Vulnerabilidades de Google

CVE-2026-18006 Média · 4.3 CWE-451 29/07/2026

Inappropriate implementation in Google Lens in Google Chrome prior to 151.0.7922.72…

Inappropriate implementation in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-18005 Média · 6.5 CWE-200 29/07/2026

Exposure of Sensitive Information em Google Chrome

Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-18004 Média · 4.3 CWE-284 29/07/2026

Improper Access Control em Google Chrome

Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-18003 Média · 4.3 CWE-451 29/07/2026

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-18002 Crítica · 9.6 CWE-20 29/07/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-18001 Média · 6.5 CWE-200 29/07/2026

Exposure of Sensitive Information em Google Chrome

Inappropriate implementation in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-18000 Baixa · 3.1 CWE-346 29/07/2026

Insufficient policy enforcement in USB in Google Chrome on Android prior to…

Insufficient policy enforcement in USB in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17999 Média · 6.5 CWE-362 29/07/2026

Race Condition em Google Chrome

Race in PictureInPicture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17998 Média · 4.3 CWE-451 29/07/2026

Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an…

Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Low)

CVE-2026-17997 Baixa · 3.1 CWE-346 29/07/2026

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72…

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17996 Média · 6.2 CWE-284 29/07/2026

Improper Access Control em Google Chrome

Inappropriate implementation in Browser in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a malicious file. (Chromium security severity: Low)

CVE-2026-17995 Alta · 8.1 CWE-125 29/07/2026

Out-of-bounds Read em Google Chrome

Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17994 Média · 4.3 CWE-284 29/07/2026

Improper Access Control em Google Chrome

Inappropriate implementation in Media in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17993 Alta · 7.0 CWE-362 29/07/2026

Race Condition em Google Chrome

Race in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Low)

CVE-2026-17992 Média · 6.5 CWE-457 29/07/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in Skia in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17991 Crítica · 9.6 CWE-20 29/07/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17990 Crítica · 9.6 CWE-20 29/07/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. (Chromium security severity: Low)

CVE-2026-17989 Alta · 8.8 CWE-843 29/07/2026

Type Confusion em Google Chrome

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17988 Média · 6.5 CWE-20 29/07/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17987 Crítica · 9.6 CWE-20 29/07/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. (Chromium security severity: Low)

CVE-2026-17986 Média · 6.5 CWE-284 29/07/2026

Improper Access Control em Google Chrome

Insufficient policy enforcement in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17985 Média · 6.5 CWE-602 29/07/2026

Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72…

Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17984 Baixa · 3.3 CWE-346 29/07/2026

Inappropriate implementation in Browser in Google Chrome on Android prior to…

Inappropriate implementation in Browser in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17983 Média · 4.3 CWE-451 29/07/2026

Inappropriate implementation in Global Media Controls in Google Chrome prior to…

Inappropriate implementation in Global Media Controls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17982 Média · 4.3 CWE-20 29/07/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)