Vulnerabilidades do Google Chrome
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Google Chrome: 3563 registro(s), com versões afetadas e correções.cpe:2.3:a:google:chrome
CVE-2026-87452
Baixa · 3.1
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87451
Baixa · 3.1
CWE-200 08/09/2026
Exposure of Sensitive Information em Google Chrome
Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87450
Alta · 7.5
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-87449
Média · 4.3
CWE-352 08/09/2026
Cross-Site Request Forgery (CSRF) em Google Chrome
Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87448
Crítica · 9.6
CWE-416 08/09/2026
Use After Free em Google Chrome
Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87447
Média · 6.5
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: High)
CVE-2026-87446
Média · 6.5
CWE-459 08/09/2026
Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a…
Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-87445
Média · 5.4
CWE-451 08/09/2026
UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote…
UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87444
Alta · 8.8
CWE-119 08/09/2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Google Chrome
Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87443
Média · 6.5
CWE-862 08/09/2026
Missing Authorization em Google Chrome
Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87442
Baixa · 3.1
CWE-441 08/09/2026
Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote…
Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87441
Média · 6.5
CWE-862 08/09/2026
Missing Authorization em Google Chrome
Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-87440
Alta · 8.8
CWE-125 08/09/2026
Out-of-bounds Read em Google Chrome
Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87439
Média · 5.3
CWE-200 08/09/2026
Exposure of Sensitive Information em Google Chrome
Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87438
Crítica · 9.6
CWE-787 08/09/2026
Out-of-bounds Write em Google Chrome
Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-87437
Média · 6.5
CWE-200 08/09/2026
Exposure of Sensitive Information em Google Chrome
Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87436
Média · 6.5
CWE-459 08/09/2026
Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote…
Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-87435
Média · 5.3
CWE-200 08/09/2026
Exposure of Sensitive Information em Google Chrome
Information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87434
Baixa · 3.1
CWE-862 08/09/2026
Missing Authorization em Google Chrome
Missing authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87433
Alta · 8.8
CWE-367 08/09/2026
TOCTOU Race Condition em Google Chrome
Race condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87432
Média · 4.2
CWE-863 08/09/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87431
Alta · 7.5
CWE-862 08/09/2026
Missing Authorization em Google Chrome
Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-87430
Alta · 8.8
CWE-122 08/09/2026
Heap-based Buffer Overflow em Google Chrome
Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87429
Média · 6.5
CWE-862 08/09/2026
Missing Authorization em Google Chrome
Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-85053
Alta · 8.8
CWE-668 03/09/2026
Exposure of Resource to Wrong Sphere em Google Chrome
Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)