Skip to content

Known vulnerabilities in Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-8517 Object lifecycle issue in WebShare in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who… 8.8 High May 14, 2026
CVE-2026-8514 Use after free in Aura in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the… 8.3 High May 14, 2026
CVE-2026-8515 Use after free in HID in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to… 8.3 High May 14, 2026
CVE-2026-8513 Use after free in Input in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had… 8.3 High May 14, 2026
CVE-2026-8512 Use after free in FileSystem in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user… 8.3 High May 14, 2026
CVE-2026-8510 Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had… 7.5 High May 14, 2026
CVE-2026-8511 Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox… 9.6 Critical May 14, 2026
CVE-2026-8509 Heap buffer overflow in WebML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary… 8.8 High May 14, 2026
CVE-2026-8021 Script injection in UI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to… 4.2 Medium May 6, 2026
CVE-2026-8022 Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced… 3.1 Low May 6, 2026
CVE-2026-8020 Uninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had… 5.3 Medium May 6, 2026
CVE-2026-8019 Insufficient policy enforcement in WebApp in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform… 5.4 Medium May 6, 2026
CVE-2026-8016 Use after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code… 8.8 High May 6, 2026
CVE-2026-8017 Side-channel information leakage in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak… 3.1 Low May 6, 2026
CVE-2026-8018 Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to… 8.1 High May 6, 2026
CVE-2026-8013 Insufficient validation of untrusted input in FedCM in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to… 4.3 Medium May 6, 2026
CVE-2026-8014 Inappropriate implementation in Preload in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak… 4.3 Medium May 6, 2026
CVE-2026-8015 Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI… 5.4 Medium May 6, 2026
CVE-2026-8011 Insufficient policy enforcement in Search in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak… 4.3 Medium May 6, 2026
CVE-2026-8012 Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had… 5.4 Medium May 6, 2026
CVE-2026-8010 Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.96 allowed a remote… 6.3 Medium May 6, 2026
CVE-2026-8008 Inappropriate implementation in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a… 5.4 Medium May 6, 2026
CVE-2026-8009 Inappropriate implementation in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had… 5.0 Medium May 6, 2026
CVE-2026-8006 Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced… 5.4 Medium May 6, 2026
CVE-2026-8007 Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who… 7.5 High May 6, 2026

Other Google products