Vulnerabilidades do Google Chrome
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Google Chrome: 3751 registro(s), com versões afetadas e correções.cpe:2.3:a:google:chrome
CVE-2026-17715
Baixa · 3.1
CWE-346 29/07/2026
Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a...
Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17714
Média · 6.5
CWE-457 29/07/2026
Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...
Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17713
Crítica · 9.6
CWE-20 29/07/2026
Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to...
Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17712
Alta · 8.8
CWE-362 29/07/2026
Race in Skia in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute...
Race in Skia in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17711
Crítica · 9.6
CWE-362 29/07/2026
Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who...
Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17710
Crítica · 9.6
CWE-693 29/07/2026
Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a...
Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17709
Crítica · 9.6
CWE-362 29/07/2026
Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who...
Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17708
Crítica · 9.6
CWE-416 29/07/2026
Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had...
Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17707
Média · 6.5
CWE-457 29/07/2026
Uninitialized Use in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote...
Uninitialized Use in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17706
Média · 4.3
CWE-20 29/07/2026
Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 151.0...
Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17705
Alta · 8.8
CWE-190 29/07/2026
Integer Overflow or Wraparound em Google Chrome
Integer overflow in libxml in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17704
Crítica · 9.6
CWE-416 29/07/2026
Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had...
Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17703
Média · 6.5
CWE-602 29/07/2026
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17702
Baixa · 3.1
CWE-346 29/07/2026
Inappropriate implementation in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote...
Inappropriate implementation in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17701
Crítica · 9.6
CWE-125 29/07/2026
Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922...
Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17700
Média · 4.3
CWE-20 29/07/2026
Insufficient validation of untrusted input in Actor in Google Chrome prior to 151.0.7922.72...
Insufficient validation of untrusted input in Actor in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17699
Alta · 8.6
CWE-416 29/07/2026
Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a local attacker to...
Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
CVE-2026-17698
Alta · 7.5
CWE-20 29/07/2026
Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 151.0.7922...
Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17697
Crítica · 9.6
CWE-843 29/07/2026
Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...
Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17696
Média · 4.3
CWE-1300 29/07/2026
Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a...
Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17695
Crítica · 9.6
CWE-693 29/07/2026
Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a...
Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17694
Alta · 8.8
CWE-416 29/07/2026
Use after free in DOM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...
Use after free in DOM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17693
Média · 4.3
CWE-346 29/07/2026
Insufficient policy enforcement in FileSystem in Google Chrome prior to 151.0.7922.72 allowed a...
Insufficient policy enforcement in FileSystem in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17692
Crítica · 9.6
CWE-416 29/07/2026
Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a...
Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17691
Crítica · 9.6
CWE-787 29/07/2026
Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote...
Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)