Vulnerabilidades de Google

CVE-2026-13892 Média · 6.5 CWE-451 30/06/2026

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13891 Alta · 7.5 CWE-20 30/06/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13890 Média · 5.3 CWE-125 30/06/2026

Out of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote...

Out of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13889 Média · 6.5 CWE-20 30/06/2026

Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871...

Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13888 Alta · 8.8 CWE-416 30/06/2026

Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13887 Média · 6.5 CWE-346 30/06/2026

Inappropriate implementation in NFC in Google Chrome on Android prior to 150.0.7871.47 allowed a...

Inappropriate implementation in NFC in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13886 Média · 6.5 CWE-693 30/06/2026

Insufficient policy enforcement in Isolated Web Apps in Google Chrome prior to 150.0.7871.47...

Insufficient policy enforcement in Isolated Web Apps in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13885 Alta · 8.8 CWE-416 30/06/2026

Use after free in Skia in Google Chrome on Android prior to 150.0.7871.47 allowed a remote...

Use after free in Skia in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13884 Alta · 8.8 CWE-122 30/06/2026

Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a local attacker...

Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a local attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Medium)

CVE-2026-13883 Crítica · 9.6 CWE-843 30/06/2026

Confusão de tipo no ANGLE do Google Chrome

Confusão de tipo no ANGLE no Google Chrome anterior a 150.0.7871.47 permitiu que um atacante remoto potencialmente realizasse uma fuga do sandbox por meio de uma página HTML criada para esse fim. (Gravidade de segurança do Chromium: Média)

CVE-2026-13882 Crítica · 9.6 CWE-362 30/06/2026

Condição de corrida no USB do Google Chrome com possível fuga de sandbox (CVE-2026-13882)

Condição de corrida (race) no USB do Google Chrome anterior à versão 150.0.7871.47 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse uma fuga do sandbox por meio de uma página HTML elaborada. (Gravidade de segurança do Chromium: Média)

CVE-2026-13881 Média · 6.5 CWE-346 30/06/2026

Inappropriate implementation in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a...

Inappropriate implementation in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13880 Crítica · 9.6 CWE-416 30/06/2026

Google Chrome para macOS: use-after-free no componente USB (CVE-2026-13880)

Use after free no componente USB do Google Chrome para Mac anterior à versão 150.0.7871.47 permitia que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse um escape do sandbox por meio de uma página HTML elaborada. (Severidade de segurança do Chromium: Média)

CVE-2026-13879 Média · 6.5 CWE-416 30/06/2026

Use after free in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed an attacker on the...

Use after free in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain potentially sensitive information from process memory via a malicious peripheral. (Chromium security severity: Medium)

CVE-2026-13878 Crítica · 9.6 CWE-416 30/06/2026

Use-After-Free no Bluetooth do Google Chrome para Mac com Possível Fuga do Sandbox

Use after free no Bluetooth do Google Chrome no Mac anterior à 150.0.7871.47 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse uma fuga do sandbox por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Média)

CVE-2026-13877 Média · 5.3 CWE-20 30/06/2026

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47...

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13876 Média · 6.5 CWE-693 30/06/2026

Inappropriate implementation in Network in Google Chrome prior to 150.0.7871.47 allowed an...

Inappropriate implementation in Network in Google Chrome prior to 150.0.7871.47 allowed an attacker in a privileged network position to bypass content security policy via malicious network traffic. (Chromium security severity: Medium)

CVE-2026-13875 Média · 5.3 CWE-20 30/06/2026

Insufficient validation of untrusted input in GPU in Google Chrome on Windows prior to 150.0.7871...

Insufficient validation of untrusted input in GPU in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13874 Média · 5.3 CWE-362 30/06/2026

Race in DataTransfer in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain...

Race in DataTransfer in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13873 Média · 6.5 CWE-125 30/06/2026

Out of bounds read in Layout in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

Out of bounds read in Layout in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13872 Crítica · 9.1 CWE-20 30/06/2026

Google Chrome para Android: validação inadequada de entrada em WebAppInstalls com possível escape de sandbox

Validação insuficiente de entrada não confiável em WebAppInstalls no Google Chrome para Android anterior à 150.0.7871.47 permitia que um atacante local potencialmente realizasse um escape de sandbox por meio de um arquivo malicioso. (Gravidade de segurança do Chromium: Média)

CVE-2026-13871 Média · 6.5 CWE-602 30/06/2026

Insufficient policy enforcement in GuestView in Google Chrome prior to 150.0.7871.47 allowed a...

Insufficient policy enforcement in GuestView in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13870 Alta · 8.8 CWE-416 30/06/2026

Use After Free em Google Chrome

Use after free in WebView in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13869 Crítica · 9.6 CWE-416 30/06/2026

Use-after-free no componente Device do Google Chrome no Windows permite fuga do sandbox

Use after free no componente Device do Google Chrome no Windows anterior à 150.0.7871.47 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse uma fuga do sandbox por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Média)

CVE-2026-13868 Média · 6.5 CWE-346 30/06/2026

Inappropriate implementation in Network in Google Chrome on Android prior to 150.0.7871.47...

Inappropriate implementation in Network in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)