Vulnerabilidades do Google Chrome

CVE-2026-79025 Média · 4.2 CWE-20 25/08/2026

Improper Input Validation em Google Chrome

Improper input validation in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79024 Média · 6.5 CWE-200 25/08/2026

Exposure of Sensitive Information em Google Chrome

Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79023 Média · 6.5 CWE-863 25/08/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79022 Média · 4.3 CWE-451 25/08/2026

UI misrepresentation in Transactions Platform in Google Chrome prior to 152.0.7977.65…

UI misrepresentation in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79021 Média · 6.5 CWE-862 25/08/2026

Missing Authorization em Google Chrome

Missing authorization in InterestGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted PDF file. (Chromium security severity: Low)

CVE-2026-79020 Alta · 8.1 CWE-125 25/08/2026

Out-of-bounds Read em Google Chrome

Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. (Chromium security severity: Medium)

CVE-2026-79019 Crítica · 9.6 CWE-787 25/08/2026

Out-of-bounds Write em Google Chrome

Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79018 Média · 6.5 CWE-200 25/08/2026

Exposure of Sensitive Information em Google Chrome

Information leak in FoldableAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79017 Média · 6.5 CWE-367 25/08/2026

TOCTOU Race Condition em Google Chrome

Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Low)

CVE-2026-79016 Média · 4.3 CWE-203 25/08/2026

Observable Discrepancy em Google Chrome

Observable discrepancy in SVG in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79015 Média · 4.3 CWE-20 25/08/2026

Improper Input Validation em Google Chrome

Improper input validation in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79014 Média · 4.3 CWE-362 25/08/2026

Race Condition em Google Chrome

Race condition in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79013 Média · 5.9 CWE-20 25/08/2026

Improper Input Validation em Google Chrome

Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: Medium)

CVE-2026-79012 Crítica · 9.6 CWE-416 25/08/2026

Use After Free em Google Chrome

Use after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-79011 Alta · 8.1 CWE-451 25/08/2026

UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote…

UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79010 Média · 4.3 CWE-672 25/08/2026

Operation on a resource after expiration or release in Network in Google Chrome prior to…

Operation on a resource after expiration or release in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79009 Média · 4.3 CWE-451 25/08/2026

UI misrepresentation in UI in Google Chrome prior to 152.0.7977.65 allowed a remote…

UI misrepresentation in UI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79008 Alta · 8.3 CWE-20 25/08/2026

Improper Input Validation em Google Chrome

Improper input validation in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79007 Baixa · 3.1 CWE-908 25/08/2026

Use of Uninitialized Resource em Google Chrome

Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79006 Média · 4.3 CWE-693 25/08/2026

Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65…

Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)

CVE-2026-79005 Média · 6.5 CWE-863 25/08/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79004 Baixa · 3.4 CWE-125 25/08/2026

Out-of-bounds Read em Google Chrome

Out of bounds read in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79003 Média · 4.3 CWE-863 25/08/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in Device in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79002 Baixa · 3.1 CWE-863 25/08/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79001 Média · 5.3 CWE-200 25/08/2026

Exposure of Sensitive Information em Google Chrome

Information leak in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)