Google Chrome vulnerabilities
7,357 known vulnerabilities affecting google/chrome.
Total CVEs
7,357
CISA KEV
77
actively exploited
Public exploits
92
Exploited in wild
89
Severity breakdown
CRITICAL703HIGH3485MEDIUM2989LOW155UNKNOWN25
Vulnerabilities
Page 26 of 368
CVE-2026-113105P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113105 [HIGH] CWE-416 CVE-2026-113105: Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113067P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113067 [HIGH] CWE-416 CVE-2026-113067: Use after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex
Use after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-113001P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113001 [HIGH] CWE-416 CVE-2026-113001: Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execu
Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-19162P3HIGHCVSS 8.8fixed in 151.0.7922.109≥ 151.0.7922.109, < 151.0.7922.1092026-08-06
CVE-2026-19162 [HIGH] CWE-787 CVE-2026-19162: Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to exec
Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113227P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113227 [HIGH] CWE-416 CVE-2026-113227: Use after free in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execu
Use after free in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-113009P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113009 [HIGH] CWE-416 CVE-2026-113009: Use after free in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote att
Use after free in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-112995P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-112995 [HIGH] CWE-416 CVE-2026-112995: Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to exe
Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113205P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113205 [HIGH] CWE-416 CVE-2026-113205: Use after free in Variations in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex
Use after free in Variations in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113200P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113200 [HIGH] CWE-416 CVE-2026-113200: Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute
Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113208P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113208 [HIGH] CWE-416 CVE-2026-113208: Use after free in ContextualSearch in Google Chrome prior to 156.0.8078.47 allowed a remote attacker
Use after free in ContextualSearch in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113218P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113218 [HIGH] CWE-416 CVE-2026-113218: Use after free in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to
Use after free in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113216P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113216 [HIGH] CWE-416 CVE-2026-113216: Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex
Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-9112P3HIGHCVSS 8.8fixed in 148.0.7778.179≥ 148.0.7778.179, < 148.0.7778.1792026-05-20
CVE-2026-9112 [HIGH] CWE-416 CVE-2026-9112: Use after free in GPU in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker
Use after free in GPU in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113259P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113259 [HIGH] CWE-416 CVE-2026-113259: Use after free in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execut
Use after free in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113253P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113253 [HIGH] CWE-416 CVE-2026-113253: Use after free in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execut
Use after free in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113191P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113191 [HIGH] CWE-416 CVE-2026-113191: Use after free in Internals in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attac
Use after free in Internals in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-110922P3HIGHCVSS 8.8fixed in 155.0.8059.84≥ 155.0.8059.84, < 155.0.8059.842026-10-15
CVE-2026-110922 [HIGH] CWE-416 CVE-2026-110922: Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to exe
Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-13033P3HIGHCVSS 8.8fixed in 149.0.7827.197≥ 149.0.7827.197, < 149.0.7827.1972026-06-24
CVE-2026-13033 [HIGH] CWE-125 CVE-2026-13033: Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197 allowe
Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-7951P3HIGHCVSS 8.8fixed in 148.0.7778.96≥ 148.0.7778.96, < 148.0.7778.962026-05-06
CVE-2026-7951 [HIGH] CWE-787 CVE-2026-7951: Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to e
Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
cvelistv5nvd
CVE-2026-76017P3HIGHCVSS 8.8fixed in 151.0.7922.173≥ 151.0.7922.173, < 151.0.7922.1732026-08-20
CVE-2026-76017 [HIGH] CWE-416 CVE-2026-76017: Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to e
Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)
nvd