Google Chrome vulnerabilities
7,336 known vulnerabilities affecting google/chrome.
Total CVEs
7,336
CISA KEV
77
actively exploited
Public exploits
92
Exploited in wild
89
Severity breakdown
CRITICAL703HIGH3485MEDIUM2986LOW155UNKNOWN7
Vulnerabilities
Page 13 of 367
CVE-2026-113189P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113189 [CRITICAL] CWE-416 CVE-2026-113189: Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute
Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113270P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113270 [CRITICAL] CWE-416 CVE-2026-113270: Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to exe
Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-95339P3CRITICALCVSS 9.6fixed in 154.0.8037.57≥ 154.0.8037.57, < 154.0.8037.572026-09-29
CVE-2026-95339 [CRITICAL] CWE-416 CVE-2026-95339: Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to
Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-87558P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87558 [CRITICAL] CWE-416 CVE-2026-87558: Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attack
Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-87455P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87455 [CRITICAL] CWE-416 CVE-2026-87455: Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentia
Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-87637P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87637 [CRITICAL] CWE-416 CVE-2026-87637: Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote atta
Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-87634P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87634 [CRITICAL] CWE-416 CVE-2026-87634: Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to
Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-87474P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87474 [CRITICAL] CWE-416 CVE-2026-87474: Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to pote
Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-87607P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87607 [CRITICAL] CWE-416 CVE-2026-87607: Use after free in Device in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker
Use after free in Device in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-87494P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87494 [CRITICAL] CWE-416 CVE-2026-87494: Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote att
Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-85042P3CRITICALCVSS 9.6fixed in 152.0.7977.82≥ 152.0.7977.82, < 152.0.7977.822026-09-03
CVE-2026-85042 [CRITICAL] CWE-416 CVE-2026-85042: Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to exec
Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-79290P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79290 [CRITICAL] CWE-416 CVE-2026-79290: Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-79078P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79078 [CRITICAL] CWE-416 CVE-2026-79078: Use after free in FedCM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging
Use after free in FedCM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-79150P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79150 [CRITICAL] CWE-416 CVE-2026-79150: Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker
Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-78964P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-78964 [CRITICAL] CWE-416 CVE-2026-78964: Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker t
Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-78939P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-78939 [CRITICAL] CWE-416 CVE-2026-78939: Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who h
Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-79052P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79052 [CRITICAL] CWE-416 CVE-2026-79052: Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-78951P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-78951 [CRITICAL] CWE-416 CVE-2026-78951: Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to
Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-79140P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79140 [CRITICAL] CWE-416 CVE-2026-79140: Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker
Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-79091P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79091 [CRITICAL] CWE-416 CVE-2026-79091: Use after free in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attac
Use after free in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd