CVE Intelligence

Vulnerabilidades de Google

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Google: 4079 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-79269 Média · 4.3 CWE-908 25/08/2026
Use of Uninitialized Resource em Google Chrome
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79267 Média · 4.3 CWE-367 25/08/2026
TOCTOU Race Condition em Google Chrome
Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79266 Alta · 8.8 CWE-416 25/08/2026
Use After Free em Google Chrome
Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-79265 Média · 5.3 CWE-459 25/08/2026
Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a…
Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79264 Média · 4.3 CWE-706 25/08/2026
Use of Incorrectly-Resolved Name or Reference em Google Chrome
Incorrect reference resolution in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79263 Alta · 8.1 CWE-367 25/08/2026
TOCTOU Race Condition em Google Chrome
Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. (Chromium security severity: Low)
CVE-2026-79262 Média · 4.3 CWE-863 25/08/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79261 Média · 4.3 CWE-863 25/08/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Controls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79260 Média · 6.5 CWE-20 25/08/2026
Improper Input Validation em Google Chrome
Improper input validation in Cookies in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79259 Média · 4.3 CWE-20 25/08/2026
Improper Input Validation em Google Chrome
Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chromium security severity: Medium)
CVE-2026-79258 Média · 6.5 CWE-863 25/08/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79257 Crítica · 9.6 CWE-416 25/08/2026
Use After Free em Google Chrome
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-79256 Alta · 8.3 CWE-610 25/08/2026
Externally controlled reference in WebView in Google Chrome on on Android prior to…
Externally controlled reference in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79255 Baixa · 3.1 CWE-20 25/08/2026
Improper Input Validation em Google Chrome
Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79254 Média · 4.3 CWE-706 25/08/2026
Use of Incorrectly-Resolved Name or Reference em Google Chrome
Incorrect reference resolution in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79253 Média · 6.5 CWE-20 25/08/2026
Improper Input Validation em Google Chrome
Improper input validation in Network in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79252 Média · 4.3 CWE-200 25/08/2026
Exposure of Sensitive Information em Google Chrome
Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79251 Média · 4.3 CWE-20 25/08/2026
Improper Input Validation em Google Chrome
Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79250 Média · 5.4 CWE-451 25/08/2026
UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a…
UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79249 Média · 6.5 CWE-94 25/08/2026
Code Injection em Google Chrome
Code injection in Bisection in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted file. (Chromium security severity: Medium)
CVE-2026-79248 Média · 4.3 CWE-863 25/08/2026
Incorrect Authorization em Google Chrome
Incorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79247 Alta · 8.3 CWE-416 25/08/2026
Use After Free em Google Chrome
Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: High)
CVE-2026-79246 Média · 6.5 CWE-200 25/08/2026
Exposure of Sensitive Information em Google Chrome
Information leak in DataTransfer in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79245 Alta · 7.7 CWE-416 25/08/2026
Use After Free em Google Chrome
Use after free in UI in Google Chrome prior to 152.0.7977.65 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)
CVE-2026-79244 Alta · 8.8 CWE-416 25/08/2026
Use After Free em Google Chrome
Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)