Vulnerabilidades do Google Chrome
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Google Chrome: 3398 registro(s), com versões afetadas e correções.cpe:2.3:a:google:chrome
CVE-2026-91711
Alta · 8.8
CWE-787 15/09/2026
Out-of-bounds Write em Google Chrome
Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91710
Crítica · 9.6
CWE-416 15/09/2026
Use After Free em Google Chrome
Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91709
Alta · 8.8
CWE-843 15/09/2026
Type Confusion em Google Chrome
Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91708
Baixa · 3.1
CWE-367 15/09/2026
TOCTOU Race Condition em Google Chrome
Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87658
Média · 4.3
CWE-200 08/09/2026
Exposure of Sensitive Information em Google Chrome
Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-87657
Baixa · 3.1
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87656
Média · 5.4
CWE-754 08/09/2026
Improper Check for Unusual or Exceptional Conditions em Google Chrome
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87655
Média · 5.4
CWE-1021 08/09/2026
Clickjacking em Google Chrome
Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87654
Crítica · 9.6
CWE-122 08/09/2026
Heap-based Buffer Overflow em Google Chrome
Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87653
Média · 5.4
CWE-451 08/09/2026
UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36…
UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87652
Baixa · 3.1
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87651
Média · 4.3
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87650
Crítica · 9.6
CWE-125 08/09/2026
Out-of-bounds Read em Google Chrome
Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87649
Média · 5.4
CWE-451 08/09/2026
UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a…
UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87648
Alta · 8.3
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87647
Baixa · 3.4
CWE-908 08/09/2026
Use of Uninitialized Resource em Google Chrome
Uninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87646
Crítica · 9.6
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87645
Média · 5.4
CWE-754 08/09/2026
Improper Check for Unusual or Exceptional Conditions em Google Chrome
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87644
Alta · 8.3
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87643
Crítica · 9.6
CWE-190 08/09/2026
Integer Overflow or Wraparound em Google Chrome
Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87642
Média · 4.3
CWE-908 08/09/2026
Use of Uninitialized Resource em Google Chrome
Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87641
Média · 4.2
CWE-362 08/09/2026
Race Condition em Google Chrome
Race condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87640
Média · 6.1
CWE-125 08/09/2026
Out-of-bounds Read em Google Chrome
Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87639
Alta · 8.3
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87638
Crítica · 9.6
CWE-787 08/09/2026
Out-of-bounds Write em Google Chrome
Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)