Google Chrome vulnerabilities
7,336 known vulnerabilities affecting google/chrome.
Total CVEs
7,336
CISA KEV
77
actively exploited
Public exploits
92
Exploited in wild
89
Severity breakdown
CRITICAL703HIGH3485MEDIUM2988LOW155UNKNOWN5
Vulnerabilities
Page 22 of 367
CVE-2026-16420P3HIGHCVSS 8.8fixed in 150.0.7871.182≥ 150.0.7871.182, < 150.0.7871.1822026-07-21
CVE-2026-16420 [HIGH] CWE-843 CVE-2026-16420: Type Confusion in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to exe
Type Confusion in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113202P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113202 [HIGH] CWE-416 CVE-2026-113202: Use after free in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex
Use after free in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113161P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113161 [HIGH] CWE-416 CVE-2026-113161: Use after free in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execut
Use after free in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-79048P3HIGHCVSS 8.8fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79048 [HIGH] CWE-787 CVE-2026-79048: Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote
Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-106240P3HIGHCVSS 8.8fixed in 155.0.8059.39≥ 155.0.8059.39, < 155.0.8059.392026-10-06
CVE-2026-106240 [HIGH] CWE-843 CVE-2026-106240: Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute ar
Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113163P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113163 [HIGH] CWE-416 CVE-2026-113163: Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attac
Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113058P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113058 [HIGH] CWE-416 CVE-2026-113058: Use after free in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute
Use after free in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-106357P3HIGHCVSS 8.8fixed in 155.0.8059.39≥ 155.0.8059.39, < 155.0.8059.392026-10-06
CVE-2026-106357 [HIGH] CWE-416 CVE-2026-106357: Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execut
Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-84347P3HIGHCVSS 8.8fixed in 152.0.7977.75≥ 152.0.7977.75, < 152.0.7977.752026-09-02
CVE-2026-84347 [HIGH] CWE-416 CVE-2026-84347: Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execut
Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-79187P3HIGHCVSS 8.8fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79187 [HIGH] CWE-416 CVE-2026-79187: Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execut
Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-76045P3HIGHCVSS 8.8fixed in 151.0.7922.169≥ 151.0.7922.169, < 151.0.7922.1692026-08-18
CVE-2026-76045 [HIGH] CWE-416 CVE-2026-76045: Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execut
Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-16806P3HIGHCVSS 8.8fixed in 150.0.7871.186≥ 150.0.7871.186, < 150.0.7871.1862026-07-23
CVE-2026-16806 [HIGH] CWE-416 CVE-2026-16806: Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execu
Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-16421P3HIGHCVSS 8.8fixed in 150.0.7871.182≥ 150.0.7871.182, < 150.0.7871.1822026-07-21
CVE-2026-16421 [HIGH] CWE-20 CVE-2026-16421: Inappropriate implementation in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote a
Inappropriate implementation in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-15121P3HIGHCVSS 8.8fixed in 150.0.7871.115≥ 150.0.7871.115, < 150.0.7871.1152026-07-08
CVE-2026-15121 [HIGH] CWE-416 CVE-2026-15121: Use after free in WebRTC in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execu
Use after free in WebRTC in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-112994P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-112994 [HIGH] CWE-119 CVE-2026-112994: Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex
Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-5865P3HIGHCVSS 8.8fixed in 147.0.7727.55≥ 147.0.7727.55, < 147.0.7727.552026-04-08
CVE-2026-5865 [HIGH] CWE-843 CVE-2026-5865: Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute ar
Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-84326P3HIGHCVSS 8.8fixed in 152.0.7977.75≥ 152.0.7977.75, < 152.0.7977.752026-09-02
CVE-2026-84326 [HIGH] CWE-908 CVE-2026-84326: Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to ex
Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-15776P3HIGHCVSS 8.8fixed in 150.0.7871.125≥ 150.0.7871.125, < 150.0.7871.1252026-07-14
CVE-2026-15776 [HIGH] CWE-843 CVE-2026-15776: Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacke
Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-14431P3HIGHCVSS 8.8fixed in 150.0.7871.46≥ 150.0.7871.46, < 150.0.7871.462026-07-01
CVE-2026-14431 [HIGH] CWE-843 CVE-2026-14431: Type Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute ar
Type Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-79127P3HIGHCVSS 8.8fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79127 [HIGH] CWE-787 CVE-2026-79127: Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to ex
Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd