Google Chrome vulnerabilities
7,336 known vulnerabilities affecting google/chrome.
Total CVEs
7,336
CISA KEV
77
actively exploited
Public exploits
92
Exploited in wild
89
Severity breakdown
CRITICAL703HIGH3485MEDIUM2989LOW155UNKNOWN4
Vulnerabilities
Page 24 of 367
CVE-2026-113019P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113019 [HIGH] CWE-416 CVE-2026-113019: Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to exec
Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113215P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113215 [HIGH] CWE-416 CVE-2026-113215: Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-113338P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113338 [HIGH] CWE-416 CVE-2026-113338: Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to exec
Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113174P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113174 [HIGH] CWE-416 CVE-2026-113174: Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113302P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113302 [HIGH] CWE-416 CVE-2026-113302: Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113011P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113011 [HIGH] CWE-416 CVE-2026-113011: Use after free in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a
Use after free in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113339P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113339 [HIGH] CWE-416 CVE-2026-113339: Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute a
Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113033P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113033 [HIGH] CWE-416 CVE-2026-113033: Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to exe
Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113236P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113236 [HIGH] CWE-416 CVE-2026-113236: Use after free in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote atta
Use after free in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113160P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113160 [HIGH] CWE-416 CVE-2026-113160: Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to exec
Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113298P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113298 [HIGH] CWE-416 CVE-2026-113298: Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote att
Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113015P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113015 [HIGH] CWE-416 CVE-2026-113015: Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execu
Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-113158P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113158 [HIGH] CWE-416 CVE-2026-113158: Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to exe
Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113327P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113327 [HIGH] CWE-416 CVE-2026-113327: Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex
Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113197P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113197 [HIGH] CWE-416 CVE-2026-113197: Use after free in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute
Use after free in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113181P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113181 [HIGH] CWE-416 CVE-2026-113181: Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex
Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113321P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113321 [HIGH] CWE-416 CVE-2026-113321: Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113179P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113179 [HIGH] CWE-416 CVE-2026-113179: Use after free in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute
Use after free in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113198P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113198 [HIGH] CWE-416 CVE-2026-113198: Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113319P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113319 [HIGH] CWE-416 CVE-2026-113319: Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to
Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd