CH
Browser
Chrome
by Google · last CVE Oct 27, 2026
On CISA KEVExploited in the wildRansomware-linked
7,406
CVEs
77
On KEV
10.0
Max CVSS
850
New 30D
Severity mix
Critical 438High 56Medium 6Low 0
Watch

Add Chrome to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-11198
9.6
0%
Jun 4
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11167
9.6
0%
Jun 4
Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11165
9.6
0%
Jun 4
Use after free in WebMIDI in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11163
9.6
0%
Jun 4
Use after free in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11152
9.6
0%
Jun 4
Object lifecycle issue in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11146
9.6
0%
Jun 4
Insufficient validation of untrusted input in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11131
9.6
0%
Jun 4
Use after free in Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11120
9.6
0%
Jun 4
Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11119
9.6
0%
Jun 4
Inappropriate implementation in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11114
9.6
0%
Jun 4
Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11113
9.6
0%
Jun 4
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11112
9.6
0%
Jun 4
Insufficient validation of untrusted input in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11100
9.6
0%
Jun 4
Use after free in File Input in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11095
9.6
0%
Jun 4
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11094
9.6
0%
Jun 4
Use after free in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11088
9.6
0%
Jun 4
Integer overflow in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11082
9.6
0%
Jun 4
Race in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11070
9.6
0%
Jun 4
Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the network process to…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11066
9.6
0%
Jun 4
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11065
9.6
0%
Jun 4
Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11063
9.6
0%
Jun 4
Insufficient validation of untrusted input in WebNN in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11061
9.6
0%
Jun 4
Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11056
9.6
0%
Jun 4
Insufficient validation of untrusted input in SiteIsolation in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11052
9.6
0%
Jun 4
Type Confusion in GPU in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11047
9.6
0%
Jun 4
Inappropriate implementation in Base in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11043
9.6
0%
Jun 4
Out of bounds write in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11037
9.6
0%
Jun 4
Out of bounds write in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11029
9.6
0%
Jun 4
Insufficient validation of untrusted input in Drag and Drop in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11021
9.6
0%
Jun 4
Insufficient validation of untrusted input in GPU in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11009
9.6
0%
Jun 4
Use after free in USB in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-11002
9.6
0%
Jun 4
Use after free in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-10990
9.6
0%
Jun 4
Use after free in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-10983
9.6
0%
Jun 4
Insufficient validation of untrusted input in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-10974
9.6
0%
Jun 4
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-10972
9.6
0%
Jun 4
Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-10971
9.6
0%
Jun 4
Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-10966
9.6
0%
Jun 4
Inappropriate implementation in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file
Affected: 149.0.7827.53 before 149.0.7827.53
CVE-2026-10931
9.6
0%
Jun 4
Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 149.0.7827.53 before 149.0.7827.53
Page 9 of 9 · 438 total
1…89
The 500 most important CVEs for this product (exploited first, then by severity)