Google Chrome vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Google Chrome: 3829 record(s), with affected versions and fixes.cpe:2.3:a:google:chrome
CVE-2026-19558
High · 7.5
CWE-416 Aug 11, 2026
Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who...
Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: High)
CVE-2026-19557
High · 8.3
CWE-416 Aug 11, 2026
Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote...
Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19556
High · 8.8
CWE-416 Aug 11, 2026
Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to...
Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19177
High · 8.3
CWE-20 Aug 6, 2026
Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed...
Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19176
High · 7.5
CWE-416 Aug 6, 2026
Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had...
Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19175
Critical · 9.6
CWE-416 Aug 6, 2026
Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...
Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19174
High · 8.8
CWE-190 Aug 6, 2026
Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...
Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19173
High · 8.3
CWE-787 Aug 6, 2026
Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker...
Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19172
High · 8.3
CWE-416 Aug 6, 2026
Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-19171
Critical · 9.6
CWE-416 Aug 6, 2026
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote...
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19170
Critical · 9.6
CWE-416 Aug 6, 2026
Use After Free in Google Chrome
Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-19169
High · 8.8
CWE-20 Aug 6, 2026
Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0...
Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19168
High · 8.8
CWE-693 Aug 6, 2026
Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote...
Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19167
Low · 3.1
CWE-190 Aug 6, 2026
Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19166
Critical · 9.6
CWE-416 Aug 6, 2026
Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote...
Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19165
High · 7.5
CWE-416 Aug 6, 2026
Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who...
Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: High)
CVE-2026-19164
Critical · 9.6
CWE-20 Aug 6, 2026
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109...
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19163
High · 8.3
CWE-416 Aug 6, 2026
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote...
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19162
High · 8.8
CWE-787 Aug 6, 2026
Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...
Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19161
Low · 3.1
CWE-457 Aug 6, 2026
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19160
Low · 3.1
CWE-457 Aug 6, 2026
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19159
High · 7.5
CWE-416 Aug 6, 2026
Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19158
High · 7.5
CWE-416 Aug 6, 2026
Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote...
Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19157
Critical · 9.6
CWE-787 Aug 6, 2026
Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...
Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-19156
High · 7.5
CWE-122 Aug 6, 2026
Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who...
Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)