Vulnerabilidades de Google

CVE-2026-5887 Média · 4.3 CWE-20 08/04/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to bypass download restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5886 Média · 5.3 CWE-125 08/04/2026

Out-of-bounds Read em Google Chrome

Out of bounds read in WebAudio in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5885 Média · 6.5 CWE-20 08/04/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in WebML in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5884 Alta · 8.8 CWE-20 08/04/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5883 Alta · 8.8 CWE-416 08/04/2026

Use After Free em Google Chrome

Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5882 Média · 4.3 CWE-451 08/04/2026

Incorrect security UI in Fullscreen in Google Chrome prior to 147.0.7727.55 allowed a…

Incorrect security UI in Fullscreen in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5881 Média · 6.5 CWE-284 08/04/2026

Improper Access Control em Google Chrome

Policy bypass in LocalNetworkAccess in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5880 Média · 4.3 CWE-451 08/04/2026

Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55…

Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5879 Alta · 8.8 CWE-20 08/04/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5878 Média · 4.3 CWE-451 08/04/2026

Incorrect security UI in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote…

Incorrect security UI in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5877 Alta · 8.8 CWE-416 08/04/2026

Use After Free em Google Chrome

Use after free in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5876 Média · 6.5 CWE-1300 08/04/2026

Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55…

Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5875 Média · 4.3 CWE-639 08/04/2026

Authorization Bypass Through User-Controlled Key (IDOR) em Google Chrome

Policy bypass in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5874 Crítica · 9.6 CWE-416 08/04/2026

Google Chrome: use-after-free no PrivateAI permite escape de sandbox

Use after free no PrivateAI do Google Chrome anterior à versão 147.0.7727.55 permitiu que um atacante remoto que convencesse um usuário a realizar gestos específicos de interface potencialmente executasse um escape de sandbox por meio de uma página HTML criada com esse fim. (Gravidade de segurança do Chromium: Média)

CVE-2026-5873 Alta · 8.8 CWE-125 08/04/2026

Out-of-bounds Read em Google Chrome

Out of bounds read and write in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5872 Alta · 8.8 CWE-416 08/04/2026

Use After Free em Google Chrome

Use after free in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5871 Alta · 8.8 CWE-843 08/04/2026

Type Confusion em Google Chrome

Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5870 Alta · 8.8 CWE-190 08/04/2026

Integer Overflow or Wraparound em Google Chrome

Integer overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5869 Média · 4.3 CWE-122 08/04/2026

Heap-based Buffer Overflow em Google Chrome

Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5868 Alta · 8.8 CWE-122 08/04/2026

Heap-based Buffer Overflow em Google Chrome

Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5867 Média · 4.3 CWE-122 08/04/2026

Heap-based Buffer Overflow em Google Chrome

Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5866 Alta · 8.8 CWE-416 08/04/2026

Use After Free em Google Chrome

Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5865 Alta · 8.8 CWE-843 08/04/2026

Type Confusion em Google Chrome

Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5864 Média · 4.3 CWE-122 08/04/2026

Heap-based Buffer Overflow em Google Chrome

Heap buffer overflow in WebAudio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5863 Alta · 8.8 CWE-284 08/04/2026

Improper Access Control em Google Chrome

Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)