CVE Intelligence

Google Chrome vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Google Chrome: 3829 record(s), with affected versions and fixes.
cpe:2.3:a:google:chrome

CVE-2026-78960 Medium · 6.5 CWE-200 Aug 25, 2026
Exposure of Sensitive Information in Google Chrome
Information leak in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-78959 Medium · 6.5 CWE-178 Aug 25, 2026
Improper handling of case sensitivity in FileSystem in Google Chrome prior to…
Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78958 Low · 3.1 CWE-908 Aug 25, 2026
Use of Uninitialized Resource in Google Chrome
Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78957 Medium · 5.5 CWE-200 Aug 25, 2026
Exposure of Sensitive Information in Google Chrome
Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a crafted file. (Chromium security severity: Low)
CVE-2026-78956 High · 8.8 CWE-843 Aug 25, 2026
Type Confusion in Google Chrome
Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-78955 Medium · 6.5 CWE-203 Aug 25, 2026
Observable Discrepancy in Google Chrome
Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78954 Medium · 4.3 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
CVE-2026-78953 Low · 3.1 CWE-862 Aug 25, 2026
Missing Authorization in Google Chrome
Missing authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: Medium)
CVE-2026-78952 High · 8.3 CWE-787 Aug 25, 2026
Out-of-bounds Write in Google Chrome
Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-78951 Critical · 9.6 CWE-416 Aug 25, 2026
Use After Free in Google Chrome
Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78950 High · 8.8 CWE-190 Aug 25, 2026
Integer Overflow or Wraparound in Google Chrome
Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-78949 Low · 2.9 CWE-203 Aug 25, 2026
Observable Discrepancy in Google Chrome
Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium security severity: Medium)
CVE-2026-78948 Critical · 9.6 CWE-122 Aug 25, 2026
Heap-based Buffer Overflow in Google Chrome
Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-78947 Medium · 6.5 CWE-459 Aug 25, 2026
Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote…
Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Low)
CVE-2026-78946 Medium · 4.3 CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-78945 Critical · 9.6 CWE-416 Aug 25, 2026
Use After Free in Google Chrome
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78944 High · 8.8 CWE-416 Aug 25, 2026
Use After Free in Google Chrome
Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-78943 Low · 3.1 CWE-20 Aug 25, 2026
Improper Input Validation in Google Chrome
Improper input validation in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78942 Medium · 4.3 CWE-706 Aug 25, 2026
Use of Incorrectly-Resolved Name or Reference in Google Chrome
Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)
CVE-2026-78941 Low · 3.1 CWE-200 Aug 25, 2026
Exposure of Sensitive Information in Google Chrome
Information leak in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78940 Medium · 4.3 CWE-665 Aug 25, 2026
Improper Initialization in Google Chrome
Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78939 Critical · 9.6 CWE-416 Aug 25, 2026
Use After Free in Google Chrome
Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-78938 High · 8.8 CWE-843 Aug 25, 2026
Type Confusion in Google Chrome
Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-78937 Critical · 9.6 CWE-416 Aug 25, 2026
Use After Free in Google Chrome
Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78936 Low · 2.9 CWE-203 Aug 25, 2026
Observable Discrepancy in Google Chrome
Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium security severity: Medium)