Vulnerabilidades de Google

CVE-2026-84324 Crítica · 9.0 CWE-416 01/09/2026

Use After Free em Google Chrome

Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: High)

CVE-2026-84323 Média · 5.3 CWE-862 01/09/2026

Missing Authorization em Google Chrome

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-82072 Alta · 8.8 CWE-125 27/08/2026

Out-of-bounds Read em Google Chrome

Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-75062 Crítica · 9.2 CWE-95 26/08/2026

Eval Injection in google/langfun via default lf.query protocol

Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in the default lf.query Python protocol in Google langfun versions prior to 0.1.2 allows remote unauthenticated attackers to execute arbitrary Python code in the context of the host application via crafted prompt inputs that cause the model to generate executable Python expressions evaluated without a sandbox.

CVE-2026-79293 Média · 6.5 CWE-200 25/08/2026

Exposure of Sensitive Information em Google Chrome

Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79292 Alta · 8.3 CWE-190 25/08/2026

Integer Overflow or Wraparound em Google Chrome

Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79291 Média · 6.5 CWE-200 25/08/2026

Exposure of Sensitive Information em Google Chrome

Information leak in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79290 Crítica · 9.6 CWE-416 25/08/2026

Use After Free em Google Chrome

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-79289 Baixa · 3.1 CWE-664 25/08/2026

Improper control of a resource through its lifetime in Workers in Google Chrome prior to…

Improper control of a resource through its lifetime in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79288 Média · 6.5 CWE-20 25/08/2026

Improper Input Validation em Google Chrome

Improper input validation in Autofill in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79287 Média · 5.3 CWE-203 25/08/2026

Observable Discrepancy em Google Chrome

Observable discrepancy in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79286 Alta · 7.4 CWE-862 25/08/2026

Missing Authorization em Google Chrome

Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a co-installed app. (Chromium security severity: Medium)

CVE-2026-79285 Média · 6.5 CWE-908 25/08/2026

Use of Uninitialized Resource em Google Chrome

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79284 Média · 4.3 CWE-451 25/08/2026

UI misrepresentation in Core in Google Chrome on on Mac prior to 152.0.7977.65 allowed a…

UI misrepresentation in Core in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79283 Média · 5.4 CWE-451 25/08/2026

UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a…

UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79282 Crítica · 9.6 CWE-416 25/08/2026

Use After Free em Google Chrome

Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-79276 Média · 4.3 CWE-269 25/08/2026

Improper Privilege Management em Google Chrome

Improper privilege management in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79275 Crítica · 9.6 CWE-416 25/08/2026

Use After Free em Google Chrome

Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79274 Média · 4.3 CWE-200 25/08/2026

Exposure of Sensitive Information em Google Chrome

Information leak in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79273 Média · 4.3 CWE-706 25/08/2026

Use of Incorrectly-Resolved Name or Reference em Google Chrome

Incorrect reference resolution in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79272 Baixa · 3.1 CWE-20 25/08/2026

Improper Input Validation em Google Chrome

Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79271 Média · 6.5 CWE-200 25/08/2026

Exposure of Sensitive Information em Google Chrome

Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79270 Média · 6.5 CWE-908 25/08/2026

Use of Uninitialized Resource em Google Chrome

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79269 Média · 4.3 CWE-908 25/08/2026

Use of Uninitialized Resource em Google Chrome

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79267 Média · 4.3 CWE-367 25/08/2026

TOCTOU Race Condition em Google Chrome

Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)