Vulnerabilidades do Google Chrome

CVE-2026-87537 Alta · 8.1 CWE-862 08/09/2026

Missing Authorization em Google Chrome

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)

CVE-2026-87536 Alta · 8.8 CWE-416 08/09/2026

Use After Free em Google Chrome

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-87535 Média · 6.5 CWE-221 08/09/2026

Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to…

Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-87534 Crítica · 9.8 CWE-862 08/09/2026

Missing Authorization em Google Chrome

Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)

CVE-2026-87533 Alta · 8.1 CWE-416 08/09/2026

Use After Free em Google Chrome

Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)

CVE-2026-87532 Média · 6.5 CWE-754 08/09/2026

Improper Check for Unusual or Exceptional Conditions em Google Chrome

Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-87531 Baixa · 3.1 CWE-200 08/09/2026

Exposure of Sensitive Information em Google Chrome

Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-87530 Alta · 8.1 CWE-427 08/09/2026

Uncontrolled Search Path Element em Google Chrome

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)

CVE-2026-87529 Crítica · 9.6 CWE-197 08/09/2026

Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a…

Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-87528 Crítica · 9.6 CWE-843 08/09/2026

Type Confusion em Google Chrome

Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-87527 Crítica · 9.6 CWE-122 08/09/2026

Heap-based Buffer Overflow em Google Chrome

Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-87526 Crítica · 9.6 CWE-416 08/09/2026

Use After Free em Google Chrome

Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: Medium)

CVE-2026-87525 Baixa · 2.7 CWE-125 08/09/2026

Out-of-bounds Read em Google Chrome

Out of bounds read in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to read memory outside the sandbox via a local program. (Chromium security severity: High)

CVE-2026-87524 Alta · 8.3 CWE-416 08/09/2026

Use After Free em Google Chrome

Use after free in Core in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-87523 Média · 5.3 CWE-367 08/09/2026

TOCTOU Race Condition em Google Chrome

Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-87522 Média · 6.5 CWE-862 08/09/2026

Missing Authorization em Google Chrome

Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)

CVE-2026-87521 Baixa · 3.1 CWE-200 08/09/2026

Exposure of Sensitive Information em Google Chrome

Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-87520 Crítica · 9.6 CWE-416 08/09/2026

Use After Free em Google Chrome

Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-87519 Média · 6.5 CWE-863 08/09/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-87518 Média · 5.3 CWE-203 08/09/2026

Observable Discrepancy em Google Chrome

Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-87517 Baixa · 3.1 CWE-367 08/09/2026

TOCTOU Race Condition em Google Chrome

Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

CVE-2026-87516 Média · 4.3 CWE-203 08/09/2026

Observable Discrepancy em Google Chrome

Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-87515 Média · 6.5 CWE-863 08/09/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-87514 Alta · 8.1 CWE-416 08/09/2026

Use After Free em Google Chrome

Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)

CVE-2026-87513 Média · 6.5 CWE-862 08/09/2026

Missing Authorization em Google Chrome

Missing authorization in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)