CH
Browser
Chrome
On CISA KEVExploited in the wildRansomware-linked
7,406
CVEs
77
On KEV
10.0
Max CVSS
850
New 30D
Severity mix
Critical 438High 56Medium 6Low 0
Watch
Add Chrome to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-79189 | 9.6 | Aug 25 | Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79188 | 9.6 | Aug 25 | Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-78900 | 9.6 | Aug 25 | Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79232 | 9.6 | Aug 25 | Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79235 | 9.6 | Aug 25 | Use after free in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79043 | 9.6 | Aug 25 | Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-78948 | 9.6 | Aug 25 | Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79111 | 9.6 | Aug 25 | Improper input validation in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79130 | 9.6 | Aug 25 | Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79019 | 9.6 | Aug 25 | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79257 | 9.6 | Aug 25 | Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79047 | 9.6 | Aug 25 | Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted… Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-78939 | 9.6 | Aug 25 | Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the… Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-78989 | 9.6 | Aug 25 | Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79200 | 9.6 | Aug 25 | Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79012 | 9.6 | Aug 25 | Use after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the… Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-78935 | 9.6 | Aug 25 | Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79150 | 9.6 | Aug 25 | Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79052 | 9.6 | Aug 25 | Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79290 | 9.6 | Aug 25 | Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79282 | 9.6 | Aug 25 | Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-76035 | 9.6 | Aug 18 | Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML… Affected: 151.0.7922.169 before 151.0.7922.169 |
| CVE-2026-76036 | 9.6 | Aug 18 | Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 151.0.7922.169 before 151.0.7922.169 |
| CVE-2026-19175 | 9.6 | Aug 6 | Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.109 before 151.0.7922.109 |
| CVE-2026-19171 | 9.6 | Aug 6 | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.109 before 151.0.7922.109 |
| CVE-2026-19166 | 9.6 | Aug 6 | Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.109 before 151.0.7922.109 |
| CVE-2026-19164 | 9.6 | Aug 6 | Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… Affected: 151.0.7922.109 before 151.0.7922.109 |
| CVE-2026-19170 | 9.6 | Aug 6 | Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.109 before 151.0.7922.109 |
| CVE-2026-19157 | 9.6 | Aug 6 | Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.109 before 151.0.7922.109 |
| CVE-2026-19149 | 9.6 | Aug 6 | Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.109 before 151.0.7922.109 |
| CVE-2026-18015 | 9.6 | Jul 30 | Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-18002 | 9.6 | Jul 30 | Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17991 | 9.6 | Jul 30 | Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17990 | 9.6 | Jul 30 | Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17987 | 9.6 | Jul 30 | Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17947 | 9.6 | Jul 30 | Use after free in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17940 | 9.6 | Jul 30 | Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17924 | 9.6 | Jul 30 | Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17865 | 9.6 | Jul 30 | Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17856 | 9.6 | Jul 30 | Inappropriate implementation in Network in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17855 | 9.6 | Jul 30 | Race in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17848 | 9.6 | Jul 30 | Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17847 | 9.6 | Jul 30 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17837 | 9.6 | Jul 30 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17834 | 9.6 | Jul 30 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17832 | 9.6 | Jul 30 | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17804 | 9.6 | Jul 30 | Use after free in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17803 | 9.6 | Jul 30 | Insufficient validation of untrusted input in Save to Drive in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17801 | 9.6 | Jul 30 | Out of bounds read and write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17768 | 9.6 | Jul 30 | Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially… Affected: 151.0.7922.72 before 151.0.7922.72 |
The 500 most important CVEs for this product (exploited first, then by severity)
