Vulnerabilidades de Google

CVE-2026-78903 Baixa · 3.1 CWE-459 25/08/2026

Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a…

Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78901 Alta · 7.5 CWE-362 25/08/2026

Race Condition em Google Chrome

Race condition in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78900 Crítica · 9.6 CWE-20 25/08/2026

Improper Input Validation em Google Chrome

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-78899 Alta · 8.8 CWE-416 25/08/2026

Use After Free em Google Chrome

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-78898 Média · 5.4 CWE-863 25/08/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78897 Média · 6.5 CWE-862 25/08/2026

Missing Authorization em Google Chrome

Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Low)

CVE-2026-78896 Média · 4.3 CWE-200 25/08/2026

Exposure of Sensitive Information em Google Chrome

Information leak in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-78895 Média · 4.3 CWE-200 25/08/2026

Exposure of Sensitive Information em Google Chrome

Information leak in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

CVE-2026-78894 Baixa · 3.1 CWE-367 25/08/2026

TOCTOU Race Condition em Google Chrome

Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78893 Média · 6.5 CWE-200 25/08/2026

Exposure of Sensitive Information em Google Chrome

Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-78892 Alta · 7.1 CWE-863 25/08/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a local attacker to bypass system access restrictions via a local program. (Chromium security severity: Medium)

CVE-2026-78891 Alta · 8.8 CWE-122 25/08/2026

Heap-based Buffer Overflow em Google Chrome

Buffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2025-36940 Alta · 8.8 CWE-416 24/08/2026

Use After Free em Google Android

Use-After-Free vulnerability in a zircon kernel pager proxy (Fuchsia), which could lead to a Privilege Escalation from Userspace to Kernel (AP)

CVE-2025-36939 Média · 5.7 CWE-121 24/08/2026

Stack-based Buffer Overflow em Google Nest Wifi Router Firmware

Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow.

CVE-2026-76023 Alta · 8.8 CWE-913 20/08/2026

Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173...

Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-76022 Alta · 8.8 CWE-122 20/08/2026

Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to...

Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-76021 Alta · 8.8 CWE-416 20/08/2026

Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to...

Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-76020 Alta · 7.5 CWE-367 20/08/2026

Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to...

Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-76019 Alta · 8.1 CWE-863 20/08/2026

Incorrect Authorization em Google Chrome

Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

CVE-2026-76018 Alta · 8.8 CWE-250 20/08/2026

Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker...

Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. (Chromium security severity: High)

CVE-2026-76017 Alta · 8.8 CWE-416 20/08/2026

Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker...

Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)

CVE-2026-76047 Alta · 8.8 CWE-843 18/08/2026

Type Confusion em Google Chrome

Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-76046 Alta · 8.3 CWE-122 18/08/2026

Heap-based Buffer Overflow em Google Chrome

Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-76045 Alta · 8.8 CWE-416 18/08/2026

Use After Free em Google Chrome

Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-76044 Alta · 8.3 CWE-367 18/08/2026

TOCTOU Race Condition em Google Chrome

Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)