Vulnerabilidades do Google Chrome

CVE-2026-5896 Média · 6.1 CWE-693 08/04/2026

Policy bypass in Audio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker…

Policy bypass in Audio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass sandbox download restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5895 Média · 5.4 CWE-451 08/04/2026

Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed…

Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name. (Chromium security severity: Low)

CVE-2026-5894 Média · 4.3 CWE-358 08/04/2026

Inappropriate implementation in PDF in Google Chrome prior to 147.0.7727.55 allowed a…

Inappropriate implementation in PDF in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5893 Média · 6.8 CWE-362 08/04/2026

Race Condition em Google Chrome

Race in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5892 Média · 6.6 CWE-1268 08/04/2026

Insufficient policy enforcement in PWAs in Google Chrome prior to 147.0.7727.55 allowed…

Insufficient policy enforcement in PWAs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to install a PWA without user consent via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5891 Média · 4.3 CWE-451 08/04/2026

Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55…

Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5890 Média · 5.3 CWE-362 08/04/2026

Race Condition em Google Chrome

Race in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5889 Média · 4.3 CWE-326 08/04/2026

Inadequate Encryption Strength em Google Chrome

Cryptographic Flaw in PDFium in Google Chrome prior to 147.0.7727.55 allowed an attacker to read potentially sensitive information from encrypted PDFs via a brute-force attack. (Chromium security severity: Medium)

CVE-2026-5888 Média · 6.5 CWE-457 08/04/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5887 Média · 4.3 CWE-20 08/04/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to bypass download restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5886 Média · 5.3 CWE-125 08/04/2026

Out-of-bounds Read em Google Chrome

Out of bounds read in WebAudio in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5885 Média · 6.5 CWE-20 08/04/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in WebML in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5884 Alta · 8.8 CWE-20 08/04/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5883 Alta · 8.8 CWE-416 08/04/2026

Use After Free em Google Chrome

Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5882 Média · 4.3 CWE-451 08/04/2026

Incorrect security UI in Fullscreen in Google Chrome prior to 147.0.7727.55 allowed a…

Incorrect security UI in Fullscreen in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5881 Média · 6.5 CWE-284 08/04/2026

Improper Access Control em Google Chrome

Policy bypass in LocalNetworkAccess in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5880 Média · 4.3 CWE-451 08/04/2026

Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55…

Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5879 Alta · 8.8 CWE-20 08/04/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5878 Média · 4.3 CWE-451 08/04/2026

Incorrect security UI in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote…

Incorrect security UI in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5877 Alta · 8.8 CWE-416 08/04/2026

Use After Free em Google Chrome

Use after free in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5876 Média · 6.5 CWE-1300 08/04/2026

Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55…

Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5875 Média · 4.3 CWE-639 08/04/2026

Authorization Bypass Through User-Controlled Key (IDOR) em Google Chrome

Policy bypass in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5874 Crítica · 9.6 CWE-416 08/04/2026

Google Chrome: use-after-free no PrivateAI permite escape de sandbox

Use after free no PrivateAI do Google Chrome anterior à versão 147.0.7727.55 permitiu que um atacante remoto que convencesse um usuário a realizar gestos específicos de interface potencialmente executasse um escape de sandbox por meio de uma página HTML criada com esse fim. (Gravidade de segurança do Chromium: Média)

CVE-2026-5873 Alta · 8.8 CWE-125 08/04/2026

Out-of-bounds Read em Google Chrome

Out of bounds read and write in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5872 Alta · 8.8 CWE-416 08/04/2026

Use After Free em Google Chrome

Use after free in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)