Vulnerabilidades do Google Chrome
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Google Chrome: 3398 registro(s), com versões afetadas e correções.cpe:2.3:a:google:chrome
CVE-2026-95293
Média · 4.7
CWE-908 29/09/2026
Use of Uninitialized Resource em Google Chrome
Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-95292
Média · 4.8
CWE-863 29/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Safebrowsing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)
CVE-2026-95291
Média · 5.4
CWE-451 29/09/2026
UI misrepresentation in SecurityIndicators in Google Chrome on on iOS prior to…
UI misrepresentation in SecurityIndicators in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: High)
CVE-2026-95290
Média · 5.4
CWE-862 29/09/2026
Missing Authorization em Google Chrome
Missing authorization in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-95289
Média · 4.3
CWE-863 29/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Scroll in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-95288
Média · 5.4
CWE-451 29/09/2026
UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed…
UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-95287
Média · 5.4
CWE-862 29/09/2026
Missing Authorization em Google Chrome
Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-95286
Alta · 8.8
CWE-843 29/09/2026
Type Confusion em Google Chrome
Type confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-95285
Alta · 8.4
CWE-862 29/09/2026
Missing Authorization em Google Chrome
Missing authorization in WebView in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-95284
Crítica · 9.6
CWE-122 29/09/2026
Heap-based Buffer Overflow em Google Chrome
Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-95283
Crítica · 9.6
CWE-122 29/09/2026
Heap-based Buffer Overflow em Google Chrome
Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-95282
Alta · 8.8
CWE-416 29/09/2026
Use After Free em Google Chrome
Use after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-95281
Crítica · 9.6
CWE-122 29/09/2026
Heap-based Buffer Overflow em Google Chrome
Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-95280
Alta · 7.5
CWE-362 29/09/2026
Race Condition em Google Chrome
Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-95279
Média · 5.4
CWE-451 29/09/2026
UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.57…
UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-95278
Alta · 8.4
CWE-862 29/09/2026
Missing Authorization em Google Chrome
Missing authorization in WakeLock in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-95277
Crítica · 9.6
CWE-416 29/09/2026
Use After Free em Google Chrome
Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-95276
Alta · 8.3
CWE-20 29/09/2026
Improper Input Validation em Google Chrome
Improper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code inside the sandbox via crafted network traffic. (Chromium security severity: Medium)
CVE-2026-95275
Média · 6.5
CWE-706 29/09/2026
Use of Incorrectly-Resolved Name or Reference em Google Chrome
Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-95274
Alta · 8.3
CWE-116 29/09/2026
Improper Encoding or Escaping of Output em Google Chrome
Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-13018
Média · 4.3
CWE-20 28/09/2026
Improper Input Validation em Google Chrome
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file. (Chromium security severity: Low)
CVE-2026-93387
Média · 4.3
CWE-754 17/09/2026
Improper Check for Unusual or Exceptional Conditions em Google Chrome
Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-93386
Média · 5.4
CWE-451 17/09/2026
UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a…
UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-93385
Média · 6.5
CWE-200 17/09/2026
Exposure of Sensitive Information em Google Chrome
Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-93384
Baixa · 3.7
CWE-918 17/09/2026
Server-Side Request Forgery (SSRF) em Google Chrome
Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)