Google Chrome vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Google Chrome: 3829 record(s), with affected versions and fixes.cpe:2.3:a:google:chrome
CVE-2026-17713
Critical · 9.6
CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to...
Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17712
High · 8.8
CWE-362 Jul 29, 2026
Race in Skia in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute...
Race in Skia in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17711
Critical · 9.6
CWE-362 Jul 29, 2026
Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who...
Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17710
Critical · 9.6
CWE-693 Jul 29, 2026
Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a...
Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17709
Critical · 9.6
CWE-362 Jul 29, 2026
Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who...
Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17708
Critical · 9.6
CWE-416 Jul 29, 2026
Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had...
Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17707
Medium · 6.5
CWE-457 Jul 29, 2026
Uninitialized Use in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote...
Uninitialized Use in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17706
Medium · 4.3
CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 151.0...
Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17705
High · 8.8
CWE-190 Jul 29, 2026
Integer Overflow or Wraparound in Google Chrome
Integer overflow in libxml in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17704
Critical · 9.6
CWE-416 Jul 29, 2026
Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had...
Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17703
Medium · 6.5
CWE-602 Jul 29, 2026
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72...
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17702
Low · 3.1
CWE-346 Jul 29, 2026
Inappropriate implementation in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote...
Inappropriate implementation in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17701
Critical · 9.6
CWE-125 Jul 29, 2026
Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922...
Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17700
Medium · 4.3
CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Actor in Google Chrome prior to 151.0.7922.72...
Insufficient validation of untrusted input in Actor in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17699
High · 8.6
CWE-416 Jul 29, 2026
Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a local attacker to...
Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
CVE-2026-17698
High · 7.5
CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 151.0.7922...
Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17697
Critical · 9.6
CWE-843 Jul 29, 2026
Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...
Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17696
Medium · 4.3
CWE-1300 Jul 29, 2026
Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a...
Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17695
Critical · 9.6
CWE-693 Jul 29, 2026
Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a...
Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17694
High · 8.8
CWE-416 Jul 29, 2026
Use after free in DOM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...
Use after free in DOM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17693
Medium · 4.3
CWE-346 Jul 29, 2026
Insufficient policy enforcement in FileSystem in Google Chrome prior to 151.0.7922.72 allowed a...
Insufficient policy enforcement in FileSystem in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17692
Critical · 9.6
CWE-416 Jul 29, 2026
Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a...
Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17691
Critical · 9.6
CWE-787 Jul 29, 2026
Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote...
Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17690
Medium · 6.5
CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in PDF in Google Chrome on Android prior to 151.0.7922...
Insufficient validation of untrusted input in PDF in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-17689
Medium · 4.3
CWE-457 Jul 29, 2026
Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...
Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)