Vulnerabilidades do Google Chrome

CVE-2026-78962 Média · 4.3 CWE-908 25/08/2026

Use of Uninitialized Resource em Google Chrome

Uninitialized resource in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78961 Média · 4.3 CWE-863 25/08/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78960 Média · 6.5 CWE-200 25/08/2026

Exposure of Sensitive Information em Google Chrome

Information leak in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium)

CVE-2026-78959 Média · 6.5 CWE-178 25/08/2026

Improper handling of case sensitivity in FileSystem in Google Chrome prior to…

Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78958 Baixa · 3.1 CWE-908 25/08/2026

Use of Uninitialized Resource em Google Chrome

Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78957 Média · 5.5 CWE-200 25/08/2026

Exposure of Sensitive Information em Google Chrome

Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a crafted file. (Chromium security severity: Low)

CVE-2026-78956 Alta · 8.8 CWE-843 25/08/2026

Type Confusion em Google Chrome

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-78955 Média · 6.5 CWE-203 25/08/2026

Observable Discrepancy em Google Chrome

Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78954 Média · 4.3 CWE-863 25/08/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

CVE-2026-78953 Baixa · 3.1 CWE-862 25/08/2026

Missing Authorization em Google Chrome

Missing authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: Medium)

CVE-2026-78952 Alta · 8.3 CWE-787 25/08/2026

Out-of-bounds Write em Google Chrome

Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-78951 Crítica · 9.6 CWE-416 25/08/2026

Use After Free em Google Chrome

Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78950 Alta · 8.8 CWE-190 25/08/2026

Integer Overflow or Wraparound em Google Chrome

Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-78949 Baixa · 2.9 CWE-203 25/08/2026

Observable Discrepancy em Google Chrome

Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium security severity: Medium)

CVE-2026-78948 Crítica · 9.6 CWE-122 25/08/2026

Heap-based Buffer Overflow em Google Chrome

Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-78947 Média · 6.5 CWE-459 25/08/2026

Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote…

Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Low)

CVE-2026-78946 Média · 4.3 CWE-863 25/08/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-78945 Crítica · 9.6 CWE-416 25/08/2026

Use After Free em Google Chrome

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78944 Alta · 8.8 CWE-416 25/08/2026

Use After Free em Google Chrome

Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)

CVE-2026-78943 Baixa · 3.1 CWE-20 25/08/2026

Improper Input Validation em Google Chrome

Improper input validation in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78942 Média · 4.3 CWE-706 25/08/2026

Use of Incorrectly-Resolved Name or Reference em Google Chrome

Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)

CVE-2026-78941 Baixa · 3.1 CWE-200 25/08/2026

Exposure of Sensitive Information em Google Chrome

Information leak in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78940 Média · 4.3 CWE-665 25/08/2026

Improper Initialization em Google Chrome

Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78939 Crítica · 9.6 CWE-416 25/08/2026

Use After Free em Google Chrome

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-78938 Alta · 8.8 CWE-843 25/08/2026

Type Confusion em Google Chrome

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)