Google Chrome vulnerabilities
7,357 known vulnerabilities affecting google/chrome.
Total CVEs
7,357
CISA KEV
77
actively exploited
Public exploits
92
Exploited in wild
89
Severity breakdown
CRITICAL706HIGH3500MEDIUM2993LOW155UNKNOWN3
Vulnerabilities
Page 55 of 368
CVE-2026-113204P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113204 [HIGH] CWE-416 CVE-2026-113204: Use after free in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47 allowed
Use after free in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113148P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113148 [HIGH] CWE-119 CVE-2026-113148: Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to pote
Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-13885P3HIGHCVSS 8.8fixed in 150.0.7871.47≥ 150.0.7871.47, < 150.0.7871.472026-06-30
CVE-2026-13885 [HIGH] CWE-416 CVE-2026-13885: Use after free in Skia in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker
Use after free in Skia in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-103631P3HIGHCVSS 8.8fixed in 154.0.8037.97≥ 154.0.8037.97, < 154.0.8037.972026-10-02
CVE-2026-103631 [HIGH] CWE-122 CVE-2026-103631: Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execu
Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113279P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113279 [HIGH] CWE-119 CVE-2026-113279: Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker
Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
nvd
CVE-2026-113239P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113239 [HIGH] CWE-118 CVE-2026-113239: Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote
Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-78978P3HIGHCVSS 8.8fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-78978 [HIGH] CWE-125 CVE-2026-78978: Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote a
Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113243P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113243 [HIGH] CWE-119 CVE-2026-113243: Memory corruption in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potent
Memory corruption in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-79231P3HIGHCVSS 8.8fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-79231 [HIGH] CWE-122 CVE-2026-79231: Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execut
Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-78910P3HIGHCVSS 8.8fixed in 152.0.7977.65≥ 152.0.7977.65, < 152.0.7977.652026-08-25
CVE-2026-78910 [HIGH] CWE-121 CVE-2026-78910: Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute a
Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-76022P3HIGHCVSS 8.8fixed in 151.0.7922.173≥ 151.0.7922.173, < 151.0.7922.1732026-08-20
CVE-2026-76022 [HIGH] CWE-122 CVE-2026-76022: Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to exe
Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-17935P3HIGHCVSS 8.8fixed in 151.0.7922.72≥ 151.0.7922.72, < 151.0.7922.722026-07-30
CVE-2026-17935 [HIGH] CWE-122 CVE-2026-17935: Heap buffer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to
Heap buffer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-16418P3HIGHCVSS 8.8fixed in 150.0.7871.182≥ 150.0.7871.182, < 150.0.7871.1822026-07-21
CVE-2026-16418 [HIGH] CWE-121 CVE-2026-16418: Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to ex
Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113331P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113331 [HIGH] CWE-119 CVE-2026-113331: Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to p
Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-113294P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113294 [HIGH] CWE-20 CVE-2026-113294: Improper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacke
Improper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-113313P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113313 [HIGH] CWE-119 CVE-2026-113313: Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to p
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-15132P3HIGHCVSS 8.8fixed in 150.0.7871.115≥ 150.0.7871.115, < 150.0.7871.1152026-07-08
CVE-2026-15132 [HIGH] CWE-457 CVE-2026-15132: Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execut
Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2026-113167P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113167 [HIGH] CWE-119 CVE-2026-113167: Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to po
Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
nvd
CVE-2026-113195P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113195 [HIGH] CWE-20 CVE-2026-113195: Improper input validation in Downloads in Google Chrome prior to 156.0.8078.47 allowed a remote atta
Improper input validation in Downloads in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2026-113183P3HIGHCVSS 8.8fixed in 156.0.8078.47≥ 156.0.8078.47, < 156.0.8078.472026-10-20
CVE-2026-113183 [HIGH] CWE-119 CVE-2026-113183: Memory corruption in FedCM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to pote
Memory corruption in FedCM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
nvd