Google Chrome vulnerabilities
7,336 known vulnerabilities affecting google/chrome.
Total CVEs
7,336
CISA KEV
77
actively exploited
Public exploits
92
Exploited in wild
89
Severity breakdown
CRITICAL691HIGH3450MEDIUM2986LOW155UNKNOWN54
Vulnerabilities
Page 11 of 367
CVE-2026-87464P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87464 [CRITICAL] CWE-416 CVE-2026-87464: Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute
Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-106358P3CRITICALCVSS 9.6fixed in 155.0.8059.39≥ 155.0.8059.39, < 155.0.8059.392026-10-06
CVE-2026-106358 [CRITICAL] CWE-416 CVE-2026-106358: Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to ex
Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-106197P3CRITICALCVSS 9.6fixed in 155.0.8059.39≥ 155.0.8059.39, < 155.0.8059.392026-10-06
CVE-2026-106197 [CRITICAL] CWE-416 CVE-2026-106197: Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execu
Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-87646P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87646 [CRITICAL] CWE-416 CVE-2026-87646: Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attack
Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-14405P3CRITICALCVSS 9.6fixed in 150.0.7871.46≥ 150.0.7871.46, < 150.0.7871.462026-07-01
CVE-2026-14405 [CRITICAL] CWE-457 CVE-2026-14405: Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute
Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-113072P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113072 [CRITICAL] CWE-119 CVE-2026-113072: Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potent
Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-113235P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113235 [CRITICAL] CWE-20 CVE-2026-113235: Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote atta
Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113023P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113023 [CRITICAL] CWE-20 CVE-2026-113023: Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote att
Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-113336P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113336 [CRITICAL] CWE-119 CVE-2026-113336: Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker t
Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113020P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113020 [CRITICAL] CWE-20 CVE-2026-113020: Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker
Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113252P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113252 [CRITICAL] CWE-20 CVE-2026-113252: Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a r
Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113089P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113089 [CRITICAL] CWE-20 CVE-2026-113089: Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote a
Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113328P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113328 [CRITICAL] CWE-20 CVE-2026-113328: Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attack
Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113342P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113342 [CRITICAL] CWE-119 CVE-2026-113342: Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex
Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113056P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113056 [CRITICAL] CWE-119 CVE-2026-113056: Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attack
Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-106211P3CRITICALCVSS 9.6fixed in 155.0.8059.39≥ 155.0.8059.39, < 155.0.8059.392026-10-06
CVE-2026-106211 [CRITICAL] CWE-416 CVE-2026-106211: Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leverag
Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-87581P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87581 [CRITICAL] CWE-416 CVE-2026-87581: Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leverag
Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-87438P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87438 [CRITICAL] CWE-787 CVE-2026-87438: Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote
Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-87448P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87448 [CRITICAL] CWE-416 CVE-2026-87448: Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to exec
Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-79232P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79232 [CRITICAL] CWE-416 CVE-2026-79232: Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentia
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd