CH
Browser
Chrome
by Google · last CVE Oct 27, 2026
On CISA KEVExploited in the wildRansomware-linked
7,406
CVEs
77
On KEV
10.0
Max CVSS
850
New 30D
Severity mix
Critical 438High 56Medium 6Low 0
Watch

Add Chrome to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-102304
9.6
0%
Sep 29
Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 154.0.8037.92 before 154.0.8037.92
CVE-2026-102316
9.6
0%
Sep 29
Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted…
Affected: 154.0.8037.92 before 154.0.8037.92
CVE-2026-102306
9.6
0%
Sep 29
Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 154.0.8037.92 before 154.0.8037.92
CVE-2026-102331
9.6
0%
Sep 29
Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted…
Affected: 154.0.8037.92 before 154.0.8037.92
CVE-2026-95311
9.6
0%
Sep 29
Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the…
Affected: 154.0.8037.57 before 154.0.8037.57
CVE-2026-95347
9.6
0%
Sep 29
Use after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic
Affected: 154.0.8037.57 before 154.0.8037.57
CVE-2026-95325
9.6
0%
Sep 29
Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 154.0.8037.57 before 154.0.8037.57
CVE-2026-95331
9.6
0%
Sep 29
Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 154.0.8037.57 before 154.0.8037.57
CVE-2026-95299
9.6
0%
Sep 29
Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 154.0.8037.57 before 154.0.8037.57
CVE-2026-95318
9.6
0%
Sep 29
Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 154.0.8037.57 before 154.0.8037.57
CVE-2026-95277
9.6
0%
Sep 29
Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 154.0.8037.57 before 154.0.8037.57
CVE-2026-95283
9.6
0%
Sep 29
Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted…
Affected: 154.0.8037.57 before 154.0.8037.57
CVE-2026-95310
9.6
0%
Sep 29
Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 154.0.8037.57 before 154.0.8037.57
CVE-2026-95356
9.6
0%
Sep 29
Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the…
Affected: 154.0.8037.57 before 154.0.8037.57
CVE-2026-95329
9.6
0%
Sep 29
Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…
Affected: 154.0.8037.57 before 154.0.8037.57
CVE-2026-95284
9.6
0%
Sep 29
Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 154.0.8037.57 before 154.0.8037.57
CVE-2026-95349
9.6
0%
Sep 29
Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted…
Affected: 154.0.8037.57 before 154.0.8037.57
CVE-2026-95313
9.6
0%
Sep 29
Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 154.0.8037.57 before 154.0.8037.57
CVE-2026-95281
9.6
1%
Sep 29
Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 154.0.8037.57 before 154.0.8037.57
CVE-2026-95339
9.6
0%
Sep 29
Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 154.0.8037.57 before 154.0.8037.57
CVE-2026-95357
9.6
0%
Sep 29
Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted…
Affected: 154.0.8037.57 before 154.0.8037.57
CVE-2026-95350
9.6
1%
Sep 29
Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 154.0.8037.57 before 154.0.8037.57
CVE-2026-93373
9.6
0%
Sep 17
Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted Chrome extension
Affected: 153.0.8010.52 before 153.0.8010.52
CVE-2026-93372
9.6
0%
Sep 17
Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 153.0.8010.52 before 153.0.8010.52
CVE-2026-93374
9.6
0%
Sep 17
Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML…
Affected: 153.0.8010.52 before 153.0.8010.52
CVE-2026-91738
9.6
0%
Sep 15
Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML…
Affected: 153.0.8010.47 before 153.0.8010.47
CVE-2026-91729
9.6
0%
Sep 15
Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox…
Affected: 153.0.8010.47 before 153.0.8010.47
CVE-2026-91716
9.6
0%
Sep 15
Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 153.0.8010.47 before 153.0.8010.47
CVE-2026-91718
9.6
0%
Sep 15
Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 153.0.8010.47 before 153.0.8010.47
CVE-2026-91710
9.6
0%
Sep 15
Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 153.0.8010.47 before 153.0.8010.47
CVE-2026-91728
9.6
0%
Sep 15
Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Affected: 153.0.8010.47 before 153.0.8010.47
CVE-2026-91749
9.6
0%
Sep 15
Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 153.0.8010.47 before 153.0.8010.47
CVE-2026-87448
9.6
0%
Sep 9
Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 153.0.8010.36 before 153.0.8010.36
CVE-2026-87634
9.6
0%
Sep 9
Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 153.0.8010.36 before 153.0.8010.36
CVE-2026-87609
9.6
0%
Sep 9
Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic
Affected: 153.0.8010.36 before 153.0.8010.36
CVE-2026-87526
9.6
0%
Sep 9
Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the…
Affected: 153.0.8010.36 before 153.0.8010.36
CVE-2026-87455
9.6
0%
Sep 9
Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 153.0.8010.36 before 153.0.8010.36
CVE-2026-87638
9.6
0%
Sep 9
Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 153.0.8010.36 before 153.0.8010.36
CVE-2026-87528
9.6
0%
Sep 9
Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML…
Affected: 153.0.8010.36 before 153.0.8010.36
CVE-2026-87470
9.6
0%
Sep 9
Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…
Affected: 153.0.8010.36 before 153.0.8010.36
CVE-2026-87529
9.6
1%
Sep 9
Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML…
Affected: 153.0.8010.36 before 153.0.8010.36
CVE-2026-87637
9.6
0%
Sep 9
Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 153.0.8010.36 before 153.0.8010.36
CVE-2026-87494
9.6
0%
Sep 9
Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the…
Affected: 153.0.8010.36 before 153.0.8010.36
CVE-2026-87643
9.6
0%
Sep 9
Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted…
Affected: 153.0.8010.36 before 153.0.8010.36
CVE-2026-87547
9.6
1%
Sep 9
Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code…
Affected: 153.0.8010.36 before 153.0.8010.36
CVE-2026-87504
9.6
0%
Sep 9
Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted…
Affected: 153.0.8010.36 before 153.0.8010.36
CVE-2026-87474
9.6
0%
Sep 9
Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 153.0.8010.36 before 153.0.8010.36
CVE-2026-87581
9.6
0%
Sep 9
Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the…
Affected: 153.0.8010.36 before 153.0.8010.36
CVE-2026-87558
9.6
0%
Sep 9
Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 153.0.8010.36 before 153.0.8010.36
CVE-2026-87607
9.6
0%
Sep 9
Use after free in Device in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML…
Affected: 153.0.8010.36 before 153.0.8010.36
Page 4 of 9 · 438 total
1…345…9
The 500 most important CVEs for this product (exploited first, then by severity)