Vulnerabilidades de Google

CVE-2026-5913 Alta · 8.1 CWE-125 08/04/2026

Out-of-bounds Read em Google Chrome

Out of bounds read in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5912 Alta · 8.8 CWE-472 08/04/2026

Integer overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote…

Integer overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5911 Média · 4.3 CWE-693 08/04/2026

Policy bypass in ServiceWorkers in Google Chrome prior to 147.0.7727.55 allowed a remote…

Policy bypass in ServiceWorkers in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5910 Alta · 8.8 CWE-472 08/04/2026

Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote…

Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security severity: Low)

CVE-2026-5909 Alta · 8.8 CWE-472 08/04/2026

Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote…

Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security severity: Low)

CVE-2026-5908 Alta · 8.8 CWE-472 08/04/2026

Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote…

Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. (Chromium security severity: Low)

CVE-2026-5907 Alta · 8.1 CWE-125 08/04/2026

Out-of-bounds Read em Google Chrome

Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. (Chromium security severity: Low)

CVE-2026-5906 Média · 4.3 CWE-451 08/04/2026

Incorrect security UI in Omnibox in Google Chrome on Android prior to 147.0.7727.55…

Incorrect security UI in Omnibox in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5905 Média · 6.5 CWE-451 08/04/2026

Incorrect security UI in Permissions in Google Chrome on Windows prior to 147.0.7727.55…

Incorrect security UI in Permissions in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5903 Média · 6.5 CWE-693 08/04/2026

Policy bypass in IFrameSandbox in Google Chrome prior to 147.0.7727.55 allowed a remote…

Policy bypass in IFrameSandbox in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5902 Crítica · 9.8 CWE-362 08/04/2026

Condição de corrida no Google Chrome para Android em metadados de fluxo de mídia

Condição de corrida (race) em Media no Google Chrome para Android anterior a 147.0.7727.55 permitiu que um atacante remoto que tivesse comprometido o processo renderizador corrompesse metadados de fluxo de mídia por meio de uma página HTML elaborada. (Severidade de segurança do Chromium: Baixa)

CVE-2026-5901 Média · 6.5 CWE-602 08/04/2026

Insufficient policy enforcement in DevTools in Google Chrome prior to 147.0.7727.55…

Insufficient policy enforcement in DevTools in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a user to install a malicious extension to bypass enterprise host restrictions for cookie modification via a crafted Chrome Extension. (Chromium security severity: Low)

CVE-2026-5900 Média · 4.3 CWE-693 08/04/2026

Policy bypass in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote…

Policy bypass in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass of multi-download protections via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5899 Média · 6.1 CWE-346 08/04/2026

Insufficient policy enforcement in History Navigation in Google Chrome prior to…

Insufficient policy enforcement in History Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5898 Média · 4.3 CWE-451 08/04/2026

Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed…

Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5897 Média · 4.3 CWE-451 08/04/2026

Incorrect security UI in Downloads in Google Chrome prior to 147.0.7727.55 allowed a…

Incorrect security UI in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5896 Média · 6.1 CWE-693 08/04/2026

Policy bypass in Audio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker…

Policy bypass in Audio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass sandbox download restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5895 Média · 5.4 CWE-451 08/04/2026

Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed…

Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name. (Chromium security severity: Low)

CVE-2026-5894 Média · 4.3 CWE-358 08/04/2026

Inappropriate implementation in PDF in Google Chrome prior to 147.0.7727.55 allowed a…

Inappropriate implementation in PDF in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5893 Média · 6.8 CWE-362 08/04/2026

Race Condition em Google Chrome

Race in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5892 Média · 6.6 CWE-1268 08/04/2026

Insufficient policy enforcement in PWAs in Google Chrome prior to 147.0.7727.55 allowed…

Insufficient policy enforcement in PWAs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to install a PWA without user consent via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5891 Média · 4.3 CWE-451 08/04/2026

Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55…

Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5890 Média · 5.3 CWE-362 08/04/2026

Race Condition em Google Chrome

Race in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5889 Média · 4.3 CWE-326 08/04/2026

Inadequate Encryption Strength em Google Chrome

Cryptographic Flaw in PDFium in Google Chrome prior to 147.0.7727.55 allowed an attacker to read potentially sensitive information from encrypted PDFs via a brute-force attack. (Chromium security severity: Medium)

CVE-2026-5888 Média · 6.5 CWE-457 08/04/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)