CH
Browser
Chrome
On CISA KEVExploited in the wildRansomware-linked
7,406
CVEs
77
On KEV
10.0
Max CVSS
850
New 30D
Severity mix
Critical 438High 56Medium 6Low 0
Watch
Add Chrome to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-11198 | 9.6 | Jun 4 | Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11167 | 9.6 | Jun 4 | Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11165 | 9.6 | Jun 4 | Use after free in WebMIDI in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11163 | 9.6 | Jun 4 | Use after free in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11152 | 9.6 | Jun 4 | Object lifecycle issue in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11146 | 9.6 | Jun 4 | Insufficient validation of untrusted input in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11131 | 9.6 | Jun 4 | Use after free in Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11120 | 9.6 | Jun 4 | Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11119 | 9.6 | Jun 4 | Inappropriate implementation in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11114 | 9.6 | Jun 4 | Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11113 | 9.6 | Jun 4 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11112 | 9.6 | Jun 4 | Insufficient validation of untrusted input in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11100 | 9.6 | Jun 4 | Use after free in File Input in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11095 | 9.6 | Jun 4 | Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11094 | 9.6 | Jun 4 | Use after free in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11088 | 9.6 | Jun 4 | Integer overflow in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11082 | 9.6 | Jun 4 | Race in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11070 | 9.6 | Jun 4 | Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the network process to… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11066 | 9.6 | Jun 4 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11065 | 9.6 | Jun 4 | Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11063 | 9.6 | Jun 4 | Insufficient validation of untrusted input in WebNN in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11061 | 9.6 | Jun 4 | Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11056 | 9.6 | Jun 4 | Insufficient validation of untrusted input in SiteIsolation in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11052 | 9.6 | Jun 4 | Type Confusion in GPU in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11047 | 9.6 | Jun 4 | Inappropriate implementation in Base in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11043 | 9.6 | Jun 4 | Out of bounds write in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11037 | 9.6 | Jun 4 | Out of bounds write in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11029 | 9.6 | Jun 4 | Insufficient validation of untrusted input in Drag and Drop in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11021 | 9.6 | Jun 4 | Insufficient validation of untrusted input in GPU in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11009 | 9.6 | Jun 4 | Use after free in USB in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-11002 | 9.6 | Jun 4 | Use after free in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-10990 | 9.6 | Jun 4 | Use after free in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-10983 | 9.6 | Jun 4 | Insufficient validation of untrusted input in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-10974 | 9.6 | Jun 4 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-10972 | 9.6 | Jun 4 | Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-10971 | 9.6 | Jun 4 | Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to… Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-10966 | 9.6 | Jun 4 | Inappropriate implementation in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file Affected: 149.0.7827.53 before 149.0.7827.53 |
| CVE-2026-10931 | 9.6 | Jun 4 | Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 149.0.7827.53 before 149.0.7827.53 |
The 500 most important CVEs for this product (exploited first, then by severity)
