CH
Browser
Chrome
On CISA KEVExploited in the wildRansomware-linked
7,406
CVEs
77
On KEV
10.0
Max CVSS
850
New 30D
Severity mix
Critical 438High 56Medium 6Low 0
Watch
Add Chrome to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-106323 | 9.6 | Oct 6 | Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary… Affected: 155.0.8059.39 before 155.0.8059.39 |
| CVE-2026-106419 | 9.6 | Oct 6 | Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 155.0.8059.39 before 155.0.8059.39 |
| CVE-2026-106239 | 9.6 | Oct 6 | Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… Affected: 155.0.8059.39 before 155.0.8059.39 |
| CVE-2026-102322 | 9.6 | Oct 6 | Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a crafted HTML page Affected: 155.0.8059.39 before 155.0.8059.39 |
| CVE-2026-106358 | 9.6 | Oct 6 | Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 155.0.8059.39 before 155.0.8059.39 |
| CVE-2026-106197 | 9.6 | Oct 6 | Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 155.0.8059.39 before 155.0.8059.39 |
| CVE-2026-106382 | 9.6 | Oct 6 | Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 155.0.8059.39 before 155.0.8059.39 |
| CVE-2026-103630 | 9.6 | Oct 2 | Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 154.0.8037.97 before 154.0.8037.97 |
| CVE-2026-103626 | 9.6 | Oct 2 | Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potentially execute… Affected: 154.0.8037.97 before 154.0.8037.97 |
| CVE-2026-103628 | 9.6 | Oct 2 | Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 154.0.8037.97 before 154.0.8037.97 |
| CVE-2026-102308 | 9.6 | Sep 29 | Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted… Affected: 154.0.8037.92 before 154.0.8037.92 |
| CVE-2026-102309 | 9.6 | Sep 29 | Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 154.0.8037.92 before 154.0.8037.92 |
| CVE-2026-102304 | 9.6 | Sep 29 | Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 154.0.8037.92 before 154.0.8037.92 |
| CVE-2026-102316 | 9.6 | Sep 29 | Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted… Affected: 154.0.8037.92 before 154.0.8037.92 |
| CVE-2026-102306 | 9.6 | Sep 29 | Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 154.0.8037.92 before 154.0.8037.92 |
| CVE-2026-102331 | 9.6 | Sep 29 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… Affected: 154.0.8037.92 before 154.0.8037.92 |
| CVE-2026-95311 | 9.6 | Sep 29 | Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the… Affected: 154.0.8037.57 before 154.0.8037.57 |
| CVE-2026-95347 | 9.6 | Sep 29 | Use after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic Affected: 154.0.8037.57 before 154.0.8037.57 |
| CVE-2026-95325 | 9.6 | Sep 29 | Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 154.0.8037.57 before 154.0.8037.57 |
| CVE-2026-95331 | 9.6 | Sep 29 | Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 154.0.8037.57 before 154.0.8037.57 |
| CVE-2026-95299 | 9.6 | Sep 29 | Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 154.0.8037.57 before 154.0.8037.57 |
| CVE-2026-95318 | 9.6 | Sep 29 | Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 154.0.8037.57 before 154.0.8037.57 |
| CVE-2026-95277 | 9.6 | Sep 29 | Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 154.0.8037.57 before 154.0.8037.57 |
| CVE-2026-95283 | 9.6 | Sep 29 | Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… Affected: 154.0.8037.57 before 154.0.8037.57 |
| CVE-2026-95310 | 9.6 | Sep 29 | Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 154.0.8037.57 before 154.0.8037.57 |
| CVE-2026-95356 | 9.6 | Sep 29 | Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the… Affected: 154.0.8037.57 before 154.0.8037.57 |
| CVE-2026-95329 | 9.6 | Sep 29 | Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… Affected: 154.0.8037.57 before 154.0.8037.57 |
| CVE-2026-95284 | 9.6 | Sep 29 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 154.0.8037.57 before 154.0.8037.57 |
| CVE-2026-95349 | 9.6 | Sep 29 | Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… Affected: 154.0.8037.57 before 154.0.8037.57 |
| CVE-2026-95313 | 9.6 | Sep 29 | Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 154.0.8037.57 before 154.0.8037.57 |
| CVE-2026-95281 | 9.6 | Sep 29 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 154.0.8037.57 before 154.0.8037.57 |
| CVE-2026-95339 | 9.6 | Sep 29 | Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 154.0.8037.57 before 154.0.8037.57 |
| CVE-2026-95357 | 9.6 | Sep 29 | Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… Affected: 154.0.8037.57 before 154.0.8037.57 |
| CVE-2026-95350 | 9.6 | Sep 29 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 154.0.8037.57 before 154.0.8037.57 |
| CVE-2026-93373 | 9.6 | Sep 17 | Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted Chrome extension Affected: 153.0.8010.52 before 153.0.8010.52 |
| CVE-2026-93372 | 9.6 | Sep 17 | Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 153.0.8010.52 before 153.0.8010.52 |
| CVE-2026-93374 | 9.6 | Sep 17 | Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 153.0.8010.52 before 153.0.8010.52 |
| CVE-2026-91738 | 9.6 | Sep 15 | Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 153.0.8010.47 before 153.0.8010.47 |
| CVE-2026-91729 | 9.6 | Sep 15 | Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox… Affected: 153.0.8010.47 before 153.0.8010.47 |
| CVE-2026-91716 | 9.6 | Sep 15 | Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 153.0.8010.47 before 153.0.8010.47 |
| CVE-2026-91718 | 9.6 | Sep 15 | Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 153.0.8010.47 before 153.0.8010.47 |
| CVE-2026-91710 | 9.6 | Sep 15 | Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 153.0.8010.47 before 153.0.8010.47 |
| CVE-2026-91728 | 9.6 | Sep 15 | Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page Affected: 153.0.8010.47 before 153.0.8010.47 |
| CVE-2026-91749 | 9.6 | Sep 15 | Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 153.0.8010.47 before 153.0.8010.47 |
| CVE-2026-87448 | 9.6 | Sep 9 | Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87634 | 9.6 | Sep 9 | Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87609 | 9.6 | Sep 9 | Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87526 | 9.6 | Sep 9 | Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the… Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87455 | 9.6 | Sep 9 | Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87638 | 9.6 | Sep 9 | Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 153.0.8010.36 before 153.0.8010.36 |
The 500 most important CVEs for this product (exploited first, then by severity)
