CH
Browser
Chrome
On CISA KEVExploited in the wildRansomware-linked
7,406
CVEs
77
On KEV
10.0
Max CVSS
850
New 30D
Severity mix
Critical 438High 56Medium 6Low 0
Watch
Add Chrome to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-87528 | 9.6 | Sep 9 | Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87470 | 9.6 | Sep 9 | Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87529 | 9.6 | Sep 9 | Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87637 | 9.6 | Sep 9 | Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87494 | 9.6 | Sep 9 | Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the… Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87643 | 9.6 | Sep 9 | Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87547 | 9.6 | Sep 9 | Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code… Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87504 | 9.6 | Sep 9 | Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted… Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87474 | 9.6 | Sep 9 | Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87581 | 9.6 | Sep 9 | Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the… Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87558 | 9.6 | Sep 9 | Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87607 | 9.6 | Sep 9 | Use after free in Device in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87500 | 9.6 | Sep 9 | Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87646 | 9.6 | Sep 9 | Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87621 | 9.6 | Sep 9 | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87654 | 9.6 | Sep 9 | Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87650 | 9.6 | Sep 9 | Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87520 | 9.6 | Sep 9 | Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87492 | 9.6 | Sep 9 | Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87512 | 9.6 | Sep 9 | Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87527 | 9.6 | Sep 9 | Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87438 | 9.6 | Sep 9 | Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87488 | 9.6 | Sep 9 | Use after free in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87464 | 9.6 | Sep 9 | Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-85047 | 9.6 | Sep 3 | Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82 allowed a remote attacker to potentially execute arbitrary code outside the… Affected: 152.0.7977.82 before 152.0.7977.82 |
| CVE-2026-85042 | 9.6 | Sep 3 | Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.82 before 152.0.7977.82 |
| CVE-2026-85050 | 9.6 | Sep 3 | Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.82 before 152.0.7977.82 |
| CVE-2026-84333 | 9.6 | Sep 1 | Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.75 before 152.0.7977.75 |
| CVE-2026-84354 | 9.6 | Sep 1 | Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox… Affected: 152.0.7977.75 before 152.0.7977.75 |
| CVE-2026-84352 | 9.6 | Sep 1 | Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.75 before 152.0.7977.75 |
| CVE-2026-84353 | 9.6 | Sep 1 | Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside… Affected: 152.0.7977.75 before 152.0.7977.75 |
| CVE-2026-78964 | 9.6 | Aug 25 | Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79056 | 9.6 | Aug 25 | Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79091 | 9.6 | Aug 25 | Use after free in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox… Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-78951 | 9.6 | Aug 25 | Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79064 | 9.6 | Aug 25 | Use after free in Network in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox… Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79128 | 9.6 | Aug 25 | Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79140 | 9.6 | Aug 25 | Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-78909 | 9.6 | Aug 25 | Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted… Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-78937 | 9.6 | Aug 25 | Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code… Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79129 | 9.6 | Aug 25 | Use after free in Sessions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the… Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-78985 | 9.6 | Aug 25 | Incorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code… Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-78945 | 9.6 | Aug 25 | Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox… Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79078 | 9.6 | Aug 25 | Use after free in FedCM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted… Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-78904 | 9.6 | Aug 25 | Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79026 | 9.6 | Aug 25 | Use after free in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the… Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79138 | 9.6 | Aug 25 | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79275 | 9.6 | Aug 25 | Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79149 | 9.6 | Aug 25 | Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79131 | 9.6 | Aug 25 | Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.65 before 152.0.7977.65 |
The 500 most important CVEs for this product (exploited first, then by severity)