Skip to content

Known vulnerabilities in Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-0906 Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the… 9.8 Critical Jan 20, 2026
CVE-2026-0907 Incorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform UI… 9.8 Critical Jan 20, 2026
CVE-2026-0908 Use after free in ANGLE in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit heap… 8.8 High Jan 20, 2026
CVE-2026-0904 Incorrect security UI in Digital Credentials in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to… 5.4 Medium Jan 20, 2026
CVE-2026-0905 Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a… 9.8 Critical Jan 20, 2026
CVE-2026-0902 Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform an out… 8.8 High Jan 20, 2026
CVE-2026-0903 Inappropriate implementation in Downloads in Google Chrome on Windows prior to 144.0.7559.59 allowed a remote attacker… 5.4 Medium Jan 20, 2026
CVE-2026-0900 Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially… 8.8 High Jan 20, 2026
CVE-2026-0901 Inappropriate implementation in Blink in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to… 5.4 Medium Jan 20, 2026
CVE-2026-0899 Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially… 8.8 High Jan 20, 2026
CVE-2026-0628 Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who… 8.8 High Jan 6, 2026
CVE-2025-14766 Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially… 8.8 High Dec 16, 2025
CVE-2025-14765 Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit… 8.8 High Dec 16, 2025
CVE-2025-14373 Inappropriate implementation in Toolbar in Google Chrome on Android prior to 143.0.7499.110 allowed a remote attacker to… 4.3 Medium Dec 12, 2025
CVE-2025-14372 Use after free in Password Manager in Google Chrome prior to 143.0.7499.110 allowed a remote attacker to potentially… 6.1 Medium Dec 12, 2025
CVE-2025-14174 Exploited Google Chromium Out of Bounds Memory Access Vulnerability 8.8 High Dec 12, 2025
CVE-2025-13992 Side-channel information leakage in Navigation and Loading in Google Chrome prior to 139.0.7258.66 allowed a remote… 4.7 Medium Dec 3, 2025
CVE-2025-13633 Use after free in Digital Credentials in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had… 8.8 High Dec 2, 2025
CVE-2025-13721 Race in v8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption… 7.5 High Dec 2, 2025
CVE-2025-13720 Bad cast in Loader in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer… 8.8 High Dec 2, 2025
CVE-2025-13640 Inappropriate implementation in Passwords in Google Chrome prior to 143.0.7499.41 allowed a local attacker to bypass… 3.5 Low Dec 2, 2025
CVE-2025-13639 Inappropriate implementation in WebRTC in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to perform… 8.1 High Dec 2, 2025
CVE-2025-13638 Use after free in Media Stream in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially… 8.8 High Dec 2, 2025
CVE-2025-13637 Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who… 4.3 Medium Dec 2, 2025
CVE-2025-13636 Inappropriate implementation in Split View in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who… 4.3 Medium Dec 2, 2025

Other Google products