Google Chrome vulnerabilities
7,336 known vulnerabilities affecting google/chrome.
Total CVEs
7,336
CISA KEV
77
actively exploited
Public exploits
92
Exploited in wild
89
Severity breakdown
CRITICAL703HIGH3485MEDIUM2986LOW155UNKNOWN7
Vulnerabilities
Page 20 of 367
CVE-2026-17704P3CRITICALCVSS 9.6fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17704 [CRITICAL] CWE-416 CVE-2026-17704: Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had co
Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-17717P3CRITICALCVSS 9.6fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17717 [CRITICAL] CWE-190 CVE-2026-17717: Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to poten
Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-17682P3CRITICALCVSS 9.6fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17682 [CRITICAL] CWE-190 CVE-2026-17682: Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had
Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-79282P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79282 [CRITICAL] CWE-416 CVE-2026-79282: Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attac
Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-79188P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79188 [CRITICAL] CWE-787 CVE-2026-79188: Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to po
Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-79019P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79019 [CRITICAL] CWE-787 CVE-2026-79019: Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote
Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113283P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113283 [CRITICAL] CWE-119 CVE-2026-113283: Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowe
Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113138P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113138 [CRITICAL] CWE-119 CVE-2026-113138: Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacke
Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113169P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113169 [CRITICAL] CWE-119 CVE-2026-113169: Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a
Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-112992P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-112992 [CRITICAL] CWE-119 CVE-2026-112992: Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to pot
Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113126P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113126 [CRITICAL] CWE-119 CVE-2026-113126: Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attack
Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-87638P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87638 [CRITICAL] CWE-787 CVE-2026-87638: Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to po
Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-87488P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87488 [CRITICAL] CWE-416 CVE-2026-87488: Use after free in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attac
Use after free in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-87520P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87520 [CRITICAL] CWE-416 CVE-2026-87520: Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attack
Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-84352P3CRITICALCVSS 9.6fixed in 152.0.7977.75≥ 152.0.7977.75, < 152.0.7977.752026-09-02
CVE-2026-84352 [CRITICAL] CWE-416 CVE-2026-84352: Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attac
Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-113211P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113211 [CRITICAL] CWE-119 CVE-2026-113211: Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker
Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-87526P3CRITICALCVSS 9.6fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87526 [CRITICAL] CWE-416 CVE-2026-87526: Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker levera
Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: Medium)
nvd
CVE-2026-113084P3CRITICALCVSS 9.6fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113084 [CRITICAL] CWE-20 CVE-2026-113084: Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote at
Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-79130P3CRITICALCVSS 9.6fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79130 [CRITICAL] CWE-122 CVE-2026-79130: Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execut
Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-93374P3CRITICALCVSS 9.6fixed in 153.0.8010.52≥ 153.0.8010.52, < 153.0.8010.522026-09-17
CVE-2026-93374 [CRITICAL] CWE-416 CVE-2026-93374: Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attack
Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd