Vulnerabilidades de Google

CVE-2026-79123 Média · 6.5 CWE-20 25/08/2026

Improper Input Validation em Google Chrome

Improper input validation in NTP Footer in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79122 Média · 5.9 CWE-200 25/08/2026

Exposure of Sensitive Information em Google Chrome

Information leak in SignIn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: Medium)

CVE-2026-79121 Alta · 8.3 CWE-20 25/08/2026

Improper Input Validation em Google Chrome

Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-79120 Média · 6.5 CWE-908 25/08/2026

Use of Uninitialized Resource em Google Chrome

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79119 Alta · 8.8 CWE-416 25/08/2026

Use After Free em Google Chrome

Use after free in PDF in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: Low)

CVE-2026-79118 Média · 4.3 CWE-908 25/08/2026

Use of Uninitialized Resource em Google Chrome

Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79117 Média · 4.3 CWE-362 25/08/2026

Race Condition em Google Chrome

Race condition in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a co-installed app. (Chromium security severity: High)

CVE-2026-79116 Média · 4.3 CWE-862 25/08/2026

Missing Authorization em Google Chrome

Missing authorization in Viz in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79112 Média · 6.5 CWE-125 25/08/2026

Out-of-bounds Read em Google Chrome

Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79111 Crítica · 9.6 CWE-20 25/08/2026

Improper Input Validation em Google Chrome

Improper input validation in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79110 Média · 4.3 CWE-862 25/08/2026

Missing Authorization em Google Chrome

Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79109 Alta · 8.3 CWE-20 25/08/2026

Improper Input Validation em Google Chrome

Improper input validation in Printing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79108 Média · 6.5 CWE-451 25/08/2026

UI misrepresentation in Web Authentication (Passkeys & Security Keys) in Google Chrome…

UI misrepresentation in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79107 Média · 6.5 CWE-863 25/08/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in TabGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. (Chromium security severity: Medium)

CVE-2026-79106 Média · 4.3 CWE-20 25/08/2026

Improper Input Validation em Google Chrome

Improper input validation in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79105 Média · 4.3 CWE-20 25/08/2026

Improper Input Validation em Google Chrome

Improper input validation in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79104 Média · 5.3 CWE-862 25/08/2026

Missing Authorization em Google Chrome

Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79103 Baixa · 3.1 CWE-706 25/08/2026

Use of Incorrectly-Resolved Name or Reference em Google Chrome

Incorrect reference resolution in Speech in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79099 Média · 6.5 CWE-862 25/08/2026

Missing Authorization em Google Chrome

Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79098 Média · 4.3 CWE-451 25/08/2026

UI misrepresentation in PermissionElement in Google Chrome prior to 152.0.7977.65…

UI misrepresentation in PermissionElement in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-79097 Alta · 8.8 CWE-416 25/08/2026

Use After Free em Google Chrome

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79095 Média · 4.3 CWE-200 25/08/2026

Exposure of Sensitive Information em Google Chrome

Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79094 Média · 6.5 CWE-362 25/08/2026

Race Condition em Google Chrome

Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79093 Média · 4.3 CWE-863 25/08/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

CVE-2026-79091 Crítica · 9.6 CWE-416 25/08/2026

Use After Free em Google Chrome

Use after free in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)