Vulnerabilidades de Google

CVE-2026-11199 Média · 5.9 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Inappropriate implementation in WebRTC in Google Chrome prior to 149.0.7827.53 allowed an attacker in a privileged network position to leak cross-origin data via malicious network traffic. (Chromium security severity: Medium)

CVE-2026-11198 Crítica · 9.6 CWE-20 04/06/2026

Google Chrome Codecs: validação inadequada de entrada permite escape do sandbox

Validação insuficiente de entrada não confiável em Codecs no Google Chrome anterior à versão 149.0.7827.53 permitia que um atacante remoto potencialmente realizasse um escape do sandbox por meio de um arquivo de vídeo especialmente elaborado. (Gravidade de segurança do Chromium: Média)

CVE-2026-11197 Média · 6.5 CWE-284 04/06/2026

Improper Access Control em Google Chrome

Insufficient policy enforcement in Workers in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11196 Média · 6.5 CWE-843 04/06/2026

Type Confusion em Google Chrome

Type Confusion in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted XML file. (Chromium security severity: Medium)

CVE-2026-11195 Média · 6.5 CWE-346 04/06/2026

Inappropriate implementation in MHTML in Google Chrome prior to 149.0.7827.53 allowed a…

Inappropriate implementation in MHTML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11194 Média · 6.5 CWE-346 04/06/2026

Inappropriate implementation in Network in Google Chrome prior to 149.0.7827.53 allowed…

Inappropriate implementation in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11193 Média · 6.5 CWE-284 04/06/2026

Improper Access Control em Google Chrome

Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11192 Média · 4.3 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Medium)

CVE-2026-11191 Alta · 8.8 CWE-125 04/06/2026

Out-of-bounds Read em Google Chrome

Out of bounds memory access in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11190 Média · 6.5 CWE-284 04/06/2026

Improper Access Control em Google Chrome

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted Chrome Extension. (Chromium security severity: Medium)

CVE-2026-11189 Média · 6.5 CWE-20 04/06/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)

CVE-2026-11188 Alta · 8.8 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in USB in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11187 Média · 6.3 CWE-284 04/06/2026

Improper Access Control em Google Chrome

Inappropriate implementation in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11186 Média · 6.1 CWE-79 04/06/2026

Cross-site Scripting (XSS) em Google Chrome

Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11185 Alta · 8.1 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: Medium)

CVE-2026-11184 Média · 6.3 CWE-602 04/06/2026

Insufficient policy enforcement in Actor in Google Chrome prior to 149.0.7827.53 allowed…

Insufficient policy enforcement in Actor in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11183 Média · 6.5 CWE-125 04/06/2026

Out-of-bounds Read em Google Chrome

Out of bounds read in GWP-ASan in Google Chrome prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. (Chromium security severity: Medium)

CVE-2026-11182 Média · 6.5 CWE-200 04/06/2026

Exposure of Sensitive Information em Google Chrome

Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11181 Média · 6.3 CWE-346 04/06/2026

Inappropriate implementation in Media Session in Google Chrome prior to 149.0.7827.53…

Inappropriate implementation in Media Session in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11180 Média · 6.5 CWE-200 04/06/2026

Exposure of Sensitive Information em Google Chrome

Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11179 Alta · 8.8 CWE-284 04/06/2026

Improper Access Control em Google Chrome

Inappropriate implementation in ORB in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11178 Média · 4.3 CWE-346 04/06/2026

Insufficient policy enforcement in WebView in Google Chrome on Android prior to…

Insufficient policy enforcement in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11177 Alta · 8.8 CWE-416 04/06/2026

Use After Free em Google Chrome

Use after free in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11176 Média · 6.5 CWE-346 04/06/2026

Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a…

Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11175 Alta · 8.8 CWE-451 04/06/2026

Incorrect security UI in Messages in Google Chrome on Android prior to 149.0.7827.53…

Incorrect security UI in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)