Google Chrome vulnerabilities
7,336 known vulnerabilities affecting google/chrome.
Total CVEs
7,336
CISA KEV
77
actively exploited
Public exploits
92
Exploited in wild
89
Severity breakdown
CRITICAL703HIGH3485MEDIUM2989LOW155UNKNOWN4
Vulnerabilities
Page 23 of 367
CVE-2026-113037P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113037 [HIGH] CWE-416 CVE-2026-113037: Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex
Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113271P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113271 [HIGH] CWE-416 CVE-2026-113271: Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to
Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-113280P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113280 [HIGH] CWE-119 CVE-2026-113280: Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to exec
Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-10904P3HIGHCVSS 8.8fixed in 149.0.7827.53≥ 149.0.7827.53, < 149.0.7827.532026-06-04
CVE-2026-10904 [HIGH] CWE-20 CVE-2026-10904: Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker
Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113314P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113314 [HIGH] CWE-416 CVE-2026-113314: Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute
Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-87612P3HIGHCVSS 8.8fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87612 [HIGH] CWE-843 CVE-2026-87612: Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute ar
Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-85051P3HIGHCVSS 8.8fixed in 152.0.7977.82≥ 152.0.7977.82, < 152.0.7977.822026-09-03
CVE-2026-85051 [HIGH] CWE-843 CVE-2026-85051: Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to e
Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-78938P3HIGHCVSS 8.8fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-78938 [HIGH] CWE-843 CVE-2026-78938: Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute ar
Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-79236P3HIGHCVSS 8.8fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79236 [HIGH] CWE-843 CVE-2026-79236: Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute ar
Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-76038P3HIGHCVSS 8.8fixed in 151.0.7922.169≥ 151.0.7922.169, < 151.0.7922.1692026-08-18
CVE-2026-76038 [HIGH] CWE-843 CVE-2026-76038: Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute a
Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-76047P3HIGHCVSS 8.8fixed in 151.0.7922.169≥ 151.0.7922.169, < 151.0.7922.1692026-08-18
CVE-2026-76047 [HIGH] CWE-843 CVE-2026-76047: Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute a
Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-17725P3HIGHCVSS 8.8fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17725 [HIGH] CWE-843 CVE-2026-17725: Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute ar
Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113101P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113101 [HIGH] CWE-416 CVE-2026-113101: Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to
Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-91741P3HIGHCVSS 8.8fixed in 153.0.8010.47≥ 153.0.8010.47, < 153.0.8010.472026-09-15
CVE-2026-91741 [HIGH] CWE-843 CVE-2026-91741: Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to
Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-91731P3HIGHCVSS 8.8fixed in 153.0.8010.47≥ 153.0.8010.47, < 153.0.8010.472026-09-15
CVE-2026-91731 [HIGH] CWE-843 CVE-2026-91731: Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to e
Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113017P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113017 [HIGH] CWE-416 CVE-2026-113017: Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute
Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-113324P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113324 [HIGH] CWE-416 CVE-2026-113324: Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute a
Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113025P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113025 [HIGH] CWE-416 CVE-2026-113025: Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute
Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-113305P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113305 [HIGH] CWE-416 CVE-2026-113305: Use after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execu
Use after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113311P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113311 [HIGH] CWE-416 CVE-2026-113311: Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to
Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd