Chrome (Google) - vulnerabilities (CVEs)

7377 CVEs, 850 in the last 30 days, 10009 known versions, newest CVE from 2026-10-27. Vendor: Google.

CVEs of Chrome

CVE-2026-118338 - CVSS 8.8 (high), 2026-10-27: Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
CVE-2026-118309 - CVSS 9.6 (critical), 2026-10-27: Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside…
CVE-2026-118312 - CVSS 9.6 (critical), 2026-10-27: Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…
CVE-2026-118315 - CVSS 8.8 (high), 2026-10-27: Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…
CVE-2026-118319, 2026-10-27: Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML…
CVE-2026-118356 - CVSS 8.8 (high), 2026-10-27: Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…
CVE-2026-118314 - CVSS 8.8 (high), 2026-10-27: Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside…
CVE-2026-118330 - CVSS 8.8 (high), 2026-10-27: Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
CVE-2026-118341 - CVSS 8.8 (high), 2026-10-27: Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…
CVE-2026-118347 - CVSS 8.8 (high), 2026-10-27: Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
CVE-2026-118308 - CVSS 9.6 (critical), 2026-10-27: Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…
CVE-2026-118310 - CVSS 9.6 (critical), 2026-10-27: Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code…
CVE-2026-118335 - CVSS 8.8 (high), 2026-10-27: Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside…
CVE-2026-118342 - CVSS 9.6 (critical), 2026-10-27: Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via…
CVE-2026-118304 - CVSS 8.8 (high), 2026-10-27: Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…
CVE-2026-118313 - CVSS 8.8 (high), 2026-10-27: Use after free in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
CVE-2026-118316 - CVSS 9.6 (critical), 2026-10-27: Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox…
CVE-2026-118345 - CVSS 8.8 (high), 2026-10-27: Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
CVE-2026-118346 - CVSS 8.8 (high), 2026-10-27: Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
CVE-2026-118311 - CVSS 8.8 (high), 2026-10-27: Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
CVE-2026-118332 - CVSS 9.6 (critical), 2026-10-27: Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the…
CVE-2026-118334 - CVSS 8.8 (high), 2026-10-27: Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…
CVE-2026-118343 - CVSS 8.8 (high), 2026-10-27: Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the…
CVE-2026-118327 - CVSS 8.8 (high), 2026-10-27: Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
CVE-2026-118349 - CVSS 8.8 (high), 2026-10-27: Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…
CVE-2026-118353 - CVSS 8.8 (high), 2026-10-27: Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
CVE-2026-118359 - CVSS 8.8 (high), 2026-10-27: Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
CVE-2026-118328 - CVSS 8.8 (high), 2026-10-27: Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…
CVE-2026-118333, 2026-10-27: Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…
CVE-2026-118336 - CVSS 8.8 (high), 2026-10-27: Improper input validation in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the…
CVE-2026-118358 - CVSS 8.8 (high), 2026-10-27: Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
CVE-2026-118307 - CVSS 8.8 (high), 2026-10-27: Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
CVE-2026-118337, 2026-10-27: Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…
CVE-2026-118351 - CVSS 8.8 (high), 2026-10-27: Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
CVE-2026-118352 - CVSS 8.8 (high), 2026-10-27: Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
CVE-2026-118355 - CVSS 9.6 (critical), 2026-10-27: Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the…
CVE-2026-118321 - CVSS 9.6 (critical), 2026-10-27: Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code…
CVE-2026-118329 - CVSS 8.8 (high), 2026-10-27: Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside…
CVE-2026-118340 - CVSS 9.6 (critical), 2026-10-27: Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…
CVE-2026-118354 - CVSS 8.8 (high), 2026-10-27: Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…
CVE-2026-118305 - CVSS 9.6 (critical), 2026-10-27: Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via…
CVE-2026-118317 - CVSS 8.8 (high), 2026-10-27: Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
CVE-2026-118320 - CVSS 8.8 (high), 2026-10-27: Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
CVE-2026-118322, 2026-10-27: Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML…
CVE-2026-118318, 2026-10-27: Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security…
CVE-2026-118339 - CVSS 8.8 (high), 2026-10-27: Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
CVE-2026-118350 - CVSS 8.8 (high), 2026-10-27: Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
CVE-2026-118357 - CVSS 8.8 (high), 2026-10-27: Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
CVE-2026-118331 - CVSS 8.8 (high), 2026-10-27: Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the…
CVE-2026-118344 - CVSS 8.8 (high), 2026-10-27: Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
CVE-2026-118348 - CVSS 8.8 (high), 2026-10-27: Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…
CVE-2026-118306 - CVSS 9.6 (critical), 2026-10-27: Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox…
CVE-2026-113274 - CVSS 8.8 (high), 2026-10-20: Use after free in ReadingMode in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…
CVE-2026-113013 - CVSS 8.8 (high), 2026-10-20: Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…
CVE-2026-113039 - CVSS 8.8 (high), 2026-10-20: Use after free in Bookmarks in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
CVE-2026-113083 - CVSS 8.8 (high), 2026-10-20: Memory corruption in Actor in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
CVE-2026-113088 - CVSS 8.8 (high), 2026-10-20: Memory corruption in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…
CVE-2026-113125 - CVSS 8.8 (high), 2026-10-20: Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…
CVE-2026-112996 - CVSS 8.8 (high), 2026-10-20: Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
CVE-2026-113122 - CVSS 6.5 (medium), 2026-10-20: Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML…
CVE-2026-113227 - CVSS 8.8 (high), 2026-10-20: Use after free in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
CVE-2026-113286 - CVSS 8.8 (high), 2026-10-20: Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…
CVE-2026-113294 - CVSS 8.8 (high), 2026-10-20: Improper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox…
CVE-2026-113046 - CVSS 8.8 (high), 2026-10-20: Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…
CVE-2026-113067 - CVSS 8.8 (high), 2026-10-20: Use after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
CVE-2026-113074 - CVSS 8.8 (high), 2026-10-20: Use after free in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
CVE-2026-113130 - CVSS 8.8 (high), 2026-10-20: Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
CVE-2026-113182 - CVSS 8.8 (high), 2026-10-20: Memory corruption in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…
CVE-2026-112994 - CVSS 8.8 (high), 2026-10-20: Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
CVE-2026-113063 - CVSS 8.8 (high), 2026-10-20: Improper input validation in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…
CVE-2026-113237 - CVSS 6.5 (medium), 2026-10-20: Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.…
CVE-2026-113314 - CVSS 8.8 (high), 2026-10-20: Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
CVE-2026-113331 - CVSS 8.8 (high), 2026-10-20: Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
CVE-2026-113121 - CVSS 8.8 (high), 2026-10-20: Memory corruption in ContextMenu in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside…
CVE-2026-113132 - CVSS 8.8 (high), 2026-10-20: Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
CVE-2026-113169 - CVSS 9.6 (critical), 2026-10-20: Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the…
CVE-2026-113254 - CVSS 8.8 (high), 2026-10-20: Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
CVE-2026-113287 - CVSS 8.8 (high), 2026-10-20: Use after free in Prompts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
CVE-2026-113066 - CVSS 6.5 (medium), 2026-10-20: Memory corruption in Fonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.…
CVE-2026-113085 - CVSS 8.8 (high), 2026-10-20: Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
CVE-2026-113107 - CVSS 8.8 (high), 2026-10-20: Use after free in Media in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
CVE-2026-113248 - CVSS 8.8 (high), 2026-10-20: Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…
CVE-2026-113288 - CVSS 8.8 (high), 2026-10-20: Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
CVE-2026-113036 - CVSS 8.8 (high), 2026-10-20: Memory corruption in HTML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
CVE-2026-113038 - CVSS 6.5 (medium), 2026-10-20: Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted…
CVE-2026-113061 - CVSS 8.8 (high), 2026-10-20: Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…
CVE-2026-113268 - CVSS 8.8 (high), 2026-10-20: Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
CVE-2026-113313 - CVSS 8.8 (high), 2026-10-20: Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
CVE-2026-113047 - CVSS 6.5 (medium), 2026-10-20: Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted…
CVE-2026-113116 - CVSS 9.6 (critical), 2026-10-20: Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…
CVE-2026-113173 - CVSS 8.8 (high), 2026-10-20: Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside…
CVE-2026-113260 - CVSS 8.8 (high), 2026-10-20: Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…
CVE-2026-113269 - CVSS 8.8 (high), 2026-10-20: Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via…
CVE-2026-112998 - CVSS 8.8 (high), 2026-10-20: Memory corruption in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
CVE-2026-113021 - CVSS 8.8 (high), 2026-10-20: Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…
CVE-2026-113145 - CVSS 8.8 (high), 2026-10-20: Memory corruption in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the…
CVE-2026-113156 - CVSS 8.8 (high), 2026-10-20: Use after free in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a…
CVE-2026-113292 - CVSS 8.8 (high), 2026-10-20: Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code…
CVE-2026-113017 - CVSS 8.8 (high), 2026-10-20: Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
CVE-2026-113140 - CVSS 8.8 (high), 2026-10-20: Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…