CVE Intelligence

Google Chrome vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Google Chrome: 3829 record(s), with affected versions and fixes.
cpe:2.3:a:google:chrome

CVE-2026-78891 High · 8.8 CWE-122 Aug 25, 2026
Heap-based Buffer Overflow in Google Chrome
Buffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-76023 High · 8.8 CWE-913 Aug 20, 2026
Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173...
Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76022 High · 8.8 CWE-122 Aug 20, 2026
Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to...
Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76021 High · 8.8 CWE-416 Aug 20, 2026
Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to...
Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76020 High · 7.5 CWE-367 Aug 20, 2026
Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to...
Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76019 High · 8.1 CWE-863 Aug 20, 2026
Incorrect Authorization in Google Chrome
Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76018 High · 8.8 CWE-250 Aug 20, 2026
Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker...
Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. (Chromium security severity: High)
CVE-2026-76017 High · 8.8 CWE-416 Aug 20, 2026
Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker...
Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)
CVE-2026-76047 High · 8.8 CWE-843 Aug 18, 2026
Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to...
Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76046 High · 8.3 CWE-122 Aug 18, 2026
Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote...
Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76045 High · 8.8 CWE-416 Aug 18, 2026
Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to...
Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76044 High · 8.3 CWE-367 Aug 18, 2026
Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had...
Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76043 High · 8.8 CWE-682 Aug 18, 2026
Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to...
Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76042 Low · 3.1 CWE-908 Aug 18, 2026
Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote...
Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76041 Medium · 4.3 CWE-200 Aug 18, 2026
Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to...
Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76040 High · 8.8 CWE-416 Aug 18, 2026
Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote...
Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76039 Medium · 6.5 CWE-706 Aug 18, 2026
Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169...
Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76038 High · 8.8 CWE-843 Aug 18, 2026
Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to...
Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76037 High · 8.4 CWE-59 Aug 18, 2026
Link following in CredentialProvider in Google Chrome on on Windows prior to 151.0.7922.169...
Link following in CredentialProvider in Google Chrome on on Windows prior to 151.0.7922.169 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)
CVE-2026-76036 Critical · 9.6 CWE-122 Aug 18, 2026
Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote...
Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-76035 Critical · 9.6 CWE-20 Aug 18, 2026
Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed...
Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-76034 High · 8.8 CWE-122 Aug 18, 2026
Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to...
Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-76033 Medium · 4.2 CWE-20 Aug 18, 2026
Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote...
Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19560 High · 8.8 CWE-416 Aug 11, 2026
Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to...
Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19559 High · 8.8 CWE-416 Aug 11, 2026
Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to...
Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)