Vulnerabilidades do Google Chrome

CVE-2026-13861 Crítica · 9.6 CWE-416 30/06/2026

Google Chrome: use-after-free no componente Core com possível fuga do sandbox (CWE-416)

Use after free em Core no Google Chrome anterior à 150.0.7871.47 permitiu que um atacante remoto que tivesse comprometido o processo renderizador potencialmente realizasse uma fuga do sandbox por meio de uma página HTML criada para esse fim. (Gravidade de segurança do Chromium: Média)

CVE-2026-13860 Média · 4.2 CWE-451 30/06/2026

Incorrect security UI in Autofill in Google Chrome on Windows prior to 150.0.7871.47 allowed a...

Incorrect security UI in Autofill in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13859 Crítica · 9.6 CWE-693 30/06/2026

Google Chrome ANGLE: Implementação Inadequada com Possível Fuga de Sandbox

Implementação inadequada no ANGLE no Google Chrome anterior à 150.0.7871.47 permitiu que um atacante remoto potencialmente realizasse uma fuga do sandbox por meio de uma página HTML criada com esse fim. (Gravidade de segurança do Chromium: Média)

CVE-2026-13858 Média · 6.5 CWE-125 30/06/2026

Out of bounds read in FFmpeg in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

Out of bounds read in FFmpeg in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file. (Chromium security severity: Medium)

CVE-2026-13857 Média · 4.2 CWE-451 30/06/2026

Inappropriate implementation in Geometry in Google Chrome prior to 150.0.7871.47 allowed a remote...

Inappropriate implementation in Geometry in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13856 Alta · 7.5 CWE-20 30/06/2026

Insufficient validation of untrusted input in Speech in Google Chrome on Android prior to 150.0...

Insufficient validation of untrusted input in Speech in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13855 Alta · 7.5 CWE-416 30/06/2026

Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote...

Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13854 Crítica · 9.6 CWE-416 30/06/2026

Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote...

Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13853 Crítica · 9.6 CWE-416 30/06/2026

Use-after-free no Journeys do Google Chrome com possível fuga de sandbox (CVE-2026-13853)

Use after free em Journeys no Google Chrome anterior à 150.0.7871.47 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse uma fuga do sandbox por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Alta)

CVE-2026-13852 Crítica · 9.1 CWE-20 30/06/2026

Falha de validação de entrada em WebAppInstalls no Google Chrome para Android

Validação insuficiente de entrada não confiável em WebAppInstalls no Google Chrome para Android anterior à 150.0.7871.47 permitiu que um atacante local contornasse o controle de acesso discricionário por meio de uma página HTML criada com esse fim. (Severidade de segurança do Chromium: Alta)

CVE-2026-13851 Crítica · 9.1 CWE-20 30/06/2026

Google Chrome Android: validação inadequada de entrada em WebAppInstalls

Validação insuficiente de entrada não confiável em WebAppInstalls no Google Chrome para Android anterior à 150.0.7871.47 permitiu que um atacante local contornasse o controle de acesso discricionário por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Alta)

CVE-2026-13850 Alta · 8.8 CWE-20 30/06/2026

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150...

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker to execute arbitrary code inside a sandbox via a malicious file. (Chromium security severity: High)

CVE-2026-13849 Alta · 8.6 CWE-20 30/06/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

CVE-2026-13848 Alta · 8.8 CWE-416 30/06/2026

Use after free in Forms in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

Use after free in Forms in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13847 Média · 6.5 CWE-20 30/06/2026

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150...

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13846 Crítica · 9.6 CWE-416 30/06/2026

Use-After-Free no componente USB do Google Chrome para Mac com risco de fuga do sandbox (CVE-2026-13846)

Use after free em USB no Google Chrome para Mac anterior a 150.0.7871.47 permitia que um invasor remoto que tivesse comprometido o processo renderer realizasse potencialmente uma fuga do sandbox por meio de uma página HTML criada para esse fim. (Gravidade de segurança do Chromium: Alta)

CVE-2026-13845 Alta · 8.8 CWE-416 30/06/2026

Use after free in DOM in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

Use after free in DOM in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13844 Alta · 7.8 CWE-416 30/06/2026

Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local...

Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)

CVE-2026-13843 Crítica · 9.6 CWE-20 30/06/2026

Google Chrome para iOS: Validação Insuficiente de Entrada com Possível Fuga de Sandbox

Validação insuficiente de entrada não confiável no Chrome para iOS, no Google Chrome para iOS, anterior à 150.0.7871.47, permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse uma fuga do sandbox por meio de uma página HTML elaborada. (Gravidade de segurança do Chromium: Alta)

CVE-2026-13842 Média · 4.3 CWE-451 30/06/2026

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13841 Alta · 8.3 CWE-472 30/06/2026

Integer overflow in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...

Integer overflow in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13840 Média · 6.5 CWE-346 30/06/2026

Insufficient policy enforcement in Canvas in Google Chrome prior to 150.0.7871.47 allowed a...

Insufficient policy enforcement in Canvas in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13839 Média · 6.5 CWE-346 30/06/2026

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote...

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13838 Média · 6.5 CWE-346 30/06/2026

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote...

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13837 Média · 4.3 CWE-451 30/06/2026

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote...

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High)