Vulnerabilidades do Google Chrome

CVE-2026-6300 Alta · 8.8 CWE-416 15/04/2026

Use after free in CSS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...

Use after free in CSS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-6299 Alta · 8.8 CWE-416 15/04/2026

Use after free in Prerender in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...

Use after free in Prerender in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-6298 Média · 4.3 CWE-122 15/04/2026

Heap-based Buffer Overflow em Google Chrome

Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-6297 Alta · 8.3 CWE-416 15/04/2026

Use after free in Proxy in Google Chrome prior to 147.0.7727.101 allowed an attacker in a...

Use after free in Proxy in Google Chrome prior to 147.0.7727.101 allowed an attacker in a privileged network position to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-6296 Crítica · 9.6 CWE-122 15/04/2026

Estouro de buffer no heap no ANGLE do Google Chrome (CVE-2026-6296)

Estouro de buffer no heap no ANGLE do Google Chrome anterior à versão 147.0.7727.101 permitia que um atacante remoto potencialmente realizasse uma fuga do sandbox por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Crítica)

CVE-2026-5919 Média · 6.5 CWE-20 08/04/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5918 Média · 4.3 CWE-346 08/04/2026

Inappropriate implementation in Navigation in Google Chrome prior to 147.0.7727.55…

Inappropriate implementation in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5915 Alta · 8.1 CWE-20 08/04/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5914 Alta · 8.8 CWE-843 08/04/2026

Type Confusion em Google Chrome

Type Confusion in CSS in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Low)

CVE-2026-5913 Alta · 8.1 CWE-125 08/04/2026

Out-of-bounds Read em Google Chrome

Out of bounds read in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5912 Alta · 8.8 CWE-472 08/04/2026

Integer overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote…

Integer overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5911 Média · 4.3 CWE-693 08/04/2026

Policy bypass in ServiceWorkers in Google Chrome prior to 147.0.7727.55 allowed a remote…

Policy bypass in ServiceWorkers in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5910 Alta · 8.8 CWE-472 08/04/2026

Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote…

Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security severity: Low)

CVE-2026-5909 Alta · 8.8 CWE-472 08/04/2026

Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote…

Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security severity: Low)

CVE-2026-5908 Alta · 8.8 CWE-472 08/04/2026

Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote…

Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security severity: Low)

CVE-2026-5907 Alta · 8.1 CWE-125 08/04/2026

Out-of-bounds Read em Google Chrome

Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. (Chromium security severity: Low)

CVE-2026-5906 Média · 4.3 CWE-451 08/04/2026

Incorrect security UI in Omnibox in Google Chrome on Android prior to 147.0.7727.55…

Incorrect security UI in Omnibox in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5905 Média · 6.5 CWE-451 08/04/2026

Incorrect security UI in Permissions in Google Chrome on Windows prior to 147.0.7727.55…

Incorrect security UI in Permissions in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5903 Média · 6.5 CWE-693 08/04/2026

Policy bypass in IFrameSandbox in Google Chrome prior to 147.0.7727.55 allowed a remote…

Policy bypass in IFrameSandbox in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5902 Crítica · 9.8 CWE-362 08/04/2026

Condição de corrida no Google Chrome para Android em metadados de fluxo de mídia

Condição de corrida (race) em Media no Google Chrome para Android anterior a 147.0.7727.55 permitiu que um atacante remoto que tivesse comprometido o processo renderizador corrompesse metadados de fluxo de mídia por meio de uma página HTML elaborada. (Severidade de segurança do Chromium: Baixa)

CVE-2026-5901 Média · 6.5 CWE-602 08/04/2026

Insufficient policy enforcement in DevTools in Google Chrome prior to 147.0.7727.55…

Insufficient policy enforcement in DevTools in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a user to install a malicious extension to bypass enterprise host restrictions for cookie modification via a crafted Chrome Extension. (Chromium security severity: Low)

CVE-2026-5900 Média · 4.3 CWE-693 08/04/2026

Policy bypass in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote…

Policy bypass in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass of multi-download protections via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5899 Média · 6.1 CWE-346 08/04/2026

Insufficient policy enforcement in History Navigation in Google Chrome prior to…

Insufficient policy enforcement in History Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5898 Média · 4.3 CWE-451 08/04/2026

Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed…

Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5897 Média · 4.3 CWE-451 08/04/2026

Incorrect security UI in Downloads in Google Chrome prior to 147.0.7727.55 allowed a…

Incorrect security UI in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)