Google Chrome

Inappropriate implementation in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9891 Crítica · 9.0 CWE-416 28/05/2026

Google Chrome: use-after-free em Extensões pode permitir fuga de sandbox (CVE-2026-9891)

Use after free em Extensions no Google Chrome anterior à 148.0.7778.216 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse uma fuga de sandbox por meio de uma extensão do Chrome especialmente elaborada. (Gravidade de segurança do Chromium: Crítica)

CVE-2026-9890 Alta · 8.3 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in XR in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9889 Alta · 8.3 CWE-125 28/05/2026

Out-of-bounds Read em Google Chrome

Out of bounds read and write in Dawn in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9888 Alta · 8.3 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in WebView in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9887 Alta · 8.8 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in Proxy in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted PAC script. (Chromium security severity: Critical)

CVE-2026-9886 Crítica · 9.6 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in Base in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9885 Alta · 8.3 CWE-20 28/05/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in UI in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9884 Alta · 8.8 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in Browser in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9883 Alta · 8.8 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in Base in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9882 Média · 6.5 CWE-190 28/05/2026

Integer Overflow or Wraparound em Google Chrome

Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9881 Crítica · 9.0 CWE-416 28/05/2026

Uso de Memória Após Liberação no Bluetooth do Google Chrome com Possível Escape de Sandbox

Uso após liberação (use after free) no Bluetooth do Google Chrome no Mac anterior à versão 148.0.7778.216 permitiu que um invasor que convencesse um usuário a instalar uma extensão maliciosa potencialmente realizasse um escape do sandbox por meio de uma extensão do Chrome especialmente elaborada. (Gravidade de segurança do Chromium: Crítica)

CVE-2026-9880 Alta · 8.3 CWE-20 28/05/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in WebGL in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9879 Alta · 8.8 CWE-787 28/05/2026

Out-of-bounds Write em Google Chrome

Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9878 Alta · 8.8 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9877 Alta · 8.3 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9876 Crítica · 9.6 CWE-416 28/05/2026

Use-after-free em WebGL no Google Chrome para Android (CVE-2026-9876)

Use after free em WebGL no Google Chrome para Android anterior a 148.0.7778.216 permitia que um atacante remoto potencialmente realizasse uma fuga de sandbox por meio de uma página HTML criada para isso. (Gravidade de segurança do Chromium: Crítica)

CVE-2026-9875 Crítica · 9.6 CWE-125 28/05/2026

Leitura fora dos limites em WebGL no Google Chrome para Android

Leitura fora dos limites em WebGL no Google Chrome para Android anterior à versão 148.0.7778.216 permitia que um atacante remoto potencialmente realizasse uma fuga de sandbox por meio de uma página HTML criada com esse fim. (Gravidade de segurança do Chromium: Crítica)

CVE-2026-9874 Crítica · 9.6 CWE-416 28/05/2026

Vulnerabilidade de Use-After-Free no Dawn do Google Chrome

Use after free no Dawn no Google Chrome anterior à versão 148.0.7778.216 permitia que um atacante remoto potencialmente realizasse uma fuga do sandbox por meio de uma página HTML especialmente elaborada. (Severidade de segurança do Chromium: Crítica)

CVE-2026-9873 Alta · 8.8 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9872 Crítica · 9.6 CWE-787 28/05/2026

Escrita fora dos limites na GPU do Google Chrome para Android

Escrita fora dos limites na GPU do Google Chrome no Android anterior à versão 148.0.7778.216 permitiu que um invasor remoto potencialmente realizasse uma fuga do sandbox por meio de uma página HTML criada para esse fim. (Gravidade de segurança do Chromium: Crítica)

CVE-2026-10022 Alta · 7.5 CWE-843 28/05/2026

Type Confusion em Google Chrome

Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: Medium)