Vulnerabilidades do Google Chrome
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Google Chrome: 3829 registro(s), com versões afetadas e correções.cpe:2.3:a:google:chrome
CVE-2026-6363
Alta · 8.8
CWE-843 15/04/2026
Type Confusion in V8 in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...
Type Confusion in V8 in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-6362
Média · 4.3
CWE-416 15/04/2026
Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...
Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file. (Chromium security severity: High)
CVE-2026-6361
Alta · 8.3
CWE-122 15/04/2026
Heap buffer overflow in PDFium in Google Chrome on Windows prior to 147.0.7727.101 allowed a...
Heap buffer overflow in PDFium in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)
CVE-2026-6360
Alta · 8.8
CWE-416 15/04/2026
Use after free in FileSystem in Google Chrome prior to 147.0.7727.101 allowed a remote attacker...
Use after free in FileSystem in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6359
Alta · 8.8
CWE-416 15/04/2026
Use after free in Video in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote...
Use after free in Video in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6358
Alta · 8.8
CWE-416 15/04/2026
Use after free in XR in Google Chrome on Android prior to 147.0.7727.101 allowed a remote...
Use after free in XR in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-6319
Alta · 7.5
CWE-416 15/04/2026
Use after free in Payments in Google Chrome on Android prior to 147.0.7727.101 allowed a remote...
Use after free in Payments in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-6318
Alta · 8.8
CWE-416 15/04/2026
Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...
Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-6317
Alta · 8.8
CWE-416 15/04/2026
Use after free in Cast in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...
Use after free in Cast in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6316
Alta · 8.8
CWE-416 15/04/2026
Use after free in Forms in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...
Use after free in Forms in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6315
Alta · 8.8
CWE-416 15/04/2026
Use after free in Permissions in Google Chrome on Android prior to 147.0.7727.101 allowed a...
Use after free in Permissions in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6314
Alta · 8.3
CWE-787 15/04/2026
Out of bounds write in GPU in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who...
Out of bounds write in GPU in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the GPU process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6313
Baixa · 3.1
CWE-284 15/04/2026
Insufficient policy enforcement in CORS in Google Chrome prior to 147.0.7727.101 allowed a remote...
Insufficient policy enforcement in CORS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6312
Baixa · 3.1
CWE-284 15/04/2026
Insufficient policy enforcement in Passwords in Google Chrome prior to 147.0.7727.101 allowed a...
Insufficient policy enforcement in Passwords in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6311
Alta · 8.3
CWE-457 15/04/2026
Uninitialized Use in Accessibility in Google Chrome on Windows prior to 147.0.7727.101 allowed a...
Uninitialized Use in Accessibility in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6310
Alta · 8.3
CWE-416 15/04/2026
Use after free in Dawn in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had...
Use after free in Dawn in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6309
Alta · 8.3
CWE-416 15/04/2026
Use after free in Viz in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had...
Use after free in Viz in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6308
Alta · 7.5
CWE-125 15/04/2026
Out of bounds read in Media in Google Chrome prior to 147.0.7727.101 allowed a remote attacker...
Out of bounds read in Media in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6307
Alta · 8.8
CWE-843 15/04/2026
Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...
Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6306
Alta · 8.8
CWE-122 15/04/2026
Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker...
Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)
CVE-2026-6305
Alta · 8.8
CWE-122 15/04/2026
Heap-based Buffer Overflow em Google Chrome
Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)
CVE-2026-6304
Alta · 8.3
CWE-416 15/04/2026
Use after free in Graphite in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who...
Use after free in Graphite in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6303
Alta · 8.8
CWE-416 15/04/2026
Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...
Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6302
Alta · 8.8
CWE-416 15/04/2026
Use after free in Video in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...
Use after free in Video in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6301
Alta · 8.8
CWE-843 15/04/2026
Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...
Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)