Google Chrome vulnerabilities

CVE-2026-11177 [HIGH] CWE-416 CVE-2026-11177: Use after free in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who conv Use after free in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-8519 [HIGH] CWE-472 CVE-2026-8519: Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attac Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-12020 [HIGH] CWE-416 CVE-2026-12020: Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-7973 [HIGH] CWE-472 CVE-2026-7973: Integer overflow in Dawn in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacke Integer overflow in Dawn in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11079 [HIGH] CWE-20 CVE-2026-11079: Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory write via a crafted video file. (Chromium security severity: Medium)

CVE-2026-5912 [HIGH] CWE-472 CVE-2026-5912: Integer overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perf Integer overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11301 [HIGH] CWE-125 CVE-2026-11301: Inappropriate implementation in LiveCaption in Google Chrome prior to 149.0.7827.53 allowed a remote Inappropriate implementation in LiveCaption in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via malicious network traffic. (Chromium security severity: Low)

CVE-2026-11698 [HIGH] CWE-416 CVE-2026-11698: Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacke Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-11687 [HIGH] CWE-416 CVE-2026-11687: Use after free in Dawn in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to Use after free in Dawn in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-11681 [HIGH] CWE-416 CVE-2026-11681: Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-11699 [HIGH] CWE-416 CVE-2026-11699: Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacke Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-4458 [HIGH] CWE-416 CVE-2026-4458: Use after free in Extensions in Google Chrome prior to 146.0.7680.153 allowed an attacker who convin Use after free in Extensions in Google Chrome prior to 146.0.7680.153 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)

CVE-2026-84351 [HIGH] CWE-121 CVE-2026-84351: Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attack Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-87510 [HIGH] CWE-20 CVE-2026-87510: Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attack Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-87553 [HIGH] CWE-20 CVE-2026-87553: Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79008 [HIGH] CWE-20 CVE-2026-79008: Improper input validation in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a rem Improper input validation in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79109 [HIGH] CWE-20 CVE-2026-79109: Improper input validation in Printing in Google Chrome prior to 152.0.7977.65 allowed a remote attac Improper input validation in Printing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79132 [HIGH] CWE-20 CVE-2026-79132: Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a r Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-87506 [HIGH] CWE-250 CVE-2026-87506: Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who h Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-79210 [HIGH] CWE-416 CVE-2026-79210: Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attac Use after free in Audio in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)