Vulnerabilidades do Google Chrome
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Google Chrome: 3803 registro(s), com versões afetadas e correções.cpe:2.3:a:google:chrome
CVE-2026-17667
Média · 6.5
CWE-457 29/07/2026
Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...
Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17666
Crítica · 9.1
CWE-325 29/07/2026
Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a...
Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access control via malicious network traffic. (Chromium security severity: High)
CVE-2026-17665
Alta · 8.8
CWE-416 29/07/2026
Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute...
Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17664
Média · 6.5
CWE-20 29/07/2026
Insufficient validation of untrusted input in Loader in Google Chrome prior to 151.0.7922.72...
Insufficient validation of untrusted input in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17663
Alta · 8.3
CWE-20 29/07/2026
Improper Input Validation em Google Chrome
Insufficient validation of untrusted input in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17662
Média · 4.3
CWE-346 29/07/2026
Insufficient policy enforcement in Prefetch in Google Chrome prior to 151.0.7922.72 allowed a...
Insufficient policy enforcement in Prefetch in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17661
Alta · 8.8
CWE-416 29/07/2026
Use after free in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...
Use after free in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17660
Alta · 8.3
CWE-20 29/07/2026
Insufficient validation of untrusted input in Network in Google Chrome prior to 151.0.7922.72...
Insufficient validation of untrusted input in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17659
Média · 4.2
CWE-693 29/07/2026
Inappropriate implementation in SiteIsolation in Google Chrome prior to 151.0.7922.72 allowed a...
Inappropriate implementation in SiteIsolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17658
Alta · 8.8
CWE-416 29/07/2026
Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute...
Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17657
Alta · 8.3
CWE-416 29/07/2026
Use after free in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker...
Use after free in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17656
Crítica · 9.6
CWE-416 29/07/2026
Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...
Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-17655
Crítica · 9.6
CWE-20 29/07/2026
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72...
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-17654
Alta · 7.8
CWE-362 29/07/2026
Race in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to...
Race in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Critical)
CVE-2026-17653
Alta · 8.3
CWE-416 29/07/2026
Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had...
Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-17652
Crítica · 9.6
CWE-416 29/07/2026
Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had...
Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-17651
Crítica · 9.6
CWE-20 29/07/2026
Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 151.0...
Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-17650
Alta · 8.3
CWE-416 29/07/2026
Use after free in Compositing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker...
Use after free in Compositing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-16807
Alta · 8.8
CWE-787 23/07/2026
Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker...
Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-16806
Alta · 8.8
CWE-416 23/07/2026
Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to...
Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-16805
Alta · 8.8
CWE-416 23/07/2026
Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to...
Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-16804
Alta · 8.3
CWE-416 23/07/2026
Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who...
Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-16424
Crítica · 9.6
CWE-416 21/07/2026
Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote...
Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-16423
Alta · 8.8
CWE-416 21/07/2026
Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who...
Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-16422
Alta · 7.5
CWE-20 21/07/2026
Insufficient validation of untrusted input in Certificate in Google Chrome on Linux prior to 150...
Insufficient validation of untrusted input in Certificate in Google Chrome on Linux prior to 150.0.7871.182 allowed an attacker in a privileged network position to perform domain spoofing via malicious network traffic. (Chromium security severity: High)