Vulnerabilidades do Google Chrome

CVE-2026-2314 Alta · 8.8 CWE-787 11/02/2026

Out-of-bounds Write em Google Chrome

Heap buffer overflow in Codecs in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-2313 Alta · 8.8 CWE-416 11/02/2026

Use After Free em Google Chrome

Use after free in CSS in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-1862 Alta · 8.8 CWE-843 03/02/2026

Type Confusion em Google Chrome

Type Confusion in V8 in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-1861 Alta · 8.8 CWE-787 03/02/2026

Out-of-bounds Write em Google Chrome

Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-1504 Média · 6.5 27/01/2026

Inappropriate implementation in Background Fetch API in Google Chrome prior to…

Inappropriate implementation in Background Fetch API in Google Chrome prior to 144.0.7559.110 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-0908 Alta · 8.8 CWE-416 20/01/2026

Use After Free em Google Chrome

Use after free in ANGLE in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-0907 Crítica · 9.8 CWE-451 20/01/2026

Spoofing de interface na Split View do Google Chrome

Visualização de segurança incorreta na Split View do Google Chrome anterior à 144.0.7559.59 permitiu que um atacante remoto realizasse spoofing de interface por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Baixa)

CVE-2026-0906 Crítica · 9.8 CWE-451 20/01/2026

Google Chrome para Android: falsificação da interface da Omnibox via HTML

Interface de segurança incorreta no Google Chrome para Android anterior à 144.0.7559.59 permitiu que um invasor remoto falsificasse o conteúdo da Omnibox (barra de URL) por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Baixa)

CVE-2026-0905 Crítica · 9.8 CWE-200 20/01/2026

Google Chrome: falha de aplicação de política na rede expõe dados sensíveis em logs de rede

Aplicação de política insuficiente no componente Network do Google Chrome anterior a 144.0.7559.59 permitiu que um atacante que obtivesse um arquivo de log de rede potencialmente obtivesse informações potencialmente sensíveis por meio desse arquivo. (Severidade de segurança do Chromium: Média)

CVE-2026-0904 Média · 5.4 CWE-451 20/01/2026

Incorrect security UI in Digital Credentials in Google Chrome prior to 144.0.7559.59…

Incorrect security UI in Digital Credentials in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-0903 Média · 5.4 CWE-20 20/01/2026

Improper Input Validation em Google Chrome

Inappropriate implementation in Downloads in Google Chrome on Windows prior to 144.0.7559.59 allowed a remote attacker to bypass dangerous file type protections via a malicious file. (Chromium security severity: Medium)

CVE-2026-0902 Alta · 8.8 CWE-474 20/01/2026

Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a…

Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-0901 Média · 5.4 CWE-451 20/01/2026

Inappropriate implementation in Blink in Google Chrome on Android prior to 144.0.7559.59…

Inappropriate implementation in Blink in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High)

CVE-2026-0900 Alta · 8.8 20/01/2026

Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a…

Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-0899 Alta · 8.8 CWE-125 20/01/2026

Out-of-bounds Read em Google Chrome

Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-0628 Alta · 8.8 CWE-862 07/01/2026

Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed...

Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: High)

CVE-2025-14766 Alta · 8.8 CWE-125 16/12/2025

Out-of-bounds Read em Google Chrome

Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2025-14765 Alta · 8.8 CWE-416 16/12/2025

Use After Free em Google Chrome

Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2025-14373 Média · 4.3 CWE-1021 12/12/2025

Clickjacking em Google Chrome

Inappropriate implementation in Toolbar in Google Chrome on Android prior to 143.0.7499.110 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2025-14372 Média · 6.1 CWE-416 12/12/2025

Use After Free em Google Chrome

Use after free in Password Manager in Google Chrome prior to 143.0.7499.110 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2025-14174 Alta · 8.8 KEV Alta · 62 Exploit público CWE-787 12/12/2025

Google Chromium Out of Bounds Memory Access Vulnerability

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

CVE-2025-13992 Média · 4.7 CWE-1300 03/12/2025

Side-channel information leakage in Navigation and Loading in Google Chrome prior to…

Side-channel information leakage in Navigation and Loading in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2025-13721 Alta · 7.5 CWE-362 02/12/2025

Race Condition em Google Chrome

Race in v8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVE-2025-13720 Alta · 8.8 CWE-704 02/12/2025

Bad cast in Loader in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who…

Bad cast in Loader in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVE-2025-13640 Baixa · 3.5 02/12/2025

Inappropriate implementation in Passwords in Google Chrome prior to 143.0.7499.41…

Inappropriate implementation in Passwords in Google Chrome prior to 143.0.7499.41 allowed a local attacker to bypass authentication via physical access to the device. (Chromium security severity: Low)