Vulnerabilidades de Google

CVE-2026-13943 Média · 6.5 CWE-457 30/06/2026

Uninitialized Use in CSS in Google Chrome on Android prior to 150.0.7871.47 allowed a remote...

Uninitialized Use in CSS in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13942 Baixa · 3.3 CWE-20 30/06/2026

Inappropriate implementation in Video Capture in Google Chrome on ChromeOS prior to 150.0.7871.47...

Inappropriate implementation in Video Capture in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a local attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13941 Média · 4.3 CWE-451 30/06/2026

Inappropriate implementation in SiteSettings in Google Chrome on Android prior to 150.0.7871.47...

Inappropriate implementation in SiteSettings in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13940 Média · 6.5 CWE-457 30/06/2026

Uninitialized Use in Cast in Google Chrome prior to 150.0.7871.47 allowed an attacker on the...

Uninitialized Use in Cast in Google Chrome prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain potentially sensitive information from process memory via malicious network traffic. (Chromium security severity: Medium)

CVE-2026-13939 Baixa · 3.1 CWE-20 30/06/2026

Insufficient validation of untrusted input in WebShare in Google Chrome on Android prior to 150.0...

Insufficient validation of untrusted input in WebShare in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13938 Alta · 8.8 CWE-472 30/06/2026

Integer overflow in Fonts in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

Integer overflow in Fonts in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13937 Média · 6.5 CWE-284 30/06/2026

Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.47 allowed a...

Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13936 Média · 6.5 CWE-284 30/06/2026

Inappropriate implementation in Passwords in Google Chrome on Android prior to 150.0.7871.47...

Inappropriate implementation in Passwords in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13935 Média · 6.5 CWE-1300 30/06/2026

Side-channel information leakage in ComputePressure in Google Chrome prior to 150.0.7871.47...

Side-channel information leakage in ComputePressure in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13934 Crítica · 9.6 CWE-20 30/06/2026

Google Chrome no Android: escape de sandbox no Dawn por validação inadequada de entrada

Validação insuficiente de entrada não confiável no Dawn, no Google Chrome para Android anterior à versão 150.0.7871.47, permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse um escape do sandbox por meio de uma página HTML elaborada. (Gravidade de segurança do Chromium: Média)

CVE-2026-13933 Média · 5.3 CWE-284 30/06/2026

Improper Access Control em Google Chrome

Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13932 Média · 6.5 CWE-284 30/06/2026

Inappropriate implementation in Sharing in Google Chrome on Android prior to 150.0.7871.47...

Inappropriate implementation in Sharing in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13931 Média · 6.5 CWE-284 30/06/2026

Inappropriate implementation in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed...

Inappropriate implementation in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13930 Média · 6.5 CWE-602 30/06/2026

Insufficient policy enforcement in Actor in Google Chrome prior to 150.0.7871.47 allowed a remote...

Insufficient policy enforcement in Actor in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13929 Média · 5.5 CWE-20 30/06/2026

Insufficient policy enforcement in DevTools in Google Chrome on Android prior to 150.0.7871.47...

Insufficient policy enforcement in DevTools in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to bypass navigation restrictions via a malicious file. (Chromium security severity: Medium)

CVE-2026-13928 Alta · 8.8 CWE-20 30/06/2026

Insufficient validation of untrusted input in Enterprise in Google Chrome prior to 150.0.7871.47...

Insufficient validation of untrusted input in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13927 Alta · 7.8 CWE-20 30/06/2026

Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 150.0.7871...

Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Medium)

CVE-2026-13926 Média · 6.5 CWE-20 30/06/2026

Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47...

Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13925 Alta · 7.5 CWE-20 30/06/2026

Inappropriate implementation in Downloads in Google Chrome on Windows prior to 150.0.7871.47...

Inappropriate implementation in Downloads in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13924 Média · 6.5 CWE-20 30/06/2026

Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 150.0...

Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13923 Média · 6.5 CWE-457 30/06/2026

Uninitialized Use in GPU in Google Chrome on Android prior to 150.0.7871.47 allowed a remote...

Uninitialized Use in GPU in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13922 Média · 6.5 CWE-1300 30/06/2026

Side-channel information leakage in Paint in Google Chrome prior to 150.0.7871.47 allowed a...

Side-channel information leakage in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13921 Média · 6.5 CWE-20 30/06/2026

Insufficient validation of untrusted input in DeviceBoundSessionCredentials in Google Chrome...

Insufficient validation of untrusted input in DeviceBoundSessionCredentials in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13920 Crítica · 9.6 CWE-20 30/06/2026

Google Chrome: Validação Imprópria de Entrada em Media Permite Possível Escape de Sandbox

Validação insuficiente de entrada não confiável em Media no Google Chrome para Windows anterior à 150.0.7871.47 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse uma fuga do sandbox por meio de uma página HTML elaborada. (Severidade de segurança do Chromium: Média)

CVE-2026-13919 Média · 6.5 CWE-602 30/06/2026

Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a...

Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)