Google Chrome vulnerabilities
7,336 known vulnerabilities affecting google/chrome.
Total CVEs
7,336
CISA KEV
77
actively exploited
Public exploits
92
Exploited in wild
89
Severity breakdown
CRITICAL703HIGH3485MEDIUM2986LOW155UNKNOWN7
Vulnerabilities
Page 14 of 367
CVE-2026-79056P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79056 [CRITICAL] CWE-416 CVE-2026-79056: Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to
Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-79012P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79012 [CRITICAL] CWE-416 CVE-2026-79012: Use after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote at
Use after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-78945P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-78945 [CRITICAL] CWE-416 CVE-2026-78945: Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-79235P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79235 [CRITICAL] CWE-416 CVE-2026-79235: Use after free in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute
Use after free in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-79128P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79128 [CRITICAL] CWE-416 CVE-2026-79128: Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker
Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-79200P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79200 [CRITICAL] CWE-416 CVE-2026-79200: Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-76035P3CRITICALCVSS 9.6fixed in 151.0.7922.169≥ 151.0.7922.169, < 151.0.7922.1692026-08-18
CVE-2026-76035 [CRITICAL] CWE-20 CVE-2026-76035: Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a r
Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-95310P3CRITICALCVSS 9.6fixed in 154.0.8037.57≥ 154.0.8037.57, < 154.0.8037.572026-09-29
CVE-2026-95310 [CRITICAL] CWE-416 CVE-2026-95310: Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to exec
Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-95313P3CRITICALCVSS 9.6fixed in 154.0.8037.57≥ 154.0.8037.57, < 154.0.8037.572026-09-29
CVE-2026-95313 [CRITICAL] CWE-416 CVE-2026-95313: Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to po
Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-106227P3CRITICALCVSS 9.6fixed in 155.0.8059.39≥ 155.0.8059.39, < 155.0.8059.392026-10-06
CVE-2026-106227 [CRITICAL] CWE-416 CVE-2026-106227: Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute
Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-87492P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87492 [CRITICAL] CWE-863 CVE-2026-87492: Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacke
Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-84354P3CRITICALCVSS 9.6fixed in 152.0.7977.75≥ 152.0.7977.75, < 152.0.7977.752026-09-02
CVE-2026-84354 [CRITICAL] CWE-863 CVE-2026-84354: Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attac
Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-79047P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79047 [CRITICAL] CWE-416 CVE-2026-79047: Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-110136P3CRITICALCVSS 9.6fixed in 155.0.8059.79≥ 155.0.8059.79, < 155.0.8059.792026-10-13
CVE-2026-110136 [CRITICAL] CWE-416 CVE-2026-110136: Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute a
Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-87504P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87504 [CRITICAL] CWE-416 CVE-2026-87504: Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging
Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)
nvd
CVE-2026-79064P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79064 [CRITICAL] CWE-416 CVE-2026-79064: Use after free in Network in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacke
Use after free in Network in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)
nvd
CVE-2026-102322P3CRITICALCVSS 9.6fixed in 155.0.8059.39≥ 155.0.8059.39, < 155.0.8059.392026-10-06
CVE-2026-102322 [CRITICAL] CWE-863 CVE-2026-102322: Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote at
Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-95356P3CRITICALCVSS 9.6fixed in 154.0.8037.57≥ 154.0.8037.57, < 154.0.8037.572026-09-29
CVE-2026-95356 [CRITICAL] CWE-416 CVE-2026-95356: Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker lev
Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-106375P3CRITICALCVSS 9.6fixed in 155.0.8059.39≥ 155.0.8059.39, < 155.0.8059.392026-10-06
CVE-2026-106375 [CRITICAL] CWE-459 CVE-2026-106375: Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to pote
Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-106382P3CRITICALCVSS 9.6fixed in 155.0.8059.39≥ 155.0.8059.39, < 155.0.8059.392026-10-06
CVE-2026-106382 [CRITICAL] CWE-416 CVE-2026-106382: Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to ex
Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd