Google Chrome vulnerabilities

CVE-2026-13869 [CRITICAL] CWE-416 CVE-2026-13869: Use after free in Device in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacke Use after free in Device in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-14055 [CRITICAL] CWE-20 CVE-2026-14055: Insufficient validation of untrusted input in Device Trust in Google Chrome on Windows prior to 150. Insufficient validation of untrusted input in Device Trust in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-14043 [CRITICAL] CWE-416 CVE-2026-14043: Use after free in GetUserMedia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who Use after free in GetUserMedia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11065 [CRITICAL] CWE-416 CVE-2026-11065: Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had co Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106401 [CRITICAL] CWE-787 CVE-2026-106401: Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to po Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-95331 [CRITICAL] CWE-787 CVE-2026-95331: Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to po Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-17832 [CRITICAL] CWE-416 CVE-2026-17832: Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had co Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106241 [CRITICAL] CWE-863 CVE-2026-106241: Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a re Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-10972 [CRITICAL] CWE-416 CVE-2026-10972: Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker t Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-17848 [CRITICAL] CWE-20 CVE-2026-17848: Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to pote Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: Medium)

CVE-2026-14095 [CRITICAL] CWE-20 CVE-2026-14095: Insufficient policy enforcement in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote Insufficient policy enforcement in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-13785 [CRITICAL] CWE-416 CVE-2026-13785: Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-14093 [CRITICAL] CWE-416 CVE-2026-14093: Use after free in Cast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had com Use after free in Cast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-5290 [CRITICAL] CWE-416 CVE-2026-5290: Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-14113 [CRITICAL] CWE-416 CVE-2026-14113: Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attack Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-13854 [CRITICAL] CWE-416 CVE-2026-13854: Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker w Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13861 [CRITICAL] CWE-416 CVE-2026-13861: Use after free in Core in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had com Use after free in Core in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13853 [CRITICAL] CWE-416 CVE-2026-13853: Use after free in Journeys in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had Use after free in Journeys in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-10990 [CRITICAL] CWE-416 CVE-2026-10990: Use after free in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had com Use after free in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11002 [CRITICAL] CWE-416 CVE-2026-11002: Use after free in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had Use after free in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)