CH
Browser
Chrome
by Google · last CVE Oct 27, 2026
On CISA KEVExploited in the wildRansomware-linked
7,406
CVEs
77
On KEV
10.0
Max CVSS
850
New 30D
Severity mix
Critical 438High 56Medium 6Low 0
Watch

Add Chrome to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-113169
9.6
0%
Oct 20
Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted…
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113116
9.6
0%
Oct 20
Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113186
9.6
0%
Oct 20
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113023
9.6
0%
Oct 20
Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted…
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113300
9.6
0%
Oct 20
Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113056
9.6
0%
Oct 20
Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML…
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113089
9.6
0%
Oct 20
Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted…
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113235
9.6
0%
Oct 20
Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted…
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113342
9.6
0%
Oct 20
Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113138
9.6
0%
Oct 20
Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML…
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113270
9.6
0%
Oct 20
Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113007
9.6
0%
Oct 20
Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML…
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113126
9.6
0%
Oct 20
Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML…
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113084
9.6
0%
Oct 20
Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted…
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113328
9.6
0%
Oct 20
Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML…
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113171
9.6
0%
Oct 20
Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113261
9.6
0%
Oct 20
Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML…
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-112992
9.6
0%
Oct 20
Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113189
9.6
0%
Oct 20
Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113014
9.6
0%
Oct 20
Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML…
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113283
9.6
0%
Oct 20
Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox…
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113078
9.6
0%
Oct 20
Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted…
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113211
9.6
0%
Oct 20
Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML…
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113263
9.6
0%
Oct 20
Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML…
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113336
9.6
0%
Oct 20
Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML…
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113222
9.6
0%
Oct 20
Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113020
9.6
0%
Oct 20
Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML…
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113252
9.6
0%
Oct 20
Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-113072
9.6
0%
Oct 20
Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 156.0.8078.47 before 156.0.8078.47
CVE-2026-110916
9.6
0%
Oct 15
Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML…
Affected: 155.0.8059.84 before 155.0.8059.84
CVE-2026-110142
9.6
0%
Oct 13
Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 155.0.8059.79 before 155.0.8059.79
CVE-2026-110159
9.6
0%
Oct 13
Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program
Affected: 155.0.8059.79 before 155.0.8059.79
CVE-2026-110165
9.6
0%
Oct 13
Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML…
Affected: 155.0.8059.79 before 155.0.8059.79
CVE-2026-110161
9.6
0%
Oct 13
Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic
Affected: 155.0.8059.79 before 155.0.8059.79
CVE-2026-110136
9.6
0%
Oct 13
Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 155.0.8059.79 before 155.0.8059.79
CVE-2026-110149
9.6
0%
Oct 13
Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 155.0.8059.79 before 155.0.8059.79
CVE-2026-110152
9.6
1%
Oct 13
Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted…
Affected: 155.0.8059.79 before 155.0.8059.79
CVE-2026-106234
9.6
0%
Oct 6
Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox…
Affected: 155.0.8059.39 before 155.0.8059.39
CVE-2026-106237
9.6
0%
Oct 6
Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTML page
Affected: 155.0.8059.39 before 155.0.8059.39
CVE-2026-106417
9.6
0%
Oct 6
Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 155.0.8059.39 before 155.0.8059.39
CVE-2026-106372
9.6
0%
Oct 6
Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 155.0.8059.39 before 155.0.8059.39
CVE-2026-106401
9.6
0%
Oct 6
Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 155.0.8059.39 before 155.0.8059.39
CVE-2026-106375
9.6
0%
Oct 6
Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 155.0.8059.39 before 155.0.8059.39
CVE-2026-106414
9.6
0%
Oct 6
Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code…
Affected: 155.0.8059.39 before 155.0.8059.39
CVE-2026-106241
9.6
0%
Oct 6
Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary…
Affected: 155.0.8059.39 before 155.0.8059.39
CVE-2026-106329
9.6
0%
Oct 6
Incorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside…
Affected: 155.0.8059.39 before 155.0.8059.39
CVE-2026-106211
9.6
0%
Oct 6
Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the…
Affected: 155.0.8059.39 before 155.0.8059.39
CVE-2026-106227
9.6
0%
Oct 6
Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 155.0.8059.39 before 155.0.8059.39
CVE-2026-106298
9.6
0%
Oct 6
Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted…
Affected: 155.0.8059.39 before 155.0.8059.39
CVE-2026-106281
9.6
0%
Oct 6
Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 155.0.8059.39 before 155.0.8059.39
Page 4 of 10 · 500 total
1…345…10
The 500 most important CVEs for this product (exploited first, then by severity)