Vulnerabilidades de Google

CVE-2026-13817 Alta · 8.8 CWE-20 30/06/2026

Insufficient validation of untrusted input in Glic in Google Chrome prior to 150.0.7871.47...

Insufficient validation of untrusted input in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13816 Média · 6.5 CWE-20 30/06/2026

Insufficient validation of untrusted input in File Input in Google Chrome on Android prior to 150...

Insufficient validation of untrusted input in File Input in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13815 Alta · 8.8 CWE-416 30/06/2026

Use after free in Blink in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

Use after free in Blink in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13814 Alta · 7.5 CWE-416 30/06/2026

Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...

Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13813 Alta · 8.3 CWE-20 30/06/2026

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13812 Média · 4.7 CWE-20 30/06/2026

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150...

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13811 Alta · 8.8 CWE-416 30/06/2026

Use after free in IME in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

Use after free in IME in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13810 Média · 6.5 CWE-200 30/06/2026

Inappropriate implementation in Input in Google Chrome on Linux prior to 150.0.7871.47 allowed a...

Inappropriate implementation in Input in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13809 Média · 6.5 CWE-1300 30/06/2026

Side-channel information leakage in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47...

Side-channel information leakage in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13808 Média · 4.6 CWE-20 30/06/2026

Insufficient data validation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...

Insufficient data validation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information from process memory via physical access to the device. (Chromium security severity: High)

CVE-2026-13807 Alta · 7.5 CWE-416 30/06/2026

Use after free in Import in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker...

Use after free in Import in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a malicious file. (Chromium security severity: High)

CVE-2026-13806 Alta · 8.1 CWE-20 30/06/2026

Insufficient validation of untrusted input in Accessibility in Google Chrome prior to 150.0.7871...

Insufficient validation of untrusted input in Accessibility in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13805 Alta · 8.8 CWE-416 30/06/2026

Use after free in GFX in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to...

Use after free in GFX in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13804 Alta · 8.3 CWE-416 30/06/2026

Use after free in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker...

Use after free in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13803 Alta · 8.3 CWE-843 30/06/2026

Type Confusion in Chrome Tabs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker...

Type Confusion in Chrome Tabs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13802 Alta · 7.5 CWE-416 30/06/2026

Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who...

Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13801 Alta · 8.3 CWE-472 30/06/2026

Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker...

Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13800 Alta · 7.8 CWE-284 30/06/2026

Inappropriate implementation in Updater in Google Chrome on Windows prior to 150.0.7871.47...

Inappropriate implementation in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)

CVE-2026-13799 Alta · 8.1 CWE-416 30/06/2026

Use after free in QUIC in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to...

Use after free in QUIC in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: High)

CVE-2026-13798 Crítica · 9.6 CWE-122 30/06/2026

Estouro de buffer na heap no Chromecast do Google Chrome (CWE-122)

Estouro de buffer na heap em Chromecast no Google Chrome anterior à versão 150.0.7871.47 permitiu que um atacante remoto que tivesse comprometido o processo renderer executasse potencialmente uma fuga do sandbox por meio de uma página HTML elaborada. (Gravidade de segurança do Chromium: Alta)

CVE-2026-13797 Crítica · 9.6 CWE-20 30/06/2026

Falha de validação de entrada no Chromecast do Google Chrome permite possível fuga de sandbox

Validação insuficiente de entrada não confiável no Chromecast do Google Chrome anterior à 150.0.7871.47 permitiu que um atacante remoto que tivesse comprometido o processo de renderização potencialmente realizasse uma fuga do sandbox por meio de uma página HTML especialmente elaborada. (Gravidade de segurança do Chromium: Alta)

CVE-2026-13796 Crítica · 9.6 CWE-472 30/06/2026

Estouro de inteiro no componente Chromecast do Google Chrome permite possível fuga de sandbox

Estouro de inteiro (integer overflow) no Chromecast no Google Chrome anterior à versão 150.0.7871.47 permitiu que um atacante remoto que tivesse comprometido o processo renderizador potencialmente realizasse uma fuga do sandbox por meio de uma página HTML criada. (Gravidade de segurança do Chromium: High)

CVE-2026-13795 Média · 6.5 CWE-602 30/06/2026

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13794 Alta · 7.5 CWE-20 30/06/2026

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to...

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13793 Média · 6.5 CWE-346 30/06/2026

Insufficient policy enforcement in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote...

Insufficient policy enforcement in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)