Google Chrome vulnerabilities

CVE-2026-19155 High · 8.3 CWE-416 Aug 6, 2026

Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...

Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19154 High · 8.3 CWE-416 Aug 6, 2026

Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...

Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-19153 High · 8.1 CWE-20 Aug 6, 2026

Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109...

Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19152 High · 8.3 CWE-693 Aug 6, 2026

Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a...

Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19151 High · 8.8 CWE-416 Aug 6, 2026

Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...

Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19150 High · 8.8 CWE-693 Aug 6, 2026

Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote...

Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19149 Critical · 9.6 CWE-416 Aug 6, 2026

Use After Free in Google Chrome

Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-19148 High · 8.3 CWE-787 Aug 6, 2026

Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote...

Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19147 High · 8.3 CWE-416 Aug 6, 2026

Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote...

Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19146 Medium · 5.3 CWE-457 Aug 6, 2026

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19145 High · 8.8 CWE-416 Aug 6, 2026

Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...

Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19144 High · 8.8 CWE-416 Aug 6, 2026

Use after free in HTML in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to...

Use after free in HTML in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19143 High · 8.6 CWE-20 Aug 6, 2026

Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0...

Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a local attacker to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

CVE-2026-19142 High · 7.5 CWE-416 Aug 6, 2026

Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...

Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19141 High · 8.3 CWE-416 Aug 6, 2026

Use after free in Resources in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...

Use after free in Resources in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19140 High · 8.3 CWE-416 Aug 6, 2026

Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had...

Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19139 High · 7.4 CWE-362 Aug 6, 2026

Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local...

Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)

CVE-2026-19138 High · 8.3 CWE-122 Aug 6, 2026

Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote...

Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19137 High · 8.3 CWE-416 Aug 6, 2026

Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...

Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-18019 Medium · 4.3 CWE-1300 Jul 29, 2026

Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a...

Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-18018 Medium · 4.0 CWE-451 Jul 29, 2026

Inappropriate implementation in Updater in Google Chrome on Windows prior to 151.0.7922.72...

Inappropriate implementation in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform UI spoofing via a malicious file. (Chromium security severity: Low)

CVE-2026-18017 High · 8.8 CWE-416 Jul 29, 2026

Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...

Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-18016 Medium · 4.3 CWE-346 Jul 29, 2026

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-18015 Critical · 9.6 CWE-693 Jul 29, 2026

Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a...

Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-18014 Medium · 6.5 CWE-20 Jul 29, 2026

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72...

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a malicious file. (Chromium security severity: Low)