Google Chrome vulnerabilities

CVE-2026-106378 [HIGH] CWE-250 CVE-2026-106378: Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote at Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79071 [HIGH] CWE-367 CVE-2026-79071: Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had comp Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79155 [HIGH] CWE-367 CVE-2026-79155: Race condition in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who h Race condition in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-76044 [HIGH] CWE-367 CVE-2026-76044: Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had com Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-87604 [HIGH] CWE-125 CVE-2026-87604: Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who ha Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-87648 [HIGH] CWE-416 CVE-2026-87648: Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attac Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79218 [HIGH] CWE-863 CVE-2026-79218: Incorrect authorization in Sandbox in Google Chrome prior to 152.0.7977.65 allowed a remote attacker Incorrect authorization in Sandbox in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-91735 [HIGH] CWE-863 CVE-2026-91735: Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker w Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-110158 [HIGH] CWE-416 CVE-2026-110158: Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who ha Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-106238 [HIGH] CWE-362 CVE-2026-106238: Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had co Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106393 [HIGH] CWE-416 CVE-2026-106393: Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-95335 [HIGH] CWE-416 CVE-2026-95335: Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had comp Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-95319 [HIGH] CWE-416 CVE-2026-95319: Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-102301 [HIGH] CWE-787 CVE-2026-102301: Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-110138 [HIGH] CWE-416 CVE-2026-110138: Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker w Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-110145 [HIGH] CWE-416 CVE-2026-110145: Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who ha Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-103624 [HIGH] CWE-416 CVE-2026-103624: Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a r Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-95351 [HIGH] CWE-416 CVE-2026-95351: Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had co Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-95348 [HIGH] CWE-416 CVE-2026-95348: Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who ha Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-102324 [HIGH] CWE-416 CVE-2026-102324: Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)