Vulnerabilidades de Google

CVE-2026-9902 Alta · 8.3 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in Accessibility in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-9901 Alta · 7.5 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-9900 Alta · 8.3 CWE-787 28/05/2026

Out-of-bounds Write em Google Chrome

Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-9899 Alta · 8.3 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-9898 Alta · 8.3 CWE-20 28/05/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-9897 Alta · 8.8 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in DOM in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-9896 Alta · 8.8 CWE-787 28/05/2026

Out-of-bounds Write em Google Chrome

Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-9895 Alta · 8.3 CWE-125 28/05/2026

Out-of-bounds Read em Google Chrome

Out of bounds read in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-9894 Alta · 8.3 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-9893 Alta · 8.3 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9892 Alta · 8.3 CWE-269 28/05/2026

Improper Privilege Management em Google Chrome

Inappropriate implementation in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9891 Crítica · 9.0 CWE-416 28/05/2026

Google Chrome: use-after-free em Extensões pode permitir fuga de sandbox (CVE-2026-9891)

Use after free em Extensions no Google Chrome anterior à 148.0.7778.216 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse uma fuga de sandbox por meio de uma extensão do Chrome especialmente elaborada. (Gravidade de segurança do Chromium: Crítica)

CVE-2026-9890 Alta · 8.3 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in XR in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9889 Alta · 8.3 CWE-125 28/05/2026

Out-of-bounds Read em Google Chrome

Out of bounds read and write in Dawn in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9888 Alta · 8.3 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in WebView in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9887 Alta · 8.8 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in Proxy in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted PAC script. (Chromium security severity: Critical)

CVE-2026-9886 Crítica · 9.6 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in Base in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9885 Alta · 8.3 CWE-20 28/05/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in UI in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9884 Alta · 8.8 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in Browser in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9883 Alta · 8.8 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in Base in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9882 Média · 6.5 CWE-190 28/05/2026

Integer Overflow or Wraparound em Google Chrome

Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9881 Crítica · 9.0 CWE-416 28/05/2026

Uso de Memória Após Liberação no Bluetooth do Google Chrome com Possível Escape de Sandbox

Uso após liberação (use after free) no Bluetooth do Google Chrome no Mac anterior à versão 148.0.7778.216 permitiu que um invasor que convencesse um usuário a instalar uma extensão maliciosa potencialmente realizasse um escape do sandbox por meio de uma extensão do Chrome especialmente elaborada. (Gravidade de segurança do Chromium: Crítica)

CVE-2026-9880 Alta · 8.3 CWE-20 28/05/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in WebGL in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9879 Alta · 8.8 CWE-787 28/05/2026

Out-of-bounds Write em Google Chrome

Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-9878 Alta · 8.8 CWE-416 28/05/2026

Use After Free em Google Chrome

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)