Vulnerabilidades de Google

CVE-2026-5862 Alta · 8.8 08/04/2026

Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a…

Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5861 Alta · 8.8 CWE-416 08/04/2026

Use After Free em Google Chrome

Use after free in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5860 Alta · 8.8 CWE-416 08/04/2026

Use After Free em Google Chrome

Use after free in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5859 Alta · 8.8 CWE-472 08/04/2026

Integer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote…

Integer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-5858 Alta · 8.8 CWE-122 08/04/2026

Heap-based Buffer Overflow em Google Chrome

Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-0049 Média · 6.2 CWE-400 06/04/2026

Uncontrolled Resource Consumption em Google Android

In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-48651 Média · 5.5 CWE-20 06/04/2026

Improper Input Validation em Google Android

In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2026-5292 Alta · 8.8 CWE-125 01/04/2026

Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote...

Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5291 Média · 6.5 CWE-200 01/04/2026

Inappropriate implementation in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote...

Inappropriate implementation in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5290 Crítica · 9.6 CWE-416 01/04/2026

Use-After-Free em Compositing no Google Chrome Permite Fuga do Sandbox

Use after free em Compositing no Google Chrome anterior à 146.0.7680.178 permitiu que um atacante remoto que já tivesse comprometido o processo renderer realizasse potencialmente uma fuga do sandbox por meio de uma página HTML criada para esse fim. (Gravidade de segurança do Chromium: High)

CVE-2026-5289 Crítica · 9.6 CWE-416 01/04/2026

Use-After-Free no componente Navigation do Google Chrome com possível fuga de sandbox

Use after free em Navigation no Google Chrome anterior à 146.0.7680.178 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse uma fuga da sandbox por meio de uma página HTML criada para isso. (Gravidade de segurança do Chromium: Alta)

CVE-2026-5288 Crítica · 9.6 CWE-416 01/04/2026

Use-after-free no WebView do Google Chrome para Android (CVE-2026-5288)

Use after free no WebView do Google Chrome no Android anterior à versão 146.0.7680.178 permitiu que um atacante remoto que tivesse comprometido o processo renderer potencialmente realizasse um escape do sandbox por meio de uma página HTML criada para esse fim. (Gravidade de segurança do Chromium: Alta)

CVE-2026-5287 Alta · 8.8 CWE-416 01/04/2026

Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to...

Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)

CVE-2026-5286 Alta · 8.8 CWE-416 01/04/2026

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to...

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5285 Alta · 8.8 CWE-416 01/04/2026

Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to...

Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5284 Alta · 7.5 CWE-416 01/04/2026

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had...

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5283 Média · 6.5 CWE-285 01/04/2026

Inappropriate implementation in ANGLE in Google Chrome prior to 146.0.7680.178 allowed a remote...

Inappropriate implementation in ANGLE in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5282 Alta · 8.1 CWE-125 01/04/2026

Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote...

Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5280 Alta · 8.8 CWE-416 01/04/2026

Use After Free em Google Chrome

Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5279 Alta · 8.8 CWE-120 01/04/2026

Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to...

Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5278 Alta · 8.8 CWE-416 01/04/2026

Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote...

Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5281 Alta · 8.8 KEV Alta · 61 Exploit público CWE-416 01/04/2026

Google Dawn Use-After-Free Vulnerability

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5277 Alta · 7.5 CWE-472 01/04/2026

Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 allowed a remote...

Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5276 Média · 6.5 CWE-693 01/04/2026

Insufficient policy enforcement in WebUSB in Google Chrome prior to 146.0.7680.178 allowed a...

Insufficient policy enforcement in WebUSB in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-5275 Alta · 8.8 CWE-122 01/04/2026

Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a remote...

Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)