Google Chrome vulnerabilities
7,336 known vulnerabilities affecting google/chrome.
Total CVEs
7,336
CISA KEV
77
actively exploited
Public exploits
92
Exploited in wild
89
Severity breakdown
CRITICAL703HIGH3485MEDIUM2986LOW155UNKNOWN7
Vulnerabilities
Page 17 of 367
CVE-2026-87547P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87547 [CRITICAL] CWE-706 CVE-2026-87547: Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remot
Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-87529P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87529 [CRITICAL] CWE-197 CVE-2026-87529: Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker
Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-78935P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-78935 [CRITICAL] CWE-457 CVE-2026-78935: Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a
Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-113072P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113072 [CRITICAL] CWE-119 CVE-2026-113072: Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potent
Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-113300P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113300 [CRITICAL] CWE-787 CVE-2026-113300: Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to po
Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-113186P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113186 [CRITICAL] CWE-119 CVE-2026-113186: Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to e
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-113342P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113342 [CRITICAL] CWE-119 CVE-2026-113342: Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex
Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113056P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113056 [CRITICAL] CWE-119 CVE-2026-113056: Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attack
Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-113007P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113007 [CRITICAL] CWE-119 CVE-2026-113007: Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker t
Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-87643P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87643 [CRITICAL] CWE-190 CVE-2026-87643: Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attac
Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-87470P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87470 [CRITICAL] CWE-1284 CVE-2026-87470: Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a rem
Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-87650P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87650 [CRITICAL] CWE-125 CVE-2026-87650: Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to pot
Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-85047P3CRITICALCVSS 9.6fixed in 152.0.7977.82≥ 152.0.7977.82, < 152.0.7977.822026-09-03
CVE-2026-85047 [CRITICAL] CWE-20 CVE-2026-85047: Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82
Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-85050P3CRITICALCVSS 9.6fixed in 152.0.7977.82≥ 152.0.7977.82, < 152.0.7977.822026-09-03
CVE-2026-85050 [CRITICAL] CWE-787 CVE-2026-85050: Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote
Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-84333P3CRITICALCVSS 9.6fixed in 152.0.7977.75≥ 152.0.7977.75, < 152.0.7977.752026-09-02
CVE-2026-84333 [CRITICAL] CWE-416 CVE-2026-84333: Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attack
Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-78900P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-78900 [CRITICAL] CWE-20 CVE-2026-78900: Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker
Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-79111P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79111 [CRITICAL] CWE-20 CVE-2026-79111: Improper input validation in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker
Improper input validation in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-78909P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-78909 [CRITICAL] CWE-416 CVE-2026-78909: Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-79043P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79043 [CRITICAL] CWE-787 CVE-2026-79043: Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to po
Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-95357P3CRITICALCVSS 9.6fixed in 154.0.8037.57≥ 154.0.8037.57, < 154.0.8037.572026-09-29
CVE-2026-95357 [CRITICAL] CWE-787 CVE-2026-95357: Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote at
Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd