Vulnerabilidades do Google Chrome

CVE-2026-16419 Crítica · 9.6 CWE-125 21/07/2026

Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed...

Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-16418 Alta · 8.8 CWE-121 21/07/2026

Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to...

Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-16417 Baixa · 3.1 CWE-457 21/07/2026

Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who...

Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-16416 Crítica · 9.3 CWE-190 21/07/2026

Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker...

Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via malicious network traffic. (Chromium security severity: High)

CVE-2026-16415 Média · 5.4 CWE-20 21/07/2026

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.182...

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High)

CVE-2026-16414 Alta · 7.8 CWE-20 21/07/2026

Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182...

Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via malicious network traffic. (Chromium security severity: High)

CVE-2026-16413 Alta · 8.3 CWE-787 21/07/2026

Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.182 allowed a remote attacker...

Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-15905 Alta · 7.8 CWE-416 20/07/2026

Use after free in Aura in Google Chrome prior to 150.0.7871.128 allowed a local attacker to...

Use after free in Aura in Google Chrome prior to 150.0.7871.128 allowed a local attacker to potentially exploit heap corruption via a malicious file. (Chromium security severity: High)

CVE-2026-15904 Alta · 8.8 CWE-416 20/07/2026

Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.128 allowed a remote...

Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.128 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-15903 Alta · 8.8 CWE-125 20/07/2026

Out of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote...

Out of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-15902 Alta · 8.8 CWE-416 20/07/2026

Use after free in Cast in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to...

Use after free in Cast in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-15901 Crítica · 9.6 CWE-416 20/07/2026

Use after free in Network in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to...

Use after free in Network in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-15900 Crítica · 9.6 CWE-416 20/07/2026

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote...

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-15899 Crítica · 9.6 CWE-416 20/07/2026

Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote...

Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-15778 Média · 6.5 CWE-20 14/07/2026

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 150.0.7871.125...

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-15777 Alta · 7.5 CWE-416 14/07/2026

Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker...

Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-15776 Alta · 8.8 CWE-843 14/07/2026

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote...

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-15775 Média · 6.5 CWE-346 14/07/2026

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote...

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)

CVE-2026-15774 Alta · 8.3 CWE-416 14/07/2026

Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had...

Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-15773 Crítica · 9.6 CWE-416 14/07/2026

Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote...

Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-15772 Alta · 8.3 CWE-416 14/07/2026

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote...

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-15771 Média · 5.3 CWE-20 14/07/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-15770 Média · 6.5 CWE-457 14/07/2026

Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to...

Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-15769 Alta · 8.3 CWE-20 14/07/2026

Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux...

Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-15768 Média · 6.5 CWE-346 14/07/2026

Insufficient policy enforcement in HTML-in-Canvas in Google Chrome prior to 150.0.7871.125...

Insufficient policy enforcement in HTML-in-Canvas in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)