CH
Browser
Chrome
On CISA KEVExploited in the wildRansomware-linked
7,406
CVEs
77
On KEV
10.0
Max CVSS
710
New 30D
Severity mix
Critical 438High 56Medium 6Low 0
Watch
Add Chrome to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-17749 | 9.6 | Jul 30 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17738 | 9.6 | Jul 30 | Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17758 | 9.6 | Jul 30 | Heap buffer overflow in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17727 | 9.6 | Jul 30 | Out of bounds write in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17726 | 9.6 | Jul 30 | Integer overflow in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17721 | 9.6 | Jul 30 | Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17718 | 9.6 | Jul 30 | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17717 | 9.6 | Jul 30 | Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17713 | 9.6 | Jul 30 | Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17711 | 9.6 | Jul 30 | Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17710 | 9.6 | Jul 30 | Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17709 | 9.6 | Jul 30 | Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17708 | 9.6 | Jul 30 | Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17704 | 9.6 | Jul 30 | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17701 | 9.6 | Jul 30 | Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17697 | 9.6 | Jul 30 | Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17695 | 9.6 | Jul 30 | Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17692 | 9.6 | Jul 30 | Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17691 | 9.6 | Jul 30 | Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17688 | 9.6 | Jul 30 | Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17687 | 9.6 | Jul 30 | Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17684 | 9.6 | Jul 30 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17682 | 9.6 | Jul 30 | Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17681 | 9.6 | Jul 30 | Insufficient validation of untrusted input in Web Authentication in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17680 | 9.6 | Jul 30 | Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17676 | 9.6 | Jul 30 | Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17675 | 9.6 | Jul 30 | Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17673 | 9.6 | Jul 30 | Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17672 | 9.6 | Jul 30 | Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17671 | 9.6 | Jul 30 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17670 | 9.6 | Jul 30 | Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17669 | 9.6 | Jul 30 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17656 | 9.6 | Jul 30 | Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17655 | 9.6 | Jul 30 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17652 | 9.6 | Jul 30 | Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-17651 | 9.6 | Jul 30 | Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a… Affected: 151.0.7922.72 before 151.0.7922.72 |
| CVE-2026-16424 | 9.6 | Jul 21 | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox… Affected: 150.0.7871.182 before 150.0.7871.182 |
| CVE-2026-16419 | 9.6 | Jul 21 | Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.182 before 150.0.7871.182 |
| CVE-2026-15901 | 9.6 | Jul 20 | Use after free in Network in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 150.0.7871.128 before 150.0.7871.128 |
| CVE-2026-15900 | 9.6 | Jul 20 | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.128 before 150.0.7871.128 |
| CVE-2026-15899 | 9.6 | Jul 20 | Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.128 before 150.0.7871.128 |
| CVE-2026-15773 | 9.6 | Jul 14 | Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.125 before 150.0.7871.125 |
| CVE-2026-15113 | 9.6 | Jul 8 | Use after free in Autofill in Google Chrome on Android prior to 150.0.7871.115 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.115 before 150.0.7871.115 |
| CVE-2026-14419 | 9.6 | Jul 1 | Use after free in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14417 | 9.6 | Jul 1 | Use after free in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14424 | 9.6 | Jul 1 | Use after free in Dawn in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14425 | 9.6 | Jul 1 | Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14390 | 9.6 | Jul 1 | Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14398 | 9.6 | Jul 1 | Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14405 | 9.6 | Jul 1 | Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
The 500 most important CVEs for this product (exploited first, then by severity)