Vulnerabilidades de Google

CVE-2026-79150 Crítica · 9.6 CWE-416 25/08/2026

Use After Free em Google Chrome

Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-79149 Crítica · 9.6 CWE-416 25/08/2026

Use After Free em Google Chrome

Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79148 Crítica · 9.1 CWE-193 25/08/2026

Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote…

Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read memory inside the sandbox via a crafted Chrome extension. (Chromium security severity: Low)

CVE-2026-79147 Média · 5.3 CWE-200 25/08/2026

Exposure of Sensitive Information em Google Chrome

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79146 Média · 5.5 CWE-200 25/08/2026

Exposure of Sensitive Information em Google Chrome

Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium security severity: Medium)

CVE-2026-79144 Média · 4.3 CWE-200 25/08/2026

Exposure of Sensitive Information em Google Chrome

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79143 Média · 4.3 CWE-863 25/08/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79142 Alta · 8.8 CWE-122 25/08/2026

Heap-based Buffer Overflow em Google Chrome

Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79141 Média · 4.3 CWE-863 25/08/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79140 Crítica · 9.6 CWE-416 25/08/2026

Use After Free em Google Chrome

Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79139 Alta · 7.5 CWE-20 25/08/2026

Improper Input Validation em Google Chrome

Improper input validation in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79138 Crítica · 9.6 CWE-787 25/08/2026

Out-of-bounds Write em Google Chrome

Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79137 Média · 4.3 CWE-863 25/08/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)

CVE-2026-79136 Média · 4.3 CWE-863 25/08/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79134 Média · 6.5 CWE-863 25/08/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79133 Média · 6.5 CWE-863 25/08/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79132 Alta · 8.3 CWE-20 25/08/2026

Improper Input Validation em Google Chrome

Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79131 Crítica · 9.6 CWE-787 25/08/2026

Out-of-bounds Write em Google Chrome

Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79130 Crítica · 9.6 CWE-122 25/08/2026

Heap-based Buffer Overflow em Google Chrome

Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79129 Crítica · 9.6 CWE-416 25/08/2026

Use After Free em Google Chrome

Use after free in Sessions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: Medium)

CVE-2026-79128 Crítica · 9.6 CWE-416 25/08/2026

Use After Free em Google Chrome

Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79127 Alta · 8.8 CWE-787 25/08/2026

Out-of-bounds Write em Google Chrome

Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79126 Média · 5.9 CWE-684 25/08/2026

Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows…

Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially obtain sensitive information via crafted network traffic. (Chromium security severity: Low)

CVE-2026-79125 Média · 6.5 CWE-200 25/08/2026

Exposure of Sensitive Information em Google Chrome

Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79124 Média · 6.5 CWE-200 25/08/2026

Exposure of Sensitive Information em Google Chrome

Information leak in Intents in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)