Skip to content

Known vulnerabilities in Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-8538 Insufficient validation of untrusted input in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who… 5.3 Medium May 14, 2026
CVE-2026-8539 Script injection in SanitizerAPI in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to inject… 5.4 Medium May 14, 2026
CVE-2026-8540 Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside… 8.8 High May 14, 2026
CVE-2026-8536 Insufficient validation of untrusted input in ReadingMode in Google Chrome on Mac prior to 148.0.7778.168 allowed a… 3.1 Low May 14, 2026
CVE-2026-8537 Insufficient policy enforcement in ViewTransitions in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to… 4.3 Medium May 14, 2026
CVE-2026-8533 Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised… 8.3 High May 14, 2026
CVE-2026-8534 Integer overflow in GPU in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote attacker who had… 8.3 High May 14, 2026
CVE-2026-8535 Out of bounds read in Media in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote attacker who… 5.3 Medium May 14, 2026
CVE-2026-8530 Use after free in Network in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had… 8.3 High May 14, 2026
CVE-2026-8531 Heap buffer overflow in WebML in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to… 8.8 High May 14, 2026
CVE-2026-8532 Integer overflow in XML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code… 8.8 High May 14, 2026
CVE-2026-8528 Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.168 allowed a remote… 4.3 Medium May 14, 2026
CVE-2026-8529 Heap buffer overflow in Codecs in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary… 8.8 High May 14, 2026
CVE-2026-8525 Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentially… 8.3 High May 14, 2026
CVE-2026-8526 Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary… 8.8 High May 14, 2026
CVE-2026-8527 Insufficient validation of untrusted input in Downloads in Google Chrome prior to 148.0.7778.168 allowed a remote… 8.8 High May 14, 2026
CVE-2026-8524 Out of bounds write in WebAudio in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute… 8.8 High May 14, 2026
CVE-2026-8558 Out of bounds write in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary… 8.8 High May 14, 2026
CVE-2026-8523 Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the… 8.3 High May 14, 2026
CVE-2026-8521 Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary… 7.5 High May 14, 2026
CVE-2026-8522 Use after free in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to execute… 8.8 High May 14, 2026
CVE-2026-8518 Use after free in Blink in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code… 8.8 High May 14, 2026
CVE-2026-8519 Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an… 8.8 High May 14, 2026
CVE-2026-8520 Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox… 8.3 High May 14, 2026
CVE-2026-8516 Insufficient validation of untrusted input in DataTransfer in Google Chrome prior to 148.0.7778.168 allowed a remote… 5.3 Medium May 14, 2026

Other Google products