Vulnerabilidades do Google Chrome

CVE-2026-8524 Alta · 8.8 CWE-787 14/05/2026

Out of bounds write in WebAudio in Google Chrome prior to 148.0.7778.168 allowed a remote...

Out of bounds write in WebAudio in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8523 Alta · 8.3 CWE-416 14/05/2026

Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had...

Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-8522 Alta · 8.8 CWE-416 14/05/2026

Use after free in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote...

Use after free in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-8521 Alta · 7.5 CWE-416 14/05/2026

Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker...

Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Critical)

CVE-2026-8520 Alta · 8.3 CWE-362 14/05/2026

Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to...

Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-8519 Alta · 8.8 CWE-472 14/05/2026

Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote...

Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-8518 Alta · 8.8 CWE-416 14/05/2026

Use after free in Blink in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to...

Use after free in Blink in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-8517 Alta · 8.8 CWE-664 14/05/2026

Object lifecycle issue in WebShare in Google Chrome on Mac prior to 148.0.7778.168 allowed a...

Object lifecycle issue in WebShare in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-8516 Média · 5.3 CWE-20 14/05/2026

Insufficient validation of untrusted input in DataTransfer in Google Chrome prior to 148.0.7778...

Insufficient validation of untrusted input in DataTransfer in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-8515 Alta · 8.3 CWE-416 14/05/2026

Use after free in HID in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who...

Use after free in HID in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-8514 Alta · 8.3 CWE-416 14/05/2026

Use after free in Aura in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had...

Use after free in Aura in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-8513 Alta · 8.3 CWE-416 14/05/2026

Use after free in Input in Google Chrome on Android prior to 148.0.7778.168 allowed a remote...

Use after free in Input in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-8512 Alta · 8.3 CWE-416 14/05/2026

Use After Free em Google Chrome

Use after free in FileSystem in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-8511 Crítica · 9.6 CWE-416 14/05/2026

Use-After-Free na UI do Google Chrome Permite Fuga de Sandbox

Use after free na UI do Google Chrome anterior a 148.0.7778.168 permitiu que um invasor remoto potencialmente realizasse uma fuga do sandbox por meio de uma pagina HTML especialmente criada. (Gravidade de seguranca do Chromium: Critica)

CVE-2026-8510 Alta · 7.5 CWE-472 14/05/2026

Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote...

Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-8509 Alta · 8.8 CWE-122 14/05/2026

Heap buffer overflow in WebML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker...

Heap buffer overflow in WebML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-8022 Baixa · 3.1 CWE-352 06/05/2026

Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote...

Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted MHTML page. (Chromium security severity: Low)

CVE-2026-8021 Média · 4.2 CWE-94 06/05/2026

Script injection in UI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who...

Script injection in UI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-8020 Média · 5.3 CWE-457 06/05/2026

Uninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote...

Uninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-8019 Média · 5.4 CWE-451 06/05/2026

Insufficient policy enforcement in WebApp in Google Chrome prior to 148.0.7778.96 allowed a...

Insufficient policy enforcement in WebApp in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-8018 Alta · 8.1 CWE-693 06/05/2026

Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed a...

Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. (Chromium security severity: Low)

CVE-2026-8017 Baixa · 3.1 CWE-1300 06/05/2026

Side-channel information leakage in Media in Google Chrome prior to 148.0.7778.96 allowed a...

Side-channel information leakage in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-8016 Alta · 8.8 CWE-416 06/05/2026

Use After Free em Google Chrome

Use after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-8015 Média · 5.4 CWE-451 06/05/2026

Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote...

Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-8014 Média · 4.3 CWE-693 06/05/2026

Inappropriate implementation in Preload in Google Chrome prior to 148.0.7778.96 allowed a remote...

Inappropriate implementation in Preload in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)