Google Chrome Chrome vulnerabilities

CVE-2026-5280 Long Term Support Channel Update for ChromeOS: CVE-2026-5280 Long Term Support Channel Update for ChromeOS CVE-2026-5280

CVE-2026-4674 Long Term Support Channel Update for ChromeOS: CVE-2026-4674 Long Term Support Channel Update for ChromeOS CVE-2026-4674

CVE-2026-4451 Long Term Support Channel Update for ChromeOS: CVE-2026-4451 Long Term Support Channel Update for ChromeOS CVE-2026-4451

CVE-2025-37997 Long Term Support Channel Update for ChromeOS: CVE-2025-37997 Long Term Support Channel Update for ChromeOS CVE-2025-37997

CVE-2026-4462 Long Term Support Channel Update for ChromeOS: CVE-2026-4462 Long Term Support Channel Update for ChromeOS CVE-2026-4462

CVE-2026-5282 Long Term Support Channel Update for ChromeOS: CVE-2026-5282 Long Term Support Channel Update for ChromeOS CVE-2026-5282

CVE-2026-5292 Long Term Support Channel Update for ChromeOS: CVE-2026-5292 Long Term Support Channel Update for ChromeOS CVE-2026-5292

CVE-2026-4454 Long Term Support Channel Update for ChromeOS: CVE-2026-4454 Long Term Support Channel Update for ChromeOS CVE-2026-4454

CVE-2026-4675 Long Term Support Channel Update for ChromeOS: CVE-2026-4675 Long Term Support Channel Update for ChromeOS CVE-2026-4675

CVE-2026-5291 Long Term Support Channel Update for ChromeOS: CVE-2026-5291 Long Term Support Channel Update for ChromeOS CVE-2026-5291

CVE-2026-6299 [CRITICAL] Stable Channel Update for Desktop: CVE-2026-6299 Stable Channel Update for Desktop CVE-2026-6299: Use after free in Prerender. Reported by Google on 2026-03-28 [TBD][ 497724498 ] Critical CVE-2026-6358: Use after free in XR Reported by Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern) on 2026-03-30 [TBD][ 490251701 ] High CVE-2026-6359: Use after free in Video Severity: critical

CVE-2026-6296 [CRITICAL] Stable Channel Update for Desktop: CVE-2026-6296 Stable Channel Update for Desktop CVE-2026-6296: Heap buffer overflow in ANGLE. Reported by cinzinga on 2026-03-05 [$10000][ 493628982 ] Critical CVE-2026-6297: Use after free in Proxy Reported by heapracer on 2026-03-17 [TBD][ 495700484 ] Critical CVE-2026-6298: Heap buffer overflow in Skia Severity: critical

CVE-2026-6303 [HIGH] Stable Channel Update for Desktop: CVE-2026-6303 Stable Channel Update for Desktop CVE-2026-6303: Use after free in Codecs. Reported by Google on 2026-03-25 [N/A][ 496393742 ] High CVE-2026-6304: Use after free in Graphite Reported by Google on 2026-03-26 [TBD][ 496618639 ] High CVE-2026-6305: Heap buffer overflow in PDFium Severity: high

CVE-2026-6300 [HIGH] Stable Channel Update for Desktop: CVE-2026-6300 Stable Channel Update for Desktop CVE-2026-6300: Use after free in CSS. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-12 [TBD][ 495273999 ] High CVE-2026-6301: Type Confusion in Turbofan Reported by qymag1c on 2026-03-23 [TBD][ 495477995 ] High CVE-2026-6302: Use after free in Video Severity: high

CVE-2026-6309 [HIGH] Stable Channel Update for Desktop: CVE-2026-6309 Stable Channel Update for Desktop CVE-2026-6309: Use after free in Viz. Reported by Google on 2026-03-30 [TBD][ 497880137 ] High CVE-2026-6360: Use after free in FileSystem Reported by asjidkalam on 2026-03-31 [N/A][ 497969820 ] High CVE-2026-6310: Use after free in Dawn Severity: high

CVE-2026-6306 [HIGH] Stable Channel Update for Desktop: CVE-2026-6306 Stable Channel Update for Desktop CVE-2026-6306: Heap buffer overflow in PDFium. Reported by 86ac1f1587b71893ed2ad792cd7dde32 on 2026-03-27 [TBD][ 497404188 ] High CVE-2026-6307: Type Confusion in Turbofan Reported by Project WhatForLunch (@pjwhatforlunch) on 2026-03-29 [N/A][ 497412658 ] High CVE-2026-6308: Out of bounds read in Media Severity: high

CVE-2026-6361 [HIGH] Stable Channel Update for Desktop: CVE-2026-6361 Stable Channel Update for Desktop CVE-2026-6361: Heap buffer overflow in PDFium. Reported by Google on 2026-04-06 [TBD][ 500066234 ] High CVE-2026-6362: Use after free in Codecs Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-04-07 [N/A][ 500091052 ] High CVE-2026-6317: Use after free in Cast Severity: high

CVE-2026-6311 [HIGH] Stable Channel Update for Desktop: CVE-2026-6311 Stable Channel Update for Desktop CVE-2026-6311: Uninitialized Use in Accessibility. Reported by Google on 2026-03-31 [N/A][ 498269651 ] High CVE-2026-6312: Insufficient policy enforcement in Passwords Reported by Google on 2026-03-31 [N/A][ 498765210 ] High CVE-2026-6313: Insufficient policy enforcement in CORS Severity: high

CVE-2026-6314 [HIGH] Stable Channel Update for Desktop: CVE-2026-6314 Stable Channel Update for Desktop CVE-2026-6314: Out of bounds write in GPU. Reported by Google on 2026-04-02 [N/A][ 499247910 ] High CVE-2026-6315: Use after free in Permissions Reported by Google on 2026-04-03 [N/A][ 499384399 ] High CVE-2026-6316: Use after free in Forms Severity: high

CVE-2026-6363 [MEDIUM] Stable Channel Update for Desktop: CVE-2026-6363 Stable Channel Update for Desktop CVE-2026-6363: Type Confusion in V8. Reported by Google on 2026-03-24 [TBD][ 495996858 ] Medium CVE-2026-6318: Use after free in Codecs Reported by Syn4pse on 2026-03-25 [TBD][ 499018889 ] Medium CVE-2026-6319: Use after free in Payments Severity: medium