Skip to content

Known vulnerabilities in Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-11169 Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject… 8.1 High Jun 4, 2026
CVE-2026-11168 Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had… 6.5 Medium Jun 4, 2026
CVE-2026-11166 Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject… 6.8 Medium Jun 4, 2026
CVE-2026-11167 Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who… 9.6 Critical Jun 4, 2026
CVE-2026-11163 Use after free in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially… 9.6 Critical Jun 4, 2026
CVE-2026-11164 Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code… 8.8 High Jun 4, 2026
CVE-2026-11165 Use after free in WebMIDI in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially… 9.6 Critical Jun 4, 2026
CVE-2026-11161 Inappropriate implementation in DataTransfer in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak… 4.3 Medium Jun 4, 2026
CVE-2026-11162 Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak… 4.3 Medium Jun 4, 2026
CVE-2026-11159 Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data… 4.3 Medium Jun 4, 2026
CVE-2026-11160 Out of bounds read in Input in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain… 6.5 Medium Jun 4, 2026
CVE-2026-11158 Insufficient validation of untrusted input in Downloads in Google Chrome on Mac prior to 149.0.7827.53 allowed a local… 8.6 High Jun 4, 2026
CVE-2026-11156 Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak… 4.3 Medium Jun 4, 2026
CVE-2026-11157 Script injection in Accessibility in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to… 5.4 Medium Jun 4, 2026
CVE-2026-11154 Use after free in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the… 7.5 High Jun 4, 2026
CVE-2026-11155 Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak… 4.3 Medium Jun 4, 2026
CVE-2026-11151 Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a… 7.5 High Jun 4, 2026
CVE-2026-11152 Object lifecycle issue in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially… 9.6 Critical Jun 4, 2026
CVE-2026-11153 Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak… 9.1 Critical Jun 4, 2026
CVE-2026-11149 Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote… 7.5 High Jun 4, 2026
CVE-2026-11150 Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject… 6.1 Medium Jun 4, 2026
CVE-2026-11147 Use after free in WebML in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute… 8.8 High Jun 4, 2026
CVE-2026-11148 Inappropriate implementation in Payments in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker… 6.5 Medium Jun 4, 2026
CVE-2026-11145 Race in Geolocation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin… 5.3 Medium Jun 4, 2026
CVE-2026-11146 Insufficient validation of untrusted input in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote… 9.6 Critical Jun 4, 2026

Other Google products