Google Chrome vulnerabilities
7,357 known vulnerabilities affecting google/chrome.
Total CVEs
7,357
CISA KEV
77
actively exploited
Public exploits
92
Exploited in wild
89
Severity breakdown
CRITICAL703HIGH3485MEDIUM2989LOW155UNKNOWN25
Vulnerabilities
Page 38 of 368
CVE-2026-113004P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113004 [HIGH] CWE-119 CVE-2026-113004: Memory corruption in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execu
Memory corruption in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-102323P3HIGHCVSS 8.8fixed in 154.0.8037.92≥ 154.0.8037.92, < 154.0.8037.922026-09-29
CVE-2026-102323 [HIGH] CWE-843 CVE-2026-102323: Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute ar
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-102299P3HIGHCVSS 8.8fixed in 154.0.8037.92≥ 154.0.8037.92, < 154.0.8037.922026-09-29
CVE-2026-102299 [HIGH] CWE-843 CVE-2026-102299: Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute ar
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-87542P3HIGHCVSS 8.8fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87542 [HIGH] CWE-416 CVE-2026-87542: Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute
Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-87617P3HIGHCVSS 8.8fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87617 [HIGH] CWE-416 CVE-2026-87617: Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leverag
Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-87587P3HIGHCVSS 8.8fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87587 [HIGH] CWE-416 CVE-2026-87587: Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute ar
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-87460P3HIGHCVSS 8.8fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87460 [HIGH] CWE-416 CVE-2026-87460: Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to exec
Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-87536P3HIGHCVSS 8.8fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87536 [HIGH] CWE-416 CVE-2026-87536: Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute ar
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-87588P3HIGHCVSS 8.8fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87588 [HIGH] CWE-416 CVE-2026-87588: Use after free in Chromecast in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to ex
Use after free in Chromecast in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-87444P3HIGHCVSS 8.8fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87444 [HIGH] CWE-119 CVE-2026-87444: Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to exe
Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-87440P3HIGHCVSS 8.8fixed in 153.0.8010.36≥ 153.0.8010.36, < 153.0.8010.362026-09-09
CVE-2026-87440 [HIGH] CWE-125 CVE-2026-87440: Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to exe
Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-85053P3HIGHCVSS 8.8fixed in 152.0.7977.82≥ 152.0.7977.82, < 152.0.7977.822026-09-03
CVE-2026-85053 [HIGH] CWE-668 CVE-2026-85053: Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a remote
Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-79197P3HIGHCVSS 8.8fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79197 [HIGH] CWE-416 CVE-2026-79197: Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute ar
Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-78990P3HIGHCVSS 8.8fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-78990 [HIGH] CWE-416 CVE-2026-78990: Use after free in Compositing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to e
Use after free in Compositing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-79202P3HIGHCVSS 8.8fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79202 [HIGH] CWE-416 CVE-2026-79202: Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to ex
Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-78899P3HIGHCVSS 8.8fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-78899 [HIGH] CWE-416 CVE-2026-78899: Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute ar
Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-79244P3HIGHCVSS 8.8fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79244 [HIGH] CWE-416 CVE-2026-79244: Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to exe
Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-79097P3HIGHCVSS 8.8fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79097 [HIGH] CWE-416 CVE-2026-79097: Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute ar
Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-76021P3HIGHCVSS 8.8fixed in 151.0.7922.173≥ 151.0.7922.173, < 151.0.7922.1732026-08-20
CVE-2026-76021 [HIGH] CWE-416 CVE-2026-76021: Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute
Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-76043P3HIGHCVSS 8.8fixed in 151.0.7922.169≥ 151.0.7922.169, < 151.0.7922.1692026-08-18
CVE-2026-76043 [HIGH] CWE-682 CVE-2026-76043: Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to ex
Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd