Skip to content

Known vulnerabilities in Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-120930 Incorrect authorization in Blink in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web… 5.4 Medium Nov 3, 2026
CVE-2026-120931 Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to… 9.6 Critical Nov 3, 2026
CVE-2026-121141 Improper input validation in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social… 5.4 Medium Nov 3, 2026
CVE-2026-121195 Incorrect authorization in TrustedTypes in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass… 8.8 High Nov 3, 2026
CVE-2026-121069 Use after free in Track in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code… 8.8 High Nov 3, 2026
CVE-2026-121064 Improper input validation in Performance in Google Chrome prior to 157.0.8103.38 allowed a local attacker to potentially… 7.8 High Nov 3, 2026
CVE-2026-121142 Incorrect authorization in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social… Not rated Nov 3, 2026
CVE-2026-121169 Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social… Not rated Nov 3, 2026
CVE-2026-121232 Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a local attacker leveraging social… 5.1 Medium Nov 3, 2026
CVE-2026-121041 Missing authorization in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive… 6.5 Medium Nov 3, 2026
CVE-2026-121092 Uncontrolled recursion in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute… 8.8 High Nov 3, 2026
CVE-2026-121073 Use after free in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute… 9.6 Critical Nov 3, 2026
CVE-2026-121093 Out of bounds read in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially read… Not rated Nov 3, 2026
CVE-2026-121175 Improper resource exposure in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site… Not rated Nov 3, 2026
CVE-2026-121230 Race condition in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute… 8.3 High Nov 3, 2026
CVE-2026-121029 Incorrect authorization in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site… Not rated Nov 3, 2026
CVE-2026-121045 UI misrepresentation in Browser in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker leveraging… 5.4 Medium Nov 3, 2026
CVE-2026-121054 Improper state validation in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web… 8.8 High Nov 3, 2026
CVE-2026-121162 UI misrepresentation in Notifications in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker… 5.4 Medium Nov 3, 2026
CVE-2026-121225 Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging… Not rated Nov 3, 2026
CVE-2026-121050 Race condition in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass web… 8.8 High Nov 3, 2026
CVE-2026-121081 UI misrepresentation in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social… 5.9 Medium Nov 3, 2026
CVE-2026-121205 Incorrect authorization in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social… 8.8 High Nov 3, 2026
CVE-2026-121198 Confused deputy in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering… 8.8 High Nov 3, 2026
CVE-2026-121240 Improper input validation in Variations in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass… Not rated Nov 3, 2026

Other Google products