Google Chrome vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Google Chrome: 3829 record(s), with affected versions and fixes.cpe:2.3:a:google:chrome
CVE-2026-78891
High · 8.8
CWE-122 Aug 25, 2026
Heap-based Buffer Overflow in Google Chrome
Buffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-76023
High · 8.8
CWE-913 Aug 20, 2026
Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173...
Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76022
High · 8.8
CWE-122 Aug 20, 2026
Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to...
Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76021
High · 8.8
CWE-416 Aug 20, 2026
Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to...
Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76020
High · 7.5
CWE-367 Aug 20, 2026
Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to...
Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76019
High · 8.1
CWE-863 Aug 20, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76018
High · 8.8
CWE-250 Aug 20, 2026
Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker...
Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. (Chromium security severity: High)
CVE-2026-76017
High · 8.8
CWE-416 Aug 20, 2026
Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker...
Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)
CVE-2026-76047
High · 8.8
CWE-843 Aug 18, 2026
Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to...
Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76046
High · 8.3
CWE-122 Aug 18, 2026
Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote...
Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76045
High · 8.8
CWE-416 Aug 18, 2026
Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to...
Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76044
High · 8.3
CWE-367 Aug 18, 2026
Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had...
Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76043
High · 8.8
CWE-682 Aug 18, 2026
Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to...
Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76042
Low · 3.1
CWE-908 Aug 18, 2026
Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote...
Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76041
Medium · 4.3
CWE-200 Aug 18, 2026
Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to...
Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76040
High · 8.8
CWE-416 Aug 18, 2026
Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote...
Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76039
Medium · 6.5
CWE-706 Aug 18, 2026
Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169...
Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76038
High · 8.8
CWE-843 Aug 18, 2026
Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to...
Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76037
High · 8.4
CWE-59 Aug 18, 2026
Link following in CredentialProvider in Google Chrome on on Windows prior to 151.0.7922.169...
Link following in CredentialProvider in Google Chrome on on Windows prior to 151.0.7922.169 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)
CVE-2026-76036
Critical · 9.6
CWE-122 Aug 18, 2026
Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote...
Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-76035
Critical · 9.6
CWE-20 Aug 18, 2026
Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed...
Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76034
High · 8.8
CWE-122 Aug 18, 2026
Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to...
Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-76033
Medium · 4.2
CWE-20 Aug 18, 2026
Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote...
Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19560
High · 8.8
CWE-416 Aug 11, 2026
Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to...
Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19559
High · 8.8
CWE-416 Aug 11, 2026
Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to...
Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)