Vulnerabilidades do Google Chrome
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Google Chrome: 3398 registro(s), com versões afetadas e correções.cpe:2.3:a:google:chrome
CVE-2026-87486
Média · 4.0
CWE-1021 08/09/2026
Clickjacking em Google Chrome
Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app. (Chromium security severity: Medium)
CVE-2026-87485
Baixa · 3.1
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87484
Média · 5.4
CWE-451 08/09/2026
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a…
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87491
Alta · 8.8
KEV Alta · 60 Exploit público CWE-787 08/09/2026
Google Chromium V8 Out of Bounds Write Vulnerability
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87483
Média · 6.5
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87482
Média · 5.9
CWE-319 08/09/2026
Cleartext Transmission of Sensitive Information em Google Chrome
Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted network traffic. (Chromium security severity: Medium)
CVE-2026-87481
Alta · 8.3
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87480
Alta · 8.3
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in Printing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87479
Alta · 8.3
CWE-807 08/09/2026
Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36…
Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87478
Média · 6.5
CWE-203 08/09/2026
Observable Discrepancy em Google Chrome
Observable discrepancy in Autofill in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87477
Média · 6.5
CWE-200 08/09/2026
Exposure of Sensitive Information em Google Chrome
Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87476
Média · 6.5
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87475
Média · 6.5
CWE-862 08/09/2026
Missing Authorization em Google Chrome
Missing authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87474
Crítica · 9.6
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87473
Média · 6.5
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in FileHandling in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87472
Média · 4.2
CWE-20 08/09/2026
Improper Input Validation em Google Chrome
Improper input validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87471
Alta · 8.1
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87470
Crítica · 9.6
CWE-1284 08/09/2026
Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36…
Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87469
Média · 4.3
CWE-20 08/09/2026
Improper Input Validation em Google Chrome
Improper input validation in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via crafted network traffic. (Chromium security severity: Low)
CVE-2026-87468
Média · 6.5
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87467
Alta · 8.1
CWE-362 08/09/2026
Race Condition em Google Chrome
Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)
CVE-2026-87466
Média · 4.3
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87465
Média · 4.2
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87464
Crítica · 9.6
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-87463
Média · 4.8
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially spoof address bar via crafted network traffic. (Chromium security severity: Low)