Vulnerabilidades do Google Chrome

CVE-2026-13911 Média · 5.3 CWE-20 30/06/2026

Insufficient policy enforcement in Spellcheck in Google Chrome prior to 150.0.7871.47 allowed a...

Insufficient policy enforcement in Spellcheck in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13910 Média · 6.5 CWE-693 30/06/2026

Insufficient policy enforcement in WebXR in Google Chrome on Android prior to 150.0.7871.47...

Insufficient policy enforcement in WebXR in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13909 Crítica · 9.6 CWE-693 30/06/2026

Google Chrome DevTools: fuga de sandbox por aplicação insuficiente de política

Aplicação insuficiente de política no DevTools do Google Chrome anterior à versão 150.0.7871.47 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse uma fuga do sandbox por meio de uma página HTML especialmente elaborada. (Severidade de segurança do Chromium: Média)

CVE-2026-13908 Média · 6.5 CWE-20 30/06/2026

Insufficient validation of untrusted input in Omnibox in Google Chrome on iOS prior to 150.0.7871...

Insufficient validation of untrusted input in Omnibox in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via malicious network traffic. (Chromium security severity: Medium)

CVE-2026-13907 Média · 4.2 CWE-451 30/06/2026

Inappropriate implementation in iOSWeb in Google Chrome on iOS prior to 150.0.7871.47 allowed a...

Inappropriate implementation in iOSWeb in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13906 Média · 6.5 CWE-125 30/06/2026

Out of bounds read in Codecs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

Out of bounds read in Codecs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13905 Média · 4.2 CWE-362 30/06/2026

Race in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker to...

Race in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information from process memory via physical access to the device. (Chromium security severity: Medium)

CVE-2026-13904 Média · 6.5 CWE-693 30/06/2026

Inappropriate implementation in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47...

Inappropriate implementation in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13903 Alta · 8.8 CWE-602 30/06/2026

Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a...

Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13902 Média · 4.3 CWE-451 30/06/2026

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13901 Crítica · 9.6 CWE-20 30/06/2026

Google Chrome, componente Serial: fuga de sandbox por aplicação insuficiente de política

Aplicação insuficiente de política no Serial no Google Chrome anterior à 150.0.7871.47 permitiu que um atacante remoto que tivesse comprometido o processo de renderização potencialmente realizasse uma fuga do sandbox por meio de uma página HTML elaborada. (Gravidade de segurança do Chromium: Média)

CVE-2026-13900 Média · 6.5 CWE-20 30/06/2026

Inappropriate implementation in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a...

Inappropriate implementation in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13899 Alta · 8.8 CWE-416 30/06/2026

Use after free in HTML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

Use after free in HTML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13898 Alta · 8.8 CWE-416 30/06/2026

Use after free in Cast Receiver in Google Chrome prior to 150.0.7871.47 allowed a remote attacker...

Use after free in Cast Receiver in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13897 Alta · 8.8 CWE-284 30/06/2026

Insufficient policy enforcement in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a...

Insufficient policy enforcement in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13896 Média · 6.5 CWE-602 30/06/2026

Insufficient policy enforcement in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote...

Insufficient policy enforcement in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13895 Média · 4.2 CWE-451 30/06/2026

Inappropriate implementation in Autofill in Google Chrome prior to 150.0.7871.47 allowed a remote...

Inappropriate implementation in Autofill in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13894 Média · 6.5 CWE-602 30/06/2026

Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed an...

Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed an attacker in a privileged network position to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13893 Média · 6.5 CWE-20 30/06/2026

Insufficient validation of untrusted input in WebUI in Google Chrome prior to 150.0.7871.47...

Insufficient validation of untrusted input in WebUI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via malicious network traffic. (Chromium security severity: Medium)

CVE-2026-13892 Média · 6.5 CWE-451 30/06/2026

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13891 Alta · 7.5 CWE-20 30/06/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13890 Média · 5.3 CWE-125 30/06/2026

Out of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote...

Out of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13889 Média · 6.5 CWE-20 30/06/2026

Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871...

Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13888 Alta · 8.8 CWE-416 30/06/2026

Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13887 Média · 6.5 CWE-346 30/06/2026

Inappropriate implementation in NFC in Google Chrome on Android prior to 150.0.7871.47 allowed a...

Inappropriate implementation in NFC in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)