Vulnerabilidades do Google Chrome
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Google Chrome: 3751 registro(s), com versões afetadas e correções.cpe:2.3:a:google:chrome
CVE-2026-78937
Crítica · 9.6
CWE-416 25/08/2026
Use After Free em Google Chrome
Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78936
Baixa · 2.9
CWE-203 25/08/2026
Observable Discrepancy em Google Chrome
Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium security severity: Medium)
CVE-2026-78935
Crítica · 9.6
CWE-457 25/08/2026
Use of Uninitialized Variable em Google Chrome
Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-78934
Alta · 8.3
CWE-362 25/08/2026
Race Condition em Google Chrome
Race condition in ReadAloud in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-78915
Alta · 7.5
CWE-362 25/08/2026
Race Condition em Google Chrome
Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Low)
CVE-2026-78914
Média · 6.5
CWE-908 25/08/2026
Use of Uninitialized Resource em Google Chrome
Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-78913
Alta · 8.1
CWE-416 25/08/2026
Use After Free em Google Chrome
Use after free in Chromoting in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)
CVE-2026-78912
Média · 5.4
CWE-451 25/08/2026
UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote…
UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78911
Alta · 8.3
CWE-863 25/08/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-78910
Alta · 8.8
CWE-121 25/08/2026
Stack-based Buffer Overflow em Google Chrome
Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78909
Crítica · 9.6
CWE-416 25/08/2026
Use After Free em Google Chrome
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78908
Média · 4.3
CWE-200 25/08/2026
Exposure of Sensitive Information em Google Chrome
Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
CVE-2026-78907
Média · 6.5
CWE-863 25/08/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78906
Alta · 7.5
CWE-362 25/08/2026
Race Condition em Google Chrome
Race condition in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78905
Alta · 8.8
CWE-843 25/08/2026
Type Confusion em Google Chrome
Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78904
Crítica · 9.6
CWE-843 25/08/2026
Type Confusion em Google Chrome
Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-78903
Baixa · 3.1
CWE-459 25/08/2026
Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a…
Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78901
Alta · 7.5
CWE-362 25/08/2026
Race Condition em Google Chrome
Race condition in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78900
Crítica · 9.6
CWE-20 25/08/2026
Improper Input Validation em Google Chrome
Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-78899
Alta · 8.8
CWE-416 25/08/2026
Use After Free em Google Chrome
Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-78898
Média · 5.4
CWE-863 25/08/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78897
Média · 6.5
CWE-862 25/08/2026
Missing Authorization em Google Chrome
Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Low)
CVE-2026-78896
Média · 4.3
CWE-200 25/08/2026
Exposure of Sensitive Information em Google Chrome
Information leak in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-78895
Média · 4.3
CWE-200 25/08/2026
Exposure of Sensitive Information em Google Chrome
Information leak in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
CVE-2026-78894
Baixa · 3.1
CWE-367 25/08/2026
TOCTOU Race Condition em Google Chrome
Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)