Vulnerabilidades de Google

CVE-2026-17956 Alta · 8.8 CWE-269 29/07/2026

Improper Privilege Management em Google Chrome

Inappropriate implementation in Scheduling in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17955 Média · 4.3 CWE-20 29/07/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17954 Média · 4.3 CWE-346 29/07/2026

Policy bypass in MHTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker…

Policy bypass in MHTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted MHTML page. (Chromium security severity: Low)

CVE-2026-17953 Média · 6.5 CWE-602 29/07/2026

Insufficient policy enforcement in WebView in Google Chrome on Android prior to…

Insufficient policy enforcement in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17952 Alta · 7.5 CWE-269 29/07/2026

Improper Privilege Management em Google Chrome

Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: Low)

CVE-2026-17951 Alta · 8.8 CWE-122 29/07/2026

Heap-based Buffer Overflow em Google Chrome

Heap buffer overflow in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17950 Alta · 8.8 CWE-269 29/07/2026

Improper Privilege Management em Google Chrome

Inappropriate implementation in Safebrowsing in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code via a malicious file. (Chromium security severity: Low)

CVE-2026-17949 Média · 4.3 CWE-457 29/07/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17948 Alta · 7.5 CWE-843 29/07/2026

Type Confusion em Google Chrome

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: Low)

CVE-2026-17947 Crítica · 9.6 CWE-416 29/07/2026

Use After Free em Google Chrome

Use after free in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17946 Média · 6.5 CWE-457 29/07/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17945 Média · 4.3 CWE-451 29/07/2026

Insufficient validation of untrusted input in Navigation in Google Chrome prior to…

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17944 Média · 4.3 CWE-284 29/07/2026

Improper Access Control em Google Chrome

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17943 Média · 4.3 CWE-693 29/07/2026

Inappropriate implementation in Parser in Google Chrome prior to 151.0.7922.72 allowed a…

Inappropriate implementation in Parser in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17942 Média · 4.3 CWE-1300 29/07/2026

Side-channel information leakage in SVG in Google Chrome prior to 151.0.7922.72 allowed…

Side-channel information leakage in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17941 Média · 4.3 CWE-451 29/07/2026

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17940 Crítica · 9.6 CWE-20 29/07/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17939 Média · 4.3 CWE-20 29/07/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)

CVE-2026-17938 Média · 4.3 CWE-451 29/07/2026

Inappropriate implementation in FullScreen in Google Chrome on Android prior to…

Inappropriate implementation in FullScreen in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17937 Média · 4.3 CWE-20 29/07/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17936 Média · 6.5 CWE-352 29/07/2026

Cross-Site Request Forgery (CSRF) em Google Chrome

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17935 Alta · 8.8 CWE-122 29/07/2026

Heap-based Buffer Overflow em Google Chrome

Heap buffer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17934 Média · 4.3 CWE-20 29/07/2026

Improper Input Validation em Google Chrome

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17933 Média · 4.3 CWE-346 29/07/2026

Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72…

Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-17932 Média · 5.5 CWE-416 29/07/2026

Use After Free em Google Chrome

Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)