CH
Browser
Chrome
On CISA KEVExploited in the wildRansomware-linked
7,406
CVEs
77
On KEV
10.0
Max CVSS
710
New 30D
Severity mix
Critical 438High 56Medium 6Low 0
Watch
Add Chrome to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-14423 | 9.6 | Jul 1 | Type Confusion in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14392 | 9.6 | Jul 1 | Out of bounds write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14397 | 9.6 | Jul 1 | Out of bounds write in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14416 | 9.6 | Jul 1 | Out of bounds read in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14420 | 9.6 | Jul 1 | Out of bounds read and write in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14387 | 9.6 | Jul 1 | Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14411 | 9.6 | Jul 1 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14382 | 9.6 | Jul 1 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… Affected: 150.0.7871.46 before 150.0.7871.46 |
| CVE-2026-14152 | 9.6 | Jun 30 | Out of bounds read and write in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-14120 | 9.6 | Jun 30 | Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-14113 | 9.6 | Jun 30 | Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-14109 | 9.6 | Jun 30 | Insufficient policy enforcement in Mojo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-14106 | 9.6 | Jun 30 | Insufficient validation of untrusted input in Text in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-14101 | 9.6 | Jun 30 | Insufficient policy enforcement in Sandbox in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-14097 | 9.6 | Jun 30 | Inappropriate implementation in WebAppInstalls in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-14095 | 9.6 | Jun 30 | Insufficient policy enforcement in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-14093 | 9.6 | Jun 30 | Use after free in Cast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-14056 | 9.6 | Jun 30 | Insufficient validation of untrusted input in Media in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-14055 | 9.6 | Jun 30 | Insufficient validation of untrusted input in Device Trust in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-14044 | 9.6 | Jun 30 | Use after free in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-14043 | 9.6 | Jun 30 | Use after free in GetUserMedia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-14037 | 9.6 | Jun 30 | Insufficient policy enforcement in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-14017 | 9.6 | Jun 30 | Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13934 | 9.6 | Jun 30 | Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13920 | 9.6 | Jun 30 | Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13909 | 9.6 | Jun 30 | Insufficient policy enforcement in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13901 | 9.6 | Jun 30 | Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13883 | 9.6 | Jun 30 | Type Confusion in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13882 | 9.6 | Jun 30 | Race in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13880 | 9.6 | Jun 30 | Use after free in USB in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13878 | 9.6 | Jun 30 | Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13869 | 9.6 | Jun 30 | Use after free in Device in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13861 | 9.6 | Jun 30 | Use after free in Core in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13859 | 9.6 | Jun 30 | Inappropriate implementation in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13854 | 9.6 | Jun 30 | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13853 | 9.6 | Jun 30 | Use after free in Journeys in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13846 | 9.6 | Jun 30 | Use after free in USB in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13843 | 9.6 | Jun 30 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13798 | 9.6 | Jun 30 | Heap buffer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13797 | 9.6 | Jun 30 | Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13796 | 9.6 | Jun 30 | Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13792 | 9.6 | Jun 30 | Use after free in Touchbar in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13789 | 9.6 | Jun 30 | Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13785 | 9.6 | Jun 30 | Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13781 | 9.6 | Jun 30 | Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13780 | 9.6 | Jun 30 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13032 | 9.6 | Jun 24 | Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 149.0.7827.197 before 149.0.7827.197 |
| CVE-2026-13028 | 9.6 | Jun 24 | Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 149.0.7827.197 before 149.0.7827.197 |
| CVE-2026-12440 | 9.6 | Jun 17 | Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: 149.0.7827.155 before 149.0.7827.155 |
| CVE-2026-12027 | 9.6 | Jun 11 | Inappropriate implementation in Headless in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a… Affected: 149.0.7827.115 before 149.0.7827.115 |
The 500 most important CVEs for this product (exploited first, then by severity)
