Google Chrome vulnerabilities
5,831 known vulnerabilities affecting google/chrome.
Total CVEs
5,831
CISA KEV
75
actively exploited
Public exploits
88
Exploited in wild
87
Severity breakdown
CRITICAL498HIGH2799MEDIUM2453LOW79UNKNOWN2
Vulnerabilities
Page 243 of 292
CVE-2026-17964P4MEDIUMCVSS 4.3fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17964 [MEDIUM] CWE-451 CVE-2026-17964: Incorrect security UI in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote atta
Incorrect security UI in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-17944P4MEDIUMCVSS 4.3fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17944 [MEDIUM] CWE-284 CVE-2026-17944: Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowe
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-17912P4MEDIUMCVSS 4.3fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17912 [MEDIUM] CWE-601 CVE-2026-17912: Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowe
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-14076P4MEDIUMCVSS 4.3fixed in 150.0.7871.46≥ 150.0.7871.47, < 150.0.7871.472026-06-30
CVE-2026-14076 [MEDIUM] CWE-693 CVE-2026-14076: Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed a remote
Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-17982P4MEDIUMCVSS 4.3fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17982 [MEDIUM] CWE-20 CVE-2026-17982: Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a
Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-14047P4MEDIUMCVSS 4.3fixed in 150.0.7871.47≥ 150.0.7871.47, < 150.0.7871.472026-06-30
CVE-2026-14047 [MEDIUM] CWE-602 CVE-2026-14047: Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed an att
Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension. (Chromium security severity: Low)
nvd
CVE-2026-17901P4MEDIUMCVSS 4.3fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17901 [MEDIUM] CWE-20 CVE-2026-17901: Insufficient validation of untrusted input in Sharing in Google Chrome on Android prior to 151.0.792
Insufficient validation of untrusted input in Sharing in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. (Chromium security severity: Low)
nvd
CVE-2026-17994P4MEDIUMCVSS 4.3fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17994 [MEDIUM] CWE-284 CVE-2026-17994: Inappropriate implementation in Media in Google Chrome on Android prior to 151.0.7922.72 allowed a r
Inappropriate implementation in Media in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-17939P4MEDIUMCVSS 4.3fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17939 [MEDIUM] CWE-20 CVE-2026-17939: Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allo
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)
nvd
CVE-2026-11192P4MEDIUMCVSS 4.3fixed in 149.0.7827.53≥ 149.0.7827.53, < 149.0.7827.532026-06-04
CVE-2026-11192 [MEDIUM] CWE-20 CVE-2026-11192: Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.
Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Medium)
nvd
CVE-2026-11252P4MEDIUMCVSS 4.3fixed in 149.0.7827.53≥ 149.0.7827.53, < 149.0.7827.532026-06-05
CVE-2026-11252 [MEDIUM] CWE-284 CVE-2026-11252: Insufficient policy enforcement in Content Settings in Google Chrome prior to 149.0.7827.53 allowed
Insufficient policy enforcement in Content Settings in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-17954P4MEDIUMCVSS 4.3fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17954 [MEDIUM] CWE-346 CVE-2026-17954: Policy bypass in MHTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cro
Policy bypass in MHTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted MHTML page. (Chromium security severity: Low)
nvd
CVE-2026-17755P4MEDIUMCVSS 4.3fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17755 [MEDIUM] CWE-451 CVE-2026-17755: Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who
Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium)
nvd
CVE-2026-18007P4MEDIUMCVSS 4.3fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-18007 [MEDIUM] CWE-451 CVE-2026-18007: Inappropriate implementation in Input in Google Chrome on Android prior to 151.0.7922.72 allowed a r
Inappropriate implementation in Input in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-17900P4MEDIUMCVSS 4.3fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17900 [MEDIUM] CWE-346 CVE-2026-17900: Inappropriate implementation in Enterprise in Google Chrome on Windows prior to 151.0.7922.72 allowe
Inappropriate implementation in Enterprise in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a malicious file. (Chromium security severity: Low)
nvd
CVE-2026-17970P4MEDIUMCVSS 4.3fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17970 [MEDIUM] CWE-20 CVE-2026-17970: Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allo
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)
nvd
CVE-2026-18008P4MEDIUMCVSS 4.3fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-18008 [MEDIUM] CWE-451 CVE-2026-18008: Inappropriate implementation in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote at
Inappropriate implementation in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)
nvd
CVE-2026-18009P4MEDIUMCVSS 4.3fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-18009 [MEDIUM] CWE-20 CVE-2026-18009: Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allo
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)
nvd
CVE-2026-11267P4MEDIUMCVSS 4.3fixed in 149.0.7827.53≥ 149.0.7827.53, < 149.0.7827.532026-06-05
CVE-2026-11267 [MEDIUM] CWE-602 CVE-2026-11267: Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an att
Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension. (Chromium security severity: Low)
nvd
CVE-2026-15108P4MEDIUMCVSS 4.3fixed in 150.0.7871.115≥ 150.0.7871.115, < 150.0.7871.1152026-07-08
CVE-2026-15108 [MEDIUM] CWE-190 CVE-2026-15108: Integer overflow in Extensions API in Google Chrome prior to 150.0.7871.115 allowed an attacker who
Integer overflow in Extensions API in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted Chrome Extension. (Chromium security severity: High)
nvd