CH
Browser
Chrome
by Google · last CVE Oct 27, 2026
On CISA KEVExploited in the wildRansomware-linked
7,406
CVEs
77
On KEV
10.0
Max CVSS
710
New 30D
Severity mix
Critical 438High 56Medium 6Low 0
Watch

Add Chrome to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-14423
9.6
0%
Jul 1
Type Confusion in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 150.0.7871.46 before 150.0.7871.46
CVE-2026-14392
9.6
0%
Jul 1
Out of bounds write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 150.0.7871.46 before 150.0.7871.46
CVE-2026-14397
9.6
0%
Jul 1
Out of bounds write in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 150.0.7871.46 before 150.0.7871.46
CVE-2026-14416
9.6
0%
Jul 1
Out of bounds read in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 150.0.7871.46 before 150.0.7871.46
CVE-2026-14420
9.6
0%
Jul 1
Out of bounds read and write in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 150.0.7871.46 before 150.0.7871.46
CVE-2026-14387
9.6
0%
Jul 1
Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 150.0.7871.46 before 150.0.7871.46
CVE-2026-14411
9.6
0%
Jul 1
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML…
Affected: 150.0.7871.46 before 150.0.7871.46
CVE-2026-14382
9.6
0%
Jul 1
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML…
Affected: 150.0.7871.46 before 150.0.7871.46
CVE-2026-14152
9.6
0%
Jun 30
Out of bounds read and write in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-14120
9.6
0%
Jun 30
Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-14113
9.6
0%
Jun 30
Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-14109
9.6
0%
Jun 30
Insufficient policy enforcement in Mojo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-14106
9.6
0%
Jun 30
Insufficient validation of untrusted input in Text in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-14101
9.6
0%
Jun 30
Insufficient policy enforcement in Sandbox in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-14097
9.6
0%
Jun 30
Inappropriate implementation in WebAppInstalls in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-14095
9.6
0%
Jun 30
Insufficient policy enforcement in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-14093
9.6
0%
Jun 30
Use after free in Cast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-14056
9.6
0%
Jun 30
Insufficient validation of untrusted input in Media in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-14055
9.6
0%
Jun 30
Insufficient validation of untrusted input in Device Trust in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-14044
9.6
0%
Jun 30
Use after free in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-14043
9.6
0%
Jun 30
Use after free in GetUserMedia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-14037
9.6
0%
Jun 30
Insufficient policy enforcement in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-14017
9.6
0%
Jun 30
Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13934
9.6
0%
Jun 30
Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13920
9.6
0%
Jun 30
Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13909
9.6
0%
Jun 30
Insufficient policy enforcement in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13901
9.6
0%
Jun 30
Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13883
9.6
0%
Jun 30
Type Confusion in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13882
9.6
0%
Jun 30
Race in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13880
9.6
0%
Jun 30
Use after free in USB in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13878
9.6
0%
Jun 30
Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13869
9.6
0%
Jun 30
Use after free in Device in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13861
9.6
0%
Jun 30
Use after free in Core in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13859
9.6
0%
Jun 30
Inappropriate implementation in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13854
9.6
0%
Jun 30
Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13853
9.6
0%
Jun 30
Use after free in Journeys in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13846
9.6
0%
Jun 30
Use after free in USB in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13843
9.6
0%
Jun 30
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13798
9.6
0%
Jun 30
Heap buffer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13797
9.6
0%
Jun 30
Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13796
9.6
0%
Jun 30
Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13792
9.6
0%
Jun 30
Use after free in Touchbar in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13789
9.6
0%
Jun 30
Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13785
9.6
0%
Jun 30
Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13781
9.6
0%
Jun 30
Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13780
9.6
0%
Jun 30
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13032
9.6
0%
Jun 24
Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 149.0.7827.197 before 149.0.7827.197
CVE-2026-13028
9.6
0%
Jun 24
Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 149.0.7827.197 before 149.0.7827.197
CVE-2026-12440
9.6
0%
Jun 17
Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 149.0.7827.155 before 149.0.7827.155
CVE-2026-12027
9.6
0%
Jun 11
Inappropriate implementation in Headless in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a…
Affected: 149.0.7827.115 before 149.0.7827.115
Page 9 of 10 · 500 total
The 500 most important CVEs for this product (exploited first, then by severity)