CVE Intelligence

Vulnerabilidades de Google

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Google: 4517 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-6316 Alta · 8.8 CWE-416 15/04/2026
Use after free in Forms in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...
Use after free in Forms in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6315 Alta · 8.8 CWE-416 15/04/2026
Use after free in Permissions in Google Chrome on Android prior to 147.0.7727.101 allowed a...
Use after free in Permissions in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6314 Alta · 8.3 CWE-787 15/04/2026
Out of bounds write in GPU in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who...
Out of bounds write in GPU in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the GPU process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6313 Baixa · 3.1 CWE-284 15/04/2026
Insufficient policy enforcement in CORS in Google Chrome prior to 147.0.7727.101 allowed a remote...
Insufficient policy enforcement in CORS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6312 Baixa · 3.1 CWE-284 15/04/2026
Insufficient policy enforcement in Passwords in Google Chrome prior to 147.0.7727.101 allowed a...
Insufficient policy enforcement in Passwords in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6311 Alta · 8.3 CWE-457 15/04/2026
Uninitialized Use in Accessibility in Google Chrome on Windows prior to 147.0.7727.101 allowed a...
Uninitialized Use in Accessibility in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6310 Alta · 8.3 CWE-416 15/04/2026
Use after free in Dawn in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had...
Use after free in Dawn in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6309 Alta · 8.3 CWE-416 15/04/2026
Use after free in Viz in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had...
Use after free in Viz in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6308 Alta · 7.5 CWE-125 15/04/2026
Out of bounds read in Media in Google Chrome prior to 147.0.7727.101 allowed a remote attacker...
Out of bounds read in Media in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6307 Alta · 8.8 CWE-843 15/04/2026
Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...
Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6306 Alta · 8.8 CWE-122 15/04/2026
Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker...
Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)
CVE-2026-6305 Alta · 8.8 CWE-122 15/04/2026
Heap-based Buffer Overflow em Google Chrome
Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)
CVE-2026-6304 Alta · 8.3 CWE-416 15/04/2026
Use after free in Graphite in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who...
Use after free in Graphite in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6303 Alta · 8.8 CWE-416 15/04/2026
Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...
Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6302 Alta · 8.8 CWE-416 15/04/2026
Use after free in Video in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...
Use after free in Video in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6301 Alta · 8.8 CWE-843 15/04/2026
Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...
Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6300 Alta · 8.8 CWE-416 15/04/2026
Use after free in CSS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...
Use after free in CSS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-6299 Alta · 8.8 CWE-416 15/04/2026
Use after free in Prerender in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...
Use after free in Prerender in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-6298 Média · 4.3 CWE-122 15/04/2026
Heap-based Buffer Overflow em Google Chrome
Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-6297 Alta · 8.3 CWE-416 15/04/2026
Use after free in Proxy in Google Chrome prior to 147.0.7727.101 allowed an attacker in a...
Use after free in Proxy in Google Chrome prior to 147.0.7727.101 allowed an attacker in a privileged network position to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-6296 Crítica · 9.6 CWE-122 15/04/2026
Estouro de buffer no heap no ANGLE do Google Chrome (CVE-2026-6296)
Estouro de buffer no heap no ANGLE do Google Chrome anterior à versão 147.0.7727.101 permitia que um atacante remoto potencialmente realizasse uma fuga do sandbox por meio de uma página HTML criada. (Gravidade de segurança do Chromium: Crítica)
CVE-2026-5919 Média · 6.5 CWE-20 08/04/2026
Improper Input Validation em Google Chrome
Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-5918 Média · 4.3 CWE-346 08/04/2026
Inappropriate implementation in Navigation in Google Chrome prior to 147.0.7727.55…
Inappropriate implementation in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-5915 Alta · 8.1 CWE-20 08/04/2026
Improper Input Validation em Google Chrome
Insufficient validation of untrusted input in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-5914 Alta · 8.8 CWE-843 08/04/2026
Type Confusion em Google Chrome
Type Confusion in CSS in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Low)