Vulnerabilidades do Google Chrome

CVE-2026-106424 Média · 4.0 CWE-200 06/10/2026

Exposure of Sensitive Information em Google Chrome

Information leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)

CVE-2026-106423 Alta · 8.8 CWE-416 06/10/2026

Use After Free em Google Chrome

Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-106422 Média · 4.3 CWE-863 06/10/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-106421 Alta · 8.8 CWE-416 06/10/2026

Use After Free em Google Chrome

Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-106420 Média · 5.4 CWE-682 06/10/2026

Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39…

Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (Chromium security severity: Medium)

CVE-2026-106419 Crítica · 9.6 CWE-416 06/10/2026

Use After Free em Google Chrome

Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-106417 Crítica · 9.6 CWE-190 06/10/2026

Integer Overflow or Wraparound em Google Chrome

Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-106416 Média · 5.4 CWE-94 06/10/2026

Code Injection em Google Chrome

Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (Chromium security severity: Medium)

CVE-2026-106415 Média · 4.3 CWE-200 06/10/2026

Exposure of Sensitive Information em Google Chrome

Information leak in Enterprise in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106414 Crítica · 9.6 CWE-20 06/10/2026

Improper Input Validation em Google Chrome

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106418 Média · 6.5 CWE-862 06/10/2026

Missing Authorization em Google Chrome

Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)

CVE-2026-106413 Média · 4.2 CWE-367 06/10/2026

TOCTOU Race Condition em Google Chrome

Race condition in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-106412 Alta · 8.3 CWE-367 06/10/2026

TOCTOU Race Condition em Google Chrome

Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-106411 Alta · 8.8 CWE-416 06/10/2026

Use After Free em Google Chrome

Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-106410 Média · 4.2 CWE-862 06/10/2026

Missing Authorization em Google Chrome

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106409 Alta · 8.3 CWE-706 06/10/2026

Use of Incorrectly-Resolved Name or Reference em Google Chrome

Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)

CVE-2026-106408 Média · 6.5 CWE-693 06/10/2026

Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39…

Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106407 Média · 6.5 CWE-863 06/10/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106406 Média · 5.4 CWE-862 06/10/2026

Missing Authorization em Google Chrome

Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106405 Média · 6.0 CWE-367 06/10/2026

TOCTOU Race Condition em Google Chrome

Race condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass web origin policy via a co-installed app. (Chromium security severity: Medium)

CVE-2026-106404 Média · 6.5 CWE-863 06/10/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106403 Alta · 8.1 CWE-863 06/10/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106402 Média · 4.8 CWE-863 06/10/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (Chromium security severity: Medium)

CVE-2026-106401 Crítica · 9.6 CWE-787 06/10/2026

Out-of-bounds Write em Google Chrome

Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106400 Média · 5.4 CWE-1021 06/10/2026

Clickjacking em Google Chrome

Clickjacking in Messages in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)