CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-20 13:23 UTC)

What this means for you

This week: 5,114 CVEs published, 326 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,114; Show in the list
Critical, last 7 days: 326; Show in the list
Healthcare-tagged, last 7 days: 5; Show in the list
Known exploited (CISA KEV): 1,748; Show in the list

Showing CVEs that name the product google:chrome. Show all products

3,398 CVEs, showing 1851 to 1900PreviousPage 38 of 68Next

CVE	Severity	Title	Published
CVE-2026-16417	Low 3.1	Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Assigned by Chrome	Jul 21, 2026
CVE-2026-16418	High 8.8	Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Assigned by Chrome	Jul 21, 2026
CVE-2026-16419	Critical 9.6	Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Assigned by Chrome	Jul 21, 2026
CVE-2026-16422	High 7.5	Insufficient validation of untrusted input in Certificate in Google Chrome on Linux prior to 150.0.7871.182 allowed an attacker in a privileged network position to perform domain spoofing via malicio… Assigned by Chrome	Jul 21, 2026
CVE-2026-16423	High 8.8	Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTM… Assigned by Chrome	Jul 21, 2026
CVE-2026-16424	Critical 9.6	Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML… Assigned by Chrome	Jul 21, 2026
CVE-2026-16807	High 8.8	Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Assigned by Chrome	Jul 23, 2026
CVE-2026-16806	High 8.8	Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Assigned by Chrome	Jul 23, 2026
CVE-2026-16805	High 8.8	Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Assigned by Chrome	Jul 23, 2026
CVE-2026-16804	High 8.3	Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Assigned by Chrome	Jul 23, 2026
CVE-2026-17650	High 8.3	Use after free in Compositing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML pag… Assigned by Chrome	Jul 30, 2026
CVE-2026-17651	Critical 9.6	Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17652	Critical 9.6	Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17653	High 8.3	Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17654	High 7.8	Race in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Assigned by Chrome	Jul 30, 2026
CVE-2026-17655	Critical 9.6	Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17656	Critical 9.6	Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17657	High 8.3	Use after free in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17658	High 8.8	Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17659	Medium 4.2	Inappropriate implementation in SiteIsolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML pa… Assigned by Chrome	Jul 30, 2026
CVE-2026-17660	High 8.3	Insufficient validation of untrusted input in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap… Assigned by Chrome	Jul 30, 2026
CVE-2026-17661	High 8.8	Use after free in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17662	Medium 4.3	Insufficient policy enforcement in Prefetch in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17663	High 8.3	Insufficient validation of untrusted input in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbo… Assigned by Chrome	Jul 30, 2026
CVE-2026-17664	Medium 6.5	Insufficient validation of untrusted input in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted… Assigned by Chrome	Jul 30, 2026
CVE-2026-17665	High 8.8	Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17666	Critical 9.1	Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access control via malicious network traffic. Assigned by Chrome	Jul 30, 2026
CVE-2026-17667	Medium 6.5	Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17668	Medium 6.5	Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17669	Critical 9.6	Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17670	Critical 9.6	Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17671	Critical 9.6	Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape… Assigned by Chrome	Jul 30, 2026
CVE-2026-17672	Critical 9.6	Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es… Assigned by Chrome	Jul 30, 2026
CVE-2026-17673	Critical 9.6	Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17674	Medium 6.5	Inappropriate implementation in HTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17675	Critical 9.6	Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17676	Critical 9.6	Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via… Assigned by Chrome	Jul 30, 2026
CVE-2026-17677	High 8.8	Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17678	High 8.8	Out of bounds read in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17679	Medium 6.5	Insufficient validation of untrusted input in Print Preview in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a… Assigned by Chrome	Jul 30, 2026
CVE-2026-17680	Critical 9.6	Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craf… Assigned by Chrome	Jul 30, 2026
CVE-2026-17681	Critical 9.6	Insufficient validation of untrusted input in Web Authentication in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially p… Assigned by Chrome	Jul 30, 2026
CVE-2026-17682	Critical 9.6	Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17683	Medium 6.5	Inappropriate implementation in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17684	Critical 9.6	Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a… Assigned by Chrome	Jul 30, 2026
CVE-2026-17685	High 8.8	Use after free in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17686	High 8.1	Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a craft… Assigned by Chrome	Jul 30, 2026
CVE-2026-17687	Critical 9.6	Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17688	Critical 9.6	Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Assigned by Chrome	Jul 30, 2026
CVE-2026-17689	Medium 4.3	Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Assigned by Chrome	Jul 30, 2026

PreviousPage 38 of 68Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.