Vulnerabilidades do Google Chrome

CVE-2026-5871 Alta · 8.8 CWE-843 08/04/2026

Type Confusion em Google Chrome

Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5870 Alta · 8.8 CWE-190 08/04/2026

Integer Overflow or Wraparound em Google Chrome

Integer overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5869 Média · 4.3 CWE-122 08/04/2026

Heap-based Buffer Overflow em Google Chrome

Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5868 Alta · 8.8 CWE-122 08/04/2026

Heap-based Buffer Overflow em Google Chrome

Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5867 Média · 4.3 CWE-122 08/04/2026

Heap-based Buffer Overflow em Google Chrome

Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5866 Alta · 8.8 CWE-416 08/04/2026

Use After Free em Google Chrome

Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5865 Alta · 8.8 CWE-843 08/04/2026

Type Confusion em Google Chrome

Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5864 Média · 4.3 CWE-122 08/04/2026

Heap-based Buffer Overflow em Google Chrome

Heap buffer overflow in WebAudio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5863 Alta · 8.8 CWE-284 08/04/2026

Improper Access Control em Google Chrome

Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5862 Alta · 8.8 08/04/2026

Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a…

Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5861 Alta · 8.8 CWE-416 08/04/2026

Use After Free em Google Chrome

Use after free in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5860 Alta · 8.8 CWE-416 08/04/2026

Use After Free em Google Chrome

Use after free in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5859 Alta · 8.8 CWE-472 08/04/2026

Integer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote…

Integer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-5858 Alta · 8.8 CWE-122 08/04/2026

Heap-based Buffer Overflow em Google Chrome

Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-5292 Alta · 8.8 CWE-125 01/04/2026

Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote...

Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5291 Média · 6.5 CWE-200 01/04/2026

Inappropriate implementation in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote...

Inappropriate implementation in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5290 Crítica · 9.6 CWE-416 01/04/2026

Use-After-Free em Compositing no Google Chrome Permite Fuga do Sandbox

Use after free em Compositing no Google Chrome anterior à 146.0.7680.178 permitiu que um atacante remoto que já tivesse comprometido o processo renderer realizasse potencialmente uma fuga do sandbox por meio de uma página HTML criada para esse fim. (Gravidade de segurança do Chromium: High)

CVE-2026-5289 Crítica · 9.6 CWE-416 01/04/2026

Use-After-Free no componente Navigation do Google Chrome com possível fuga de sandbox

Use after free em Navigation no Google Chrome anterior à 146.0.7680.178 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse uma fuga da sandbox por meio de uma página HTML criada para isso. (Gravidade de segurança do Chromium: Alta)

CVE-2026-5288 Crítica · 9.6 CWE-416 01/04/2026

Use-after-free no WebView do Google Chrome para Android (CVE-2026-5288)

Use after free no WebView do Google Chrome no Android anterior à versão 146.0.7680.178 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse um escape do sandbox por meio de uma página HTML criada para esse fim. (Gravidade de segurança do Chromium: Alta)

CVE-2026-5287 Alta · 8.8 CWE-416 01/04/2026

Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to...

Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)

CVE-2026-5286 Alta · 8.8 CWE-416 01/04/2026

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to...

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5285 Alta · 8.8 CWE-416 01/04/2026

Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to...

Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5284 Alta · 7.5 CWE-416 01/04/2026

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had...

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5283 Média · 6.5 CWE-285 01/04/2026

Inappropriate implementation in ANGLE in Google Chrome prior to 146.0.7680.178 allowed a remote...

Inappropriate implementation in ANGLE in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5282 Alta · 8.1 CWE-125 01/04/2026

Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote...

Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)