Vulnerabilidades de Google

CVE-2026-19165 Alta · 7.5 CWE-416 06/08/2026

Use After Free em Google Chrome

Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: High)

CVE-2026-19164 Crítica · 9.6 CWE-20 06/08/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19163 Alta · 8.3 CWE-416 06/08/2026

Use After Free em Google Chrome

Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19162 Alta · 8.8 CWE-787 06/08/2026

Out-of-bounds Write em Google Chrome

Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19161 Baixa · 3.1 CWE-457 06/08/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19160 Baixa · 3.1 CWE-457 06/08/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19159 Alta · 7.5 CWE-416 06/08/2026

Use After Free em Google Chrome

Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19158 Alta · 7.5 CWE-416 06/08/2026

Use After Free em Google Chrome

Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19157 Crítica · 9.6 CWE-787 06/08/2026

Out-of-bounds Write em Google Chrome

Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-19156 Alta · 7.5 CWE-122 06/08/2026

Heap-based Buffer Overflow em Google Chrome

Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)

CVE-2026-19155 Alta · 8.3 CWE-416 06/08/2026

Use After Free em Google Chrome

Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19154 Alta · 8.3 CWE-416 06/08/2026

Use After Free em Google Chrome

Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-19153 Alta · 8.1 CWE-20 06/08/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19152 Alta · 8.3 CWE-693 06/08/2026

Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109…

Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19151 Alta · 8.8 CWE-416 06/08/2026

Use After Free em Google Chrome

Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19150 Alta · 8.8 CWE-693 06/08/2026

Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a…

Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19149 Crítica · 9.6 CWE-416 06/08/2026

Use After Free em Google Chrome

Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-19148 Alta · 8.3 CWE-787 06/08/2026

Out-of-bounds Write em Google Chrome

Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19147 Alta · 8.3 CWE-416 06/08/2026

Use After Free em Google Chrome

Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19146 Média · 5.3 CWE-457 06/08/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19145 Alta · 8.8 CWE-416 06/08/2026

Use After Free em Google Chrome

Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19144 Alta · 8.8 CWE-416 06/08/2026

Use After Free em Google Chrome

Use after free in HTML in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19143 Alta · 8.6 CWE-20 06/08/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a local attacker to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

CVE-2026-19142 Alta · 7.5 CWE-416 06/08/2026

Use After Free em Google Chrome

Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19141 Alta · 8.3 CWE-416 06/08/2026

Use After Free em Google Chrome

Use after free in Resources in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)