CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,323 CVEs published, 344 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,323
Show in the list
Critical, last 7 days
344
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product google:chrome. Show all products

3,398 CVEs, showing 701 to 750PreviousPage 15 of 68Next
CVESeverityTitlePublished
CVE-2026-87552Medium 5.5Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information via a co-installed app.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87639High 8.3Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via…
Assigned by Chrome
Sep 9, 2026
CVE-2026-87542High 8.8Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87460High 8.8Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87572High 8.3Injection in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafte…
Assigned by Chrome
Sep 9, 2026
CVE-2026-87500Critical 9.6Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87646Critical 9.6Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87647Low 3.4Uninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87621Critical 9.6Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87604High 8.3Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a…
Assigned by Chrome
Sep 9, 2026
CVE-2026-87654Critical 9.6Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87596Medium 4.3Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87650Critical 9.6Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87514High 8.1Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87520Critical 9.6Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87492Critical 9.6Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87467High 8.1Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87554High 8.1Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87569High 8.8Missing authorization in Views in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87524High 8.3Use after free in Core in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandb…
Assigned by Chrome
Sep 9, 2026
CVE-2026-87517Low 3.1Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87578High 8.3Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary code outside the sandbox via crafted network traffic.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87525Low 2.7Out of bounds read in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to read memory outside the sandbox via a local program.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87633High 8.6Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via UI Interaction.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87440High 8.8Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87447Medium 6.5Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87444High 8.8Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87585High 8.8Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted PDF file.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87512Critical 9.6Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87628High 8.3Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87527Critical 9.6Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87438Critical 9.6Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87488Critical 9.6Use after free in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 9, 2026
CVE-2026-87464Critical 9.6Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 9, 2026
CVE-2026-85044Medium 6.5Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page.
Assigned by Chrome
Sep 3, 2026
CVE-2026-85047Critical 9.6Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted…
Assigned by Chrome
Sep 3, 2026
CVE-2026-85051High 8.8Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 3, 2026
CVE-2026-85049High 8.8Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 3, 2026
CVE-2026-85042Critical 9.6Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 3, 2026
CVE-2026-85053High 8.8Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 3, 2026
CVE-2026-85050Critical 9.6Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 3, 2026
CVE-2026-85045High 7.5Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 3, 2026
CVE-2026-85048High 8.3Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HT…
Assigned by Chrome
Sep 3, 2026
CVE-2026-85043Critical 9.1Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to bypass system access restrictions via crafted network traffic.
Assigned by Chrome
Sep 3, 2026
CVE-2026-85052Low 3.1Out of bounds read in CrashReporting in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML p…
Assigned by Chrome
Sep 3, 2026
CVE-2026-85046
Known exploited
High 8.8Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
Assigned by Chrome
Sep 3, 2026
CVE-2026-84331Low 3.1Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page.
Assigned by Chrome
Sep 1, 2026
CVE-2026-84350High 8.8Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction.
Assigned by Chrome
Sep 1, 2026
CVE-2026-84356Medium 4.3UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page.
Assigned by Chrome
Sep 1, 2026
CVE-2026-84329Medium 5.3Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a craf…
Assigned by Chrome
Sep 1, 2026
PreviousPage 15 of 68Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.