Google Chrome vulnerabilities
7,357 known vulnerabilities affecting google/chrome.
Total CVEs
7,357
CISA KEV
77
actively exploited
Public exploits
92
Exploited in wild
89
Severity breakdown
CRITICAL703HIGH3485MEDIUM2989LOW155UNKNOWN25
Vulnerabilities
Page 43 of 368
CVE-2026-79266P3HIGHCVSS 8.8fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79266 [HIGH] CWE-416 CVE-2026-79266: Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leverag
Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)
nvd
CVE-2026-78944P3HIGHCVSS 8.8fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-78944 [HIGH] CWE-416 CVE-2026-78944: Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leverag
Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)
nvd
CVE-2026-79183P3HIGHCVSS 8.8fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79183 [HIGH] CWE-416 CVE-2026-79183: Use after free in Accessibility in Google Chrome prior to 152.0.7977.65 allowed a remote attacker le
Use after free in Accessibility in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: High)
nvd
CVE-2026-79219P3HIGHCVSS 8.8fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79219 [HIGH] CWE-416 CVE-2026-79219: Use after free in Bluetooth in Google Chrome prior to 152.0.7977.65 allowed a remote attacker levera
Use after free in Bluetooth in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)
nvd
CVE-2026-79119P3HIGHCVSS 8.8fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79119 [HIGH] CWE-416 CVE-2026-79119: Use after free in PDF in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute a
Use after free in PDF in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: Low)
nvd
CVE-2026-17875P3HIGHCVSS 8.8fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17875 [HIGH] CWE-416 CVE-2026-17875: Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execut
Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: Medium)
nvd
CVE-2026-18012P3HIGHCVSS 8.8fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-18012 [HIGH] CWE-416 CVE-2026-18012: Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execut
Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: Low)
nvd
CVE-2026-17778P3HIGHCVSS 8.8fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17778 [HIGH] CWE-416 CVE-2026-17778: Use after free in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to ex
Use after free in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: Medium)
nvd
CVE-2026-7363P3HIGHCVSS 8.8fixed in 147.0.7727.138≥ 147.0.7727.138, < 147.0.7727.1382026-04-28
CVE-2026-7363 [HIGH] CWE-416 CVE-2026-7363: Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remot
Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-113081P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113081 [HIGH] CWE-416 CVE-2026-113081: Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to e
Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113087P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113087 [HIGH] CWE-416 CVE-2026-113087: Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute
Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-5873P3HIGHCVSS 8.8fixed in 147.0.7727.55≥ 147.0.7727.55, < 147.0.7727.552026-04-08
CVE-2026-5873 [HIGH] CWE-125 CVE-2026-5873: Out of bounds read and write in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker
Out of bounds read and write in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-93382P3HIGHCVSS 8.8fixed in 153.0.8010.52≥ 153.0.8010.52, < 153.0.8010.522026-09-17
CVE-2026-93382 [HIGH] CWE-416 CVE-2026-93382: Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execut
Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-6301P3HIGHCVSS 8.8fixed in 147.0.7727.101≥ 147.0.7727.101, < 147.0.7727.1012026-04-15
CVE-2026-6301 [HIGH] CWE-843 CVE-2026-6301: Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to exe
Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113062P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113062 [HIGH] CWE-20 CVE-2026-113062: Improper input validation in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker t
Improper input validation in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113135P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113135 [HIGH] CWE-119 CVE-2026-113135: Memory corruption in PictureInPicture in Google Chrome prior to 156.0.8078.47 allowed a remote attac
Memory corruption in PictureInPicture in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113112P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113112 [HIGH] CWE-416 CVE-2026-113112: Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113221P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113221 [HIGH] CWE-416 CVE-2026-113221: Use after free in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to e
Use after free in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-110137P3HIGHCVSS 8.8fixed in 155.0.8059.79≥ 155.0.8059.79, < 155.0.8059.792026-10-13
CVE-2026-110137 [HIGH] CWE-416 CVE-2026-110137: Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execut
Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-106190P3HIGHCVSS 8.8fixed in 155.0.8059.39≥ 155.0.8059.39, < 155.0.8059.392026-10-06
CVE-2026-106190 [HIGH] CWE-416 CVE-2026-106190: Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute
Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd