Google vulnerabilities

CVE-2026-85048 High · 8.3 CWE-416 Sep 3, 2026

Use After Free in Google Chrome

Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-85047 Critical · 9.6 CWE-20 Sep 3, 2026

Improper Input Validation in Google Chrome

Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-85046 High · 8.8 KEV High · 62 Public exploit CWE-843 Sep 3, 2026

Google Chromium V8 Type Confusion Vulnerability

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-85045 High · 7.5 CWE-367 Sep 3, 2026

TOCTOU Race Condition in Google Chrome

Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-85044 Medium · 6.5 CWE-672 Sep 3, 2026

Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82…

Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-85043 Critical · 9.1 CWE-459 Sep 3, 2026

Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote…

Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: High)

CVE-2026-85042 Critical · 9.6 CWE-416 Sep 3, 2026

Use After Free in Google Chrome

Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-84359 Low · 3.1 CWE-200 Sep 1, 2026

Exposure of Sensitive Information in Google Chrome

Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-84358 Medium · 4.2 CWE-269 Sep 1, 2026

Improper Privilege Management in Google Chrome

Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-84357 Medium · 6.5 CWE-20 Sep 1, 2026

Improper Input Validation in Google Chrome

Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: High)

CVE-2026-84356 Medium · 4.3 CWE-451 Sep 1, 2026

UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a…

UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-84355 Low · 3.1 CWE-863 Sep 1, 2026

Incorrect Authorization in Google Chrome

Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-84354 Critical · 9.6 CWE-863 Sep 1, 2026

Incorrect Authorization in Google Chrome

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-84353 Critical · 9.6 CWE-416 Sep 1, 2026

Use After Free in Google Chrome

Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-84352 Critical · 9.6 CWE-416 Sep 1, 2026

Use After Free in Google Chrome

Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-84351 High · 8.3 CWE-121 Sep 1, 2026

Stack-based Buffer Overflow in Google Chrome

Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-84350 High · 8.8 CWE-416 Sep 1, 2026

Use After Free in Google Chrome

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: Low)

CVE-2026-84349 High · 8.3 CWE-416 Sep 1, 2026

Use After Free in Google Chrome

Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-84348 Medium · 6.5 CWE-200 Sep 1, 2026

Exposure of Sensitive Information in Google Chrome

Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-84347 High · 8.8 CWE-416 Sep 1, 2026

Use After Free in Google Chrome

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-84335 High · 8.3 CWE-863 Sep 1, 2026

Incorrect Authorization in Google Chrome

Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-84334 High · 8.1 CWE-863 Sep 1, 2026

Incorrect Authorization in Google Chrome

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)

CVE-2026-84333 Critical · 9.6 CWE-416 Sep 1, 2026

Use After Free in Google Chrome

Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-84332 Medium · 6.5 CWE-863 Sep 1, 2026

Incorrect Authorization in Google Chrome

Incorrect authorization in SiteSettings in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-84331 Low · 3.1 CWE-863 Sep 1, 2026

Incorrect Authorization in Google Chrome

Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)