CH
Browser
Chrome
On CISA KEVExploited in the wildRansomware-linked
7,406
CVEs
77
On KEV
10.0
Max CVSS
850
New 30D
Severity mix
Critical 438High 56Medium 6Low 0
Watch
Add Chrome to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-17708 | 9.6 | Jul 30 | Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17704 | 9.6 | Jul 30 | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17701 | 9.6 | Jul 30 | Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17697 | 9.6 | Jul 30 | Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17695 | 9.6 | Jul 30 | Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17692 | 9.6 | Jul 30 | Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17691 | 9.6 | Jul 30 | Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17688 | 9.6 | Jul 30 | Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17687 | 9.6 | Jul 30 | Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17684 | 9.6 | Jul 30 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17682 | 9.6 | Jul 30 | Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17681 | 9.6 | Jul 30 | Insufficient validation of untrusted input in Web Authentication in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17680 | 9.6 | Jul 30 | Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17676 | 9.6 | Jul 30 | Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17675 | 9.6 | Jul 30 | Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17673 | 9.6 | Jul 30 | Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17672 | 9.6 | Jul 30 | Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17671 | 9.6 | Jul 30 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17670 | 9.6 | Jul 30 | Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17669 | 9.6 | Jul 30 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17656 | 9.6 | Jul 30 | Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17655 | 9.6 | Jul 30 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17652 | 9.6 | Jul 30 | Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17651 | 9.6 | Jul 30 | Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-16424 | 9.6 | Jul 21 | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox… Affected: 150.0.7871.182 before 150.0.7871.182 |
| CVE-2026-16419 | 9.6 | Jul 21 | Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.182 before 150.0.7871.182 |
| CVE-2026-15901 | 9.6 | Jul 20 | Use after free in Network in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 150.0.7871.128 before 150.0.7871.128 |
| CVE-2026-15900 | 9.6 | Jul 20 | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.128 before 150.0.7871.128 |
| CVE-2026-15899 | 9.6 | Jul 20 | Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.128 before 150.0.7871.128 |
| CVE-2026-15773 | 9.6 | Jul 14 | Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.125 before 150.0.7871.125 |
| CVE-2026-15113 | 9.6 | Jul 8 | Use after free in Autofill in Google Chrome on Android prior to 150.0.7871.115 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.115 before 150.0.7871.115 |
| CVE-2026-14419 | 9.6 | Jul 1 | Use after free in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14417 | 9.6 | Jul 1 | Use after free in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14424 | 9.6 | Jul 1 | Use after free in Dawn in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14425 | 9.6 | Jul 1 | Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14390 | 9.6 | Jul 1 | Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14398 | 9.6 | Jul 1 | Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14405 | 9.6 | Jul 1 | Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14423 | 9.6 | Jul 1 | Type Confusion in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14392 | 9.6 | Jul 1 | Out of bounds write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14397 | 9.6 | Jul 1 | Out of bounds write in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14416 | 9.6 | Jul 1 | Out of bounds read in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14420 | 9.6 | Jul 1 | Out of bounds read and write in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14387 | 9.6 | Jul 1 | Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14411 | 9.6 | Jul 1 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14382 | 9.6 | Jul 1 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14152 | 9.6 | Jun 30 | Out of bounds read and write in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-14120 | 9.6 | Jun 30 | Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-14113 | 9.6 | Jun 30 | Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-14109 | 9.6 | Jun 30 | Insufficient policy enforcement in Mojo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox… Affected: 150.0.7871.47 before 150.0.7871.47 |
The 500 most important CVEs for this product (exploited first, then by severity)