Google Chrome vulnerabilities
7,357 known vulnerabilities affecting google/chrome.
Total CVEs
7,357
CISA KEV
77
actively exploited
Public exploits
92
Exploited in wild
89
Severity breakdown
CRITICAL703HIGH3485MEDIUM2989LOW155UNKNOWN25
Vulnerabilities
Page 39 of 368
CVE-2026-19560P3HIGHCVSS 8.8fixed in 151.0.7922.137≥ 151.0.7922.137, < 151.0.7922.1372026-08-11
CVE-2026-19560 [HIGH] CWE-416 CVE-2026-19560: Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execut
Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-19556P3HIGHCVSS 8.8fixed in 151.0.7922.137≥ 151.0.7922.137, < 151.0.7922.1372026-08-11
CVE-2026-19556 [HIGH] CWE-416 CVE-2026-19556: Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute a
Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-19145P3HIGHCVSS 8.8fixed in 151.0.7922.109≥ 151.0.7922.109, < 151.0.7922.1092026-08-06
CVE-2026-19145 [HIGH] CWE-416 CVE-2026-19145: Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to ex
Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-19151P3HIGHCVSS 8.8fixed in 151.0.7922.109≥ 151.0.7922.109, < 151.0.7922.1092026-08-06
CVE-2026-19151 [HIGH] CWE-416 CVE-2026-19151: Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute a
Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-19150P3HIGHCVSS 8.8fixed in 151.0.7922.109≥ 151.0.7922.109, < 151.0.7922.1092026-08-06
CVE-2026-19150 [HIGH] CWE-693 CVE-2026-19150: Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacke
Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-19168P3HIGHCVSS 8.8fixed in 151.0.7922.109≥ 151.0.7922.109, < 151.0.7922.1092026-08-06
CVE-2026-19168 [HIGH] CWE-693 CVE-2026-19168: Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacke
Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-17661P3HIGHCVSS 8.8fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17661 [HIGH] CWE-416 CVE-2026-17661: Use after free in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execut
Use after free in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-18017P3HIGHCVSS 8.8fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-18017 [HIGH] CWE-416 CVE-2026-18017: Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute
Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-17694P3HIGHCVSS 8.8fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17694 [HIGH] CWE-416 CVE-2026-17694: Use after free in DOM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute a
Use after free in DOM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-17807P3HIGHCVSS 8.8fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17807 [HIGH] CWE-416 CVE-2026-17807: Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute ar
Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-17658P3HIGHCVSS 8.8fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17658 [HIGH] CWE-416 CVE-2026-17658: Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute ar
Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-17836P3HIGHCVSS 8.8fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17836 [HIGH] CWE-416 CVE-2026-17836: Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute ar
Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-17918P3HIGHCVSS 8.8fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17918 [HIGH] CWE-416 CVE-2026-17918: Use after free in Sync in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute
Use after free in Sync in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-17685P3HIGHCVSS 8.8fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17685 [HIGH] CWE-416 CVE-2026-17685: Use after free in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to exec
Use after free in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-17665P3HIGHCVSS 8.8fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17665 [HIGH] CWE-416 CVE-2026-17665: Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute ar
Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-16805P3HIGHCVSS 8.8fixed in 150.0.7871.186≥ 150.0.7871.186, < 150.0.7871.1862026-07-23
CVE-2026-16805 [HIGH] CWE-416 CVE-2026-16805: Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execut
Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-15902P3HIGHCVSS 8.8fixed in 150.0.7871.128≥ 150.0.7871.128, < 150.0.7871.1282026-07-20
CVE-2026-15902 [HIGH] CWE-416 CVE-2026-15902: Use after free in Cast in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute
Use after free in Cast in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-15903P3HIGHCVSS 8.8fixed in 150.0.7871.128≥ 150.0.7871.128, < 150.0.7871.1282026-07-20
CVE-2026-15903 [HIGH] CWE-125 CVE-2026-15903: Out of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote attacke
Out of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-15133P3HIGHCVSS 8.8fixed in 150.0.7871.115≥ 150.0.7871.115, < 150.0.7871.1152026-07-08
CVE-2026-15133 [HIGH] CWE-416 CVE-2026-15133: Use after free in InterestGroups in Google Chrome prior to 150.0.7871.115 allowed a remote attacker
Use after free in InterestGroups in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-15126P3HIGHCVSS 8.8fixed in 150.0.7871.115≥ 150.0.7871.115, < 150.0.7871.1152026-07-08
CVE-2026-15126 [HIGH] CWE-416 CVE-2026-15126: Use after free in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execut
Use after free in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd