Vulnerabilidades do Google Chrome

CVE-2026-7353 Alta · 8.3 CWE-122 28/04/2026

Heap-based Buffer Overflow em Google Chrome

Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-7352 Alta · 8.3 CWE-416 28/04/2026

Use After Free em Google Chrome

Use after free in Media in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-7351 Baixa · 3.1 CWE-362 28/04/2026

Race Condition em Google Chrome

Race in MHTML in Google Chrome prior to 147.0.7727.138 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: High)

CVE-2026-7350 Alta · 8.3 CWE-416 28/04/2026

Use After Free em Google Chrome

Use after free in WebMIDI in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-7349 Alta · 7.5 CWE-416 28/04/2026

Use After Free em Google Chrome

Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local network segment to execute arbitrary code inside a sandbox via malicious network traffic. (Chromium security severity: High)

CVE-2026-7348 Alta · 8.8 CWE-416 28/04/2026

Use After Free em Google Chrome

Use after free in Codecs in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-7347 Alta · 8.1 CWE-416 28/04/2026

Use After Free em Google Chrome

Use after free in Chromoting in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: High)

CVE-2026-7346 Alta · 8.1 CWE-119 28/04/2026

Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Google Chrome

Inappropriate implementation in Tint in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

CVE-2026-7345 Alta · 8.3 CWE-20 28/04/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Feedback in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-7344 Alta · 8.8 CWE-416 28/04/2026

Use After Free em Google Chrome

Use after free in Accessibility in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-7343 Alta · 7.5 CWE-416 28/04/2026

Use After Free em Google Chrome

Use after free in Views in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-7342 Alta · 8.8 CWE-416 28/04/2026

Use After Free em Google Chrome

Use after free in WebView in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-7341 Alta · 8.8 CWE-416 28/04/2026

Use After Free em Google Chrome

Use after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-7340 Média · 4.3 CWE-472 28/04/2026

Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a…

Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-7339 Alta · 8.8 CWE-122 28/04/2026

Heap-based Buffer Overflow em Google Chrome

Heap buffer overflow in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-7338 Alta · 7.5 CWE-416 28/04/2026

Use After Free em Google Chrome

Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local network segment to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: High)

CVE-2026-7337 Alta · 8.8 CWE-843 28/04/2026

Type Confusion em Google Chrome

Type Confusion in V8 in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-7336 Alta · 8.8 CWE-416 28/04/2026

Use After Free em Google Chrome

Use after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-7335 Alta · 8.8 CWE-416 28/04/2026

Use After Free em Google Chrome

Use after free in media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-7334 Alta · 8.8 CWE-416 28/04/2026

Use After Free em Google Chrome

Use after free in Views in Google Chrome on Mac prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-7333 Crítica · 9.6 CWE-416 28/04/2026

Use After Free em Google Chrome

Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-6921 Alta · 8.3 CWE-362 23/04/2026

Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to...

Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: Medium)

CVE-2026-6920 Crítica · 9.6 CWE-125 23/04/2026

Leitura fora dos limites na GPU do Google Chrome para Android

Leitura fora dos limites na GPU do Google Chrome para Android anterior à 147.0.7727.117 permitiu que um atacante remoto que já tivesse comprometido o processo renderer realizasse potencialmente uma fuga do sandbox por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Alta)

CVE-2026-6919 Crítica · 9.6 CWE-416 23/04/2026

Google Chrome: use-after-free no DevTools permite escape de sandbox

Use after free no DevTools do Google Chrome anterior a 147.0.7727.117 permitiu que um atacante remoto que tivesse comprometido o processo renderer executasse potencialmente um escape do sandbox por meio de uma página HTML criada para esse fim. (Gravidade de segurança do Chromium: Alta)

CVE-2026-6364 Média · 6.5 CWE-125 15/04/2026

Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...

Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file. (Chromium security severity: Medium)