Vulnerabilidades do Google Chrome

CVE-2026-8549 Alta · 8.8 CWE-416 14/05/2026

Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to...

Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8548 Alta · 8.3 CWE-787 14/05/2026

Out of bounds write in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker...

Out of bounds write in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8547 Alta · 7.5 CWE-862 14/05/2026

Insufficient policy enforcement in Passwords in Google Chrome on Windows prior to 148.0.7778.168...

Insufficient policy enforcement in Passwords in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8546 Média · 5.3 CWE-125 14/05/2026

Out of bounds read in GPU in Google Chrome on Mac and Windows prior to 148.0.7778.168 allowed a...

Out of bounds read in GPU in Google Chrome on Mac and Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8545 Baixa · 3.1 CWE-119 14/05/2026

Object corruption in Compositing in Google Chrome prior to 148.0.7778.168 allowed a remote...

Object corruption in Compositing in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8544 Alta · 8.8 CWE-416 14/05/2026

Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to...

Use after free in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8543 Média · 5.3 CWE-125 14/05/2026

Out of bounds read in FileSystem in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote...

Out of bounds read in FileSystem in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8542 Alta · 8.3 CWE-416 14/05/2026

Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote...

Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8541 Média · 5.3 CWE-125 14/05/2026

Out of bounds read in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who...

Out of bounds read in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8540 Alta · 8.8 CWE-843 14/05/2026

Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to...

Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8539 Média · 5.4 CWE-94 14/05/2026

Script injection in SanitizerAPI in Google Chrome on Android prior to 148.0.7778.168 allowed a...

Script injection in SanitizerAPI in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8538 Média · 5.3 CWE-20 14/05/2026

Insufficient validation of untrusted input in GPU in Google Chrome prior to 148.0.7778.168...

Insufficient validation of untrusted input in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform a denial of service via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8537 Média · 4.3 CWE-942 14/05/2026

Insufficient policy enforcement in ViewTransitions in Google Chrome prior to 148.0.7778.168...

Insufficient policy enforcement in ViewTransitions in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8536 Baixa · 3.1 CWE-20 14/05/2026

Insufficient validation of untrusted input in ReadingMode in Google Chrome on Mac prior to 148.0...

Insufficient validation of untrusted input in ReadingMode in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to bypass site Isolation via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8535 Média · 5.3 CWE-125 14/05/2026

Out of bounds read in Media in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168...

Out of bounds read in Media in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted JPEG file. (Chromium security severity: High)

CVE-2026-8534 Alta · 8.3 CWE-472 14/05/2026

Integer overflow in GPU in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168…

Integer overflow in GPU in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8533 Alta · 8.3 CWE-416 14/05/2026

Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote...

Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8532 Alta · 8.8 CWE-472 14/05/2026

Integer overflow in XML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to...

Integer overflow in XML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8531 Alta · 8.8 CWE-122 14/05/2026

Heap buffer overflow in WebML in Google Chrome on Windows prior to 148.0.7778.168 allowed a...

Heap buffer overflow in WebML in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8530 Alta · 8.3 CWE-416 14/05/2026

Use after free in Network in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote...

Use after free in Network in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8529 Alta · 8.8 CWE-122 14/05/2026

Heap buffer overflow in Codecs in Google Chrome prior to 148.0.7778.168 allowed a remote attacker...

Heap buffer overflow in Codecs in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. (Chromium security severity: High)

CVE-2026-8528 Média · 4.3 CWE-20 14/05/2026

Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778...

Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to bypass Site Isolation via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8527 Alta · 8.8 CWE-20 14/05/2026

Insufficient validation of untrusted input in Downloads in Google Chrome prior to 148.0.7778.168...

Insufficient validation of untrusted input in Downloads in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8526 Alta · 8.8 CWE-787 14/05/2026

Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.168 allowed a remote attacker...

Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8525 Alta · 8.3 CWE-122 14/05/2026

Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote...

Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)