Google Chrome vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Google Chrome: 3829 record(s), with affected versions and fixes.cpe:2.3:a:google:chrome
CVE-2026-78935
Critical · 9.6
CWE-457 Aug 25, 2026
Use of Uninitialized Variable in Google Chrome
Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-78934
High · 8.3
CWE-362 Aug 25, 2026
Race Condition in Google Chrome
Race condition in ReadAloud in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-78915
High · 7.5
CWE-362 Aug 25, 2026
Race Condition in Google Chrome
Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Low)
CVE-2026-78914
Medium · 6.5
CWE-908 Aug 25, 2026
Use of Uninitialized Resource in Google Chrome
Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-78913
High · 8.1
CWE-416 Aug 25, 2026
Use After Free in Google Chrome
Use after free in Chromoting in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)
CVE-2026-78912
Medium · 5.4
CWE-451 Aug 25, 2026
UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote…
UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78911
High · 8.3
CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-78910
High · 8.8
CWE-121 Aug 25, 2026
Stack-based Buffer Overflow in Google Chrome
Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78909
Critical · 9.6
CWE-416 Aug 25, 2026
Use After Free in Google Chrome
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78908
Medium · 4.3
CWE-200 Aug 25, 2026
Exposure of Sensitive Information in Google Chrome
Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
CVE-2026-78907
Medium · 6.5
CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78906
High · 7.5
CWE-362 Aug 25, 2026
Race Condition in Google Chrome
Race condition in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78905
High · 8.8
CWE-843 Aug 25, 2026
Type Confusion in Google Chrome
Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78904
Critical · 9.6
CWE-843 Aug 25, 2026
Type Confusion in Google Chrome
Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-78903
Low · 3.1
CWE-459 Aug 25, 2026
Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a…
Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78901
High · 7.5
CWE-362 Aug 25, 2026
Race Condition in Google Chrome
Race condition in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78900
Critical · 9.6
CWE-20 Aug 25, 2026
Improper Input Validation in Google Chrome
Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-78899
High · 8.8
CWE-416 Aug 25, 2026
Use After Free in Google Chrome
Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-78898
Medium · 5.4
CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78897
Medium · 6.5
CWE-862 Aug 25, 2026
Missing Authorization in Google Chrome
Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Low)
CVE-2026-78896
Medium · 4.3
CWE-200 Aug 25, 2026
Exposure of Sensitive Information in Google Chrome
Information leak in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-78895
Medium · 4.3
CWE-200 Aug 25, 2026
Exposure of Sensitive Information in Google Chrome
Information leak in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
CVE-2026-78894
Low · 3.1
CWE-367 Aug 25, 2026
TOCTOU Race Condition in Google Chrome
Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78893
Medium · 6.5
CWE-200 Aug 25, 2026
Exposure of Sensitive Information in Google Chrome
Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-78892
High · 7.1
CWE-863 Aug 25, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a local attacker to bypass system access restrictions via a local program. (Chromium security severity: Medium)