Vulnerabilidades do Google Chrome

CVE-2026-13936 Média · 6.5 CWE-284 30/06/2026

Inappropriate implementation in Passwords in Google Chrome on Android prior to 150.0.7871.47...

Inappropriate implementation in Passwords in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13935 Média · 6.5 CWE-1300 30/06/2026

Side-channel information leakage in ComputePressure in Google Chrome prior to 150.0.7871.47...

Side-channel information leakage in ComputePressure in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13934 Crítica · 9.6 CWE-20 30/06/2026

Google Chrome no Android: escape de sandbox no Dawn por validação inadequada de entrada

Validação insuficiente de entrada não confiável no Dawn, no Google Chrome para Android anterior à versão 150.0.7871.47, permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse um escape do sandbox por meio de uma página HTML elaborada. (Gravidade de segurança do Chromium: Média)

CVE-2026-13933 Média · 5.3 CWE-284 30/06/2026

Improper Access Control em Google Chrome

Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13932 Média · 6.5 CWE-284 30/06/2026

Inappropriate implementation in Sharing in Google Chrome on Android prior to 150.0.7871.47...

Inappropriate implementation in Sharing in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13931 Média · 6.5 CWE-284 30/06/2026

Inappropriate implementation in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed...

Inappropriate implementation in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13930 Média · 6.5 CWE-602 30/06/2026

Insufficient policy enforcement in Actor in Google Chrome prior to 150.0.7871.47 allowed a remote...

Insufficient policy enforcement in Actor in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13929 Média · 5.5 CWE-20 30/06/2026

Insufficient policy enforcement in DevTools in Google Chrome on Android prior to 150.0.7871.47...

Insufficient policy enforcement in DevTools in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to bypass navigation restrictions via a malicious file. (Chromium security severity: Medium)

CVE-2026-13928 Alta · 8.8 CWE-20 30/06/2026

Insufficient validation of untrusted input in Enterprise in Google Chrome prior to 150.0.7871.47...

Insufficient validation of untrusted input in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13927 Alta · 7.8 CWE-20 30/06/2026

Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 150.0.7871...

Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Medium)

CVE-2026-13926 Média · 6.5 CWE-20 30/06/2026

Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47...

Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13925 Alta · 7.5 CWE-20 30/06/2026

Inappropriate implementation in Downloads in Google Chrome on Windows prior to 150.0.7871.47...

Inappropriate implementation in Downloads in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13924 Média · 6.5 CWE-20 30/06/2026

Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 150.0...

Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13923 Média · 6.5 CWE-457 30/06/2026

Uninitialized Use in GPU in Google Chrome on Android prior to 150.0.7871.47 allowed a remote...

Uninitialized Use in GPU in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13922 Média · 6.5 CWE-1300 30/06/2026

Side-channel information leakage in Paint in Google Chrome prior to 150.0.7871.47 allowed a...

Side-channel information leakage in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13921 Média · 6.5 CWE-20 30/06/2026

Insufficient validation of untrusted input in DeviceBoundSessionCredentials in Google Chrome...

Insufficient validation of untrusted input in DeviceBoundSessionCredentials in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13920 Crítica · 9.6 CWE-20 30/06/2026

Google Chrome: Validação Imprópria de Entrada em Media Permite Possível Escape de Sandbox

Validação insuficiente de entrada não confiável em Media no Google Chrome para Windows anterior à 150.0.7871.47 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse uma fuga do sandbox por meio de uma página HTML elaborada. (Severidade de segurança do Chromium: Média)

CVE-2026-13919 Média · 6.5 CWE-602 30/06/2026

Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a...

Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13918 Alta · 8.8 CWE-416 30/06/2026

Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote...

Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13917 Média · 6.5 CWE-20 30/06/2026

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150...

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13916 Média · 4.3 CWE-451 30/06/2026

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13915 Alta · 8.8 CWE-416 30/06/2026

Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote...

Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13914 Média · 5.5 CWE-284 30/06/2026

Inappropriate implementation in Passwords in Google Chrome on Mac prior to 150.0.7871.47 allowed...

Inappropriate implementation in Passwords in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. (Chromium security severity: Medium)

CVE-2026-13913 Média · 6.5 CWE-346 30/06/2026

Insufficient policy enforcement in Autofill in Google Chrome on iOS prior to 150.0.7871.47...

Insufficient policy enforcement in Autofill in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13912 Média · 4.3 CWE-451 30/06/2026

Inappropriate implementation in Safe Browsing in Google Chrome on iOS prior to…

Inappropriate implementation in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)