CH
Browser
Chrome
by Google · last CVE Oct 27, 2026
On CISA KEVExploited in the wildRansomware-linked
7,406
CVEs
77
On KEV
10.0
Max CVSS
850
New 30D
Severity mix
Critical 438High 56Medium 6Low 0
Watch

Add Chrome to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-78939
9.6
0%
Aug 25
Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the…
Affected: 152.0.7977.65 before 152.0.7977.65
CVE-2026-78989
9.6
1%
Aug 25
Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted…
Affected: 152.0.7977.65 before 152.0.7977.65
CVE-2026-79200
9.6
0%
Aug 25
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 152.0.7977.65 before 152.0.7977.65
CVE-2026-79012
9.6
0%
Aug 25
Use after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the…
Affected: 152.0.7977.65 before 152.0.7977.65
CVE-2026-78935
9.6
1%
Aug 25
Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…
Affected: 152.0.7977.65 before 152.0.7977.65
CVE-2026-79150
9.6
0%
Aug 25
Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 152.0.7977.65 before 152.0.7977.65
CVE-2026-79052
9.6
0%
Aug 25
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 152.0.7977.65 before 152.0.7977.65
CVE-2026-79290
9.6
0%
Aug 25
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 152.0.7977.65 before 152.0.7977.65
CVE-2026-79282
9.6
0%
Aug 25
Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 152.0.7977.65 before 152.0.7977.65
CVE-2026-76035
9.6
0%
Aug 18
Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML…
Affected: 151.0.7922.169 before 151.0.7922.169
CVE-2026-76036
9.6
1%
Aug 18
Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Affected: 151.0.7922.169 before 151.0.7922.169
CVE-2026-19175
9.6
0%
Aug 6
Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 151.0.7922.109 before 151.0.7922.109
CVE-2026-19171
9.6
0%
Aug 6
Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 151.0.7922.109 before 151.0.7922.109
CVE-2026-19166
9.6
0%
Aug 6
Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 151.0.7922.109 before 151.0.7922.109
CVE-2026-19164
9.6
0%
Aug 6
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML…
Affected: 151.0.7922.109 before 151.0.7922.109
CVE-2026-19170
9.6
0%
Aug 6
Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 151.0.7922.109 before 151.0.7922.109
CVE-2026-19157
9.6
0%
Aug 6
Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 151.0.7922.109 before 151.0.7922.109
CVE-2026-19149
9.6
0%
Aug 6
Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 151.0.7922.109 before 151.0.7922.109
CVE-2026-18015
9.6
0%
Jul 30
Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-18002
9.6
0%
Jul 30
Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially…
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17991
9.6
0%
Jul 30
Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform…
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17990
9.6
0%
Jul 30
Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially…
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17987
9.6
0%
Jul 30
Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to…
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17947
9.6
0%
Jul 30
Use after free in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17940
9.6
0%
Jul 30
Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer…
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17924
9.6
0%
Jul 30
Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a…
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17865
9.6
0%
Jul 30
Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a…
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17856
9.6
0%
Jul 30
Inappropriate implementation in Network in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a…
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17855
9.6
0%
Jul 30
Race in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a…
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17848
9.6
0%
Jul 30
Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17847
9.6
0%
Jul 30
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML…
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17837
9.6
0%
Jul 30
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially…
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17834
9.6
0%
Jul 30
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially…
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17832
9.6
0%
Jul 30
Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a…
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17804
9.6
0%
Jul 30
Use after free in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a…
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17803
9.6
0%
Jul 30
Insufficient validation of untrusted input in Save to Drive in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to…
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17801
9.6
0%
Jul 30
Out of bounds read and write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17768
9.6
0%
Jul 30
Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially…
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17749
9.6
0%
Jul 30
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to…
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17738
9.6
0%
Jul 30
Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially…
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17758
9.6
0%
Jul 30
Heap buffer overflow in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17727
9.6
0%
Jul 30
Out of bounds write in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17726
9.6
0%
Jul 30
Integer overflow in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17721
9.6
0%
Jul 30
Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17718
9.6
0%
Jul 30
Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17717
9.6
1%
Jul 30
Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17713
9.6
0%
Jul 30
Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process…
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17711
9.6
0%
Jul 30
Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a…
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17710
9.6
0%
Jul 30
Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a…
Affected: 151.0.7922.72 before 151.0.7922.72
CVE-2026-17709
9.6
0%
Jul 30
Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a…
Affected: 151.0.7922.72 before 151.0.7922.72
Page 6 of 9 · 438 total
1…567…9
The 500 most important CVEs for this product (exploited first, then by severity)