Vulnerabilidades do Google Chrome
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Google Chrome: 3398 registro(s), com versões afetadas e correções.cpe:2.3:a:google:chrome
CVE-2026-87462
Média · 5.4
CWE-451 08/09/2026
UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote…
UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87461
Média · 4.3
CWE-200 08/09/2026
Exposure of Sensitive Information em Google Chrome
Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted Chrome extension. (Chromium security severity: Low)
CVE-2026-87460
Alta · 8.8
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87459
Média · 6.5
CWE-203 08/09/2026
Observable Discrepancy em Google Chrome
Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87458
Média · 5.4
CWE-451 08/09/2026
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a…
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87457
Alta · 8.1
CWE-367 08/09/2026
TOCTOU Race Condition em Google Chrome
Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)
CVE-2026-87456
Baixa · 3.4
CWE-908 08/09/2026
Use of Uninitialized Resource em Google Chrome
Uninitialized resource in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87455
Crítica · 9.6
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87454
Média · 6.5
CWE-200 08/09/2026
Exposure of Sensitive Information em Google Chrome
Information leak in Enterprise in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87453
Média · 5.3
CWE-441 08/09/2026
Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allowed a…
Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87452
Baixa · 3.1
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87451
Baixa · 3.1
CWE-200 08/09/2026
Exposure of Sensitive Information em Google Chrome
Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87450
Alta · 7.5
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-87449
Média · 4.3
CWE-352 08/09/2026
Cross-Site Request Forgery (CSRF) em Google Chrome
Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87448
Crítica · 9.6
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87447
Média · 6.5
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: High)
CVE-2026-87446
Média · 6.5
CWE-459 08/09/2026
Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a…
Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-87445
Média · 5.4
CWE-451 08/09/2026
UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote…
UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87444
Alta · 8.8
CWE-119 08/09/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Google Chrome
Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87443
Média · 6.5
CWE-862 08/09/2026
Missing Authorization em Google Chrome
Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87442
Baixa · 3.1
CWE-441 08/09/2026
Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote…
Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87441
Média · 6.5
CWE-862 08/09/2026
Missing Authorization em Google Chrome
Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-87440
Alta · 8.8
CWE-125 08/09/2026
Out-of-bounds Read em Google Chrome
Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87439
Média · 5.3
CWE-200 08/09/2026
Exposure of Sensitive Information em Google Chrome
Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87438
Crítica · 9.6
CWE-787 08/09/2026
Out-of-bounds Write em Google Chrome
Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)