CVE Intelligence

Vulnerabilidades do Google Chrome

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Google Chrome: 3829 registro(s), com versões afetadas e correções.
cpe:2.3:a:google:chrome

CVE-2026-3545 Crítica · 9.6 CWE-20 04/03/2026
Improper Input Validation em Google Chrome
Insufficient data validation in Navigation in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-3544 Alta · 8.8 CWE-787 04/03/2026
Out-of-bounds Write em Google Chrome
Heap buffer overflow in WebCodecs in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)
CVE-2026-3543 Alta · 8.8 CWE-284 04/03/2026
Improper Access Control em Google Chrome
Inappropriate implementation in V8 in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVE-2026-3542 Alta · 8.8 CWE-284 04/03/2026
Improper Access Control em Google Chrome
Inappropriate implementation in WebAssembly in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVE-2026-3541 Alta · 8.8 CWE-284 04/03/2026
Improper Access Control em Google Chrome
Inappropriate implementation in CSS in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
CVE-2026-3540 Alta · 8.8 CWE-125 04/03/2026
Out-of-bounds Read em Google Chrome
Inappropriate implementation in WebAudio in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVE-2026-3538 Alta · 8.8 CWE-191 04/03/2026
Integer Underflow em Google Chrome
Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-3537 Alta · 8.8 CWE-787 04/03/2026
Out-of-bounds Write em Google Chrome
Object lifecycle issue in PowerVR in Google Chrome on Android prior to 145.0.7632.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-3536 Alta · 8.8 CWE-472 04/03/2026
Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote…
Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-3063 Média · 5.4 23/02/2026
Inappropriate implementation in DevTools in Google Chrome prior to 145.0.7632.116…
Inappropriate implementation in DevTools in Google Chrome prior to 145.0.7632.116 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via DevTools. (Chromium security severity: High)
CVE-2026-3062 Crítica · 9.8 CWE-125 23/02/2026
Out-of-bounds Read em Google Chrome
Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVE-2026-3061 Crítica · 9.1 CWE-125 23/02/2026
Out-of-bounds Read em Google Chrome
Out of bounds read in Media in Google Chrome prior to 145.0.7632.116 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
CVE-2026-2650 Alta · 8.8 CWE-122 18/02/2026
Heap-based Buffer Overflow em Google Chrome
Heap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-2649 Alta · 8.8 CWE-472 18/02/2026
Integer overflow in V8 in Google Chrome prior to 145.0.7632.109 allowed a remote…
Integer overflow in V8 in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-2648 Alta · 8.8 CWE-122 18/02/2026
Heap-based Buffer Overflow em Google Chrome
Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file. (Chromium security severity: High)
CVE-2026-2441 Alta · 8.8 KEV Urgente · 70 Exploit público CWE-416 13/02/2026
Google Chromium CSS Use-After-Free Vulnerability
Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-2323 Média · 4.3 CWE-451 11/02/2026
Inappropriate implementation in Downloads in Google Chrome prior to 145.0.7632.45…
Inappropriate implementation in Downloads in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-2322 Média · 5.4 CWE-451 11/02/2026
Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45…
Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-2321 Alta · 8.8 CWE-416 11/02/2026
Use After Free em Google Chrome
Use after free in Ozone in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-2320 Média · 6.5 CWE-451 11/02/2026
Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45…
Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-2319 Alta · 7.5 CWE-362 11/02/2026
Race Condition em Google Chrome
Race in DevTools in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures and install a malicious extension to potentially exploit object corruption via a malicious file. (Chromium security severity: Medium)
CVE-2026-2318 Média · 6.5 CWE-451 11/02/2026
Inappropriate implementation in PictureInPicture in Google Chrome prior to 145.0.7632.45…
Inappropriate implementation in PictureInPicture in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-2317 Média · 6.5 CWE-200 11/02/2026
Exposure of Sensitive Information em Google Chrome
Inappropriate implementation in Animation in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-2316 Média · 6.5 CWE-451 11/02/2026
Insufficient policy enforcement in Frames in Google Chrome prior to 145.0.7632.45…
Insufficient policy enforcement in Frames in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-2315 Alta · 8.8 11/02/2026
Inappropriate implementation in WebGPU in Google Chrome prior to 145.0.7632.45 allowed a…
Inappropriate implementation in WebGPU in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)