Vulnerabilidades do Google Chrome

CVE-2026-93383 Média · 4.3 CWE-200 17/09/2026

Exposure of Sensitive Information em Google Chrome

Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-93382 Alta · 8.8 CWE-416 17/09/2026

Use After Free em Google Chrome

Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-93381 Alta · 8.8 CWE-122 17/09/2026

Heap-based Buffer Overflow em Google Chrome

Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)

CVE-2026-93380 Baixa · 3.1 CWE-367 17/09/2026

TOCTOU Race Condition em Google Chrome

Race condition in FileSystem in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-93379 Média · 4.3 CWE-863 17/09/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-93378 Baixa · 3.1 CWE-862 17/09/2026

Missing Authorization em Google Chrome

Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: Medium)

CVE-2026-93377 Alta · 8.8 CWE-843 17/09/2026

Type Confusion em Google Chrome

Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-93376 Média · 6.3 CWE-125 17/09/2026

Out-of-bounds Read em Google Chrome

Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social engineering to read memory outside the sandbox via a local program. (Chromium security severity: Medium)

CVE-2026-93375 Alta · 8.1 CWE-706 17/09/2026

Use of Incorrectly-Resolved Name or Reference em Google Chrome

Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)

CVE-2026-93374 Crítica · 9.6 CWE-416 17/09/2026

Use After Free em Google Chrome

Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-93373 Crítica · 9.6 CWE-416 17/09/2026

Use After Free em Google Chrome

Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)

CVE-2026-93372 Crítica · 9.6 CWE-121 17/09/2026

Stack-based Buffer Overflow em Google Chrome

Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-91749 Crítica · 9.6 CWE-416 15/09/2026

Use After Free em Google Chrome

Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-91748 Alta · 8.3 CWE-367 15/09/2026

TOCTOU Race Condition em Google Chrome

Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: High)

CVE-2026-91747 Baixa · 3.1 CWE-416 15/09/2026

Use After Free em Google Chrome

Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-91746 Média · 4.3 CWE-190 15/09/2026

Integer Overflow or Wraparound em Google Chrome

Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-91745 Alta · 8.8 CWE-416 15/09/2026

Use After Free em Google Chrome

Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-91744 Média · 5.3 CWE-367 15/09/2026

TOCTOU Race Condition em Google Chrome

Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)

CVE-2026-91743 Alta · 8.3 CWE-367 15/09/2026

TOCTOU Race Condition em Google Chrome

Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-91742 Média · 4.8 CWE-441 15/09/2026

Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47…

Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via crafted network traffic. (Chromium security severity: Medium)

CVE-2026-91741 Alta · 8.8 CWE-843 15/09/2026

Type Confusion em Google Chrome

Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-91740 Média · 4.3 CWE-908 15/09/2026

Use of Uninitialized Resource em Google Chrome

Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-91739 Média · 4.2 CWE-862 15/09/2026

Missing Authorization em Google Chrome

Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-91738 Crítica · 9.6 CWE-20 15/09/2026

Improper Input Validation em Google Chrome

Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-91737 Alta · 8.8 CWE-416 15/09/2026

Use After Free em Google Chrome

Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)