Vulnerabilidades do Google Chrome

CVE-2026-19157 Crítica · 9.6 CWE-787 06/08/2026

Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...

Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-19156 Alta · 7.5 CWE-122 06/08/2026

Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who...

Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)

CVE-2026-19155 Alta · 8.3 CWE-416 06/08/2026

Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...

Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19154 Alta · 8.3 CWE-416 06/08/2026

Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...

Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-19153 Alta · 8.1 CWE-20 06/08/2026

Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109...

Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19152 Alta · 8.3 CWE-693 06/08/2026

Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a...

Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19151 Alta · 8.8 CWE-416 06/08/2026

Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...

Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19150 Alta · 8.8 CWE-693 06/08/2026

Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote...

Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19149 Crítica · 9.6 CWE-416 06/08/2026

Use After Free em Google Chrome

Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-19148 Alta · 8.3 CWE-787 06/08/2026

Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote...

Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19147 Alta · 8.3 CWE-416 06/08/2026

Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote...

Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19146 Média · 5.3 CWE-457 06/08/2026

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19145 Alta · 8.8 CWE-416 06/08/2026

Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...

Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19144 Alta · 8.8 CWE-416 06/08/2026

Use after free in HTML in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...

Use after free in HTML in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19143 Alta · 8.6 CWE-20 06/08/2026

Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0...

Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a local attacker to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

CVE-2026-19142 Alta · 7.5 CWE-416 06/08/2026

Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...

Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19141 Alta · 8.3 CWE-416 06/08/2026

Use after free in Resources in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...

Use after free in Resources in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19140 Alta · 8.3 CWE-416 06/08/2026

Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had...

Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19139 Alta · 7.4 CWE-362 06/08/2026

Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local...

Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)

CVE-2026-19138 Alta · 8.3 CWE-122 06/08/2026

Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote...

Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19137 Alta · 8.3 CWE-416 06/08/2026

Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...

Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-18019 Média · 4.3 CWE-1300 29/07/2026

Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a...

Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-18018 Média · 4.0 CWE-451 29/07/2026

Inappropriate implementation in Updater in Google Chrome on Windows prior to 151.0.7922.72...

Inappropriate implementation in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform UI spoofing via a malicious file. (Chromium security severity: Low)

CVE-2026-18017 Alta · 8.8 CWE-416 29/07/2026

Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...

Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-18016 Média · 4.3 CWE-346 29/07/2026

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)