Vulnerabilidades do Google Chrome
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Google Chrome: 3829 registro(s), com versões afetadas e correções.cpe:2.3:a:google:chrome
CVE-2026-3938
Média · 4.3
CWE-284 11/03/2026
Improper Access Control em Google Chrome
Insufficient policy enforcement in Clipboard in Google Chrome prior to 146.0.7680.71 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-3937
Média · 6.5
CWE-451 11/03/2026
Incorrect security UI in Downloads in Google Chrome on Android prior to 146.0.7680.71…
Incorrect security UI in Downloads in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-3936
Alta · 8.8
CWE-416 11/03/2026
Use After Free em Google Chrome
Use after free in WebView in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-3935
Média · 6.5
CWE-451 11/03/2026
Incorrect security UI in WebAppInstalls in Google Chrome prior to 146.0.7680.71 allowed…
Incorrect security UI in WebAppInstalls in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-3934
Média · 6.5
CWE-284 11/03/2026
Improper Access Control em Google Chrome
Insufficient policy enforcement in ChromeDriver in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-3932
Alta · 7.5
CWE-284 11/03/2026
Improper Access Control em Google Chrome
Insufficient policy enforcement in PDF in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-3931
Alta · 8.8
CWE-787 11/03/2026
Out-of-bounds Write em Google Chrome
Heap buffer overflow in Skia in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-3930
Média · 5.3
CWE-288 11/03/2026
Authentication Bypass Using an Alternate Path or Channel em Google Chrome
Unsafe navigation in Navigation in Google Chrome on iOS prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-3929
Baixa · 3.1
CWE-1300 11/03/2026
Side-channel information leakage in ResourceTiming in Google Chrome prior to…
Side-channel information leakage in ResourceTiming in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-3928
Média · 4.3
CWE-451 11/03/2026
Insufficient policy enforcement in Extensions in Google Chrome prior to 146.0.7680.71…
Insufficient policy enforcement in Extensions in Google Chrome prior to 146.0.7680.71 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium)
CVE-2026-3927
Média · 4.3
CWE-451 11/03/2026
Incorrect security UI in PictureInPicture in Google Chrome prior to 146.0.7680.71…
Incorrect security UI in PictureInPicture in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-3926
Alta · 8.8
CWE-125 11/03/2026
Out-of-bounds Read em Google Chrome
Out of bounds read in V8 in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-3925
Média · 4.3
CWE-451 11/03/2026
Incorrect security UI in LookalikeChecks in Google Chrome on Android prior to…
Incorrect security UI in LookalikeChecks in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-3924
Alta · 7.5
CWE-416 11/03/2026
Use After Free em Google Chrome
use after free in WindowDialog in Google Chrome prior to 146.0.7680.71 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-3923
Alta · 8.8
CWE-416 11/03/2026
Use After Free em Google Chrome
Use after free in WebMIDI in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-3922
Alta · 8.8
CWE-416 11/03/2026
Use After Free em Google Chrome
Use after free in MediaStream in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-3921
Alta · 8.8
CWE-416 11/03/2026
Use After Free em Google Chrome
Use after free in TextEncoding in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-3920
Alta · 8.8
CWE-125 11/03/2026
Out-of-bounds Read em Google Chrome
Out of bounds memory access in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-3919
Alta · 8.8
CWE-416 11/03/2026
Use After Free em Google Chrome
Use after free in Extensions in Google Chrome prior to 146.0.7680.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-3918
Alta · 8.8
CWE-416 11/03/2026
Use After Free em Google Chrome
Use after free in WebMCP in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-3917
Alta · 8.8
CWE-416 11/03/2026
Use After Free em Google Chrome
Use after free in Agents in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-3916
Crítica · 9.6
CWE-125 11/03/2026
Out-of-bounds Read em Google Chrome
Out of bounds read in Web Speech in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-3915
Alta · 8.8
CWE-122 11/03/2026
Heap-based Buffer Overflow em Google Chrome
Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
CVE-2026-3914
Alta · 8.8
CWE-190 11/03/2026
Integer Overflow or Wraparound em Google Chrome
Integer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-3913
Alta · 8.8
CWE-787 11/03/2026
Out-of-bounds Write em Google Chrome
Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)