Skip to content

Known vulnerabilities in Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-113321 Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain… 8.8 High Oct 20, 2026
CVE-2026-112999 Incorrect authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access… 8.8 High Oct 20, 2026
CVE-2026-113118 Confused deputy in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social… 8.8 High Oct 20, 2026
CVE-2026-113162 Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code… 8.8 High Oct 20, 2026
CVE-2026-113249 Missing authorization in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass… 8.8 High Oct 20, 2026
CVE-2026-113232 Use after free in Search in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the… 8.8 High Oct 20, 2026
CVE-2026-113327 Missing authorization in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had… 8.8 High Oct 20, 2026
CVE-2026-113146 Incorrect authorization in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to… 8.8 High Oct 20, 2026
CVE-2026-113183 Incorrect authorization in FedCM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web… 8.8 High Oct 20, 2026
CVE-2026-113205 Insufficient verification of data authenticity in Variations in Google Chrome prior to 156.0.8078.47 allowed an adjacent… 8.8 High Oct 20, 2026
CVE-2026-113207 Incorrect authorization in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker… 8.8 High Oct 20, 2026
CVE-2026-113289 Incorrect authorization in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain… 8.8 High Oct 20, 2026
CVE-2026-113003 Memory corruption in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute… 8.8 High Oct 20, 2026
CVE-2026-113051 Incorrect authorization in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin… 6.5 Medium Oct 20, 2026
CVE-2026-113155 Missing authorization in Glic in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social… 8.8 High Oct 20, 2026
CVE-2026-113196 Race condition in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to spoof UI… 6.5 Medium Oct 20, 2026
CVE-2026-113290 Missing authorization in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the… 8.8 High Oct 20, 2026
CVE-2026-113005 Missing authorization in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised… 8.8 High Oct 20, 2026
CVE-2026-113057 Observable discrepancy in ComputePressure in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain… 5.4 Medium Oct 20, 2026
CVE-2026-113166 Improper input validation in History in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker who… 8.8 High Oct 20, 2026
CVE-2026-113209 Incorrect authorization in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to… 6.5 Medium Oct 20, 2026
CVE-2026-113219 Missing authorization in Contacts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had… 8.8 High Oct 20, 2026
CVE-2026-113014 Missing authorization in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain… 9.6 Critical Oct 20, 2026
CVE-2026-113108 Information loss in Script in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy… 8.8 High Oct 20, 2026
CVE-2026-113283 Improper privilege management in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a… 9.6 Critical Oct 20, 2026

Other Google products