Skip to content

Known vulnerabilities in Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-106415 Information leak in Enterprise in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive… 4.3 Medium Oct 6, 2026
CVE-2026-106225 Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social… 8.8 High Oct 6, 2026
CVE-2026-106217 Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had… 4.3 Medium Oct 6, 2026
CVE-2026-106266 Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had… 6.5 Medium Oct 6, 2026
CVE-2026-106363 Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had… 8.3 High Oct 6, 2026
CVE-2026-106381 Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to… 6.5 Medium Oct 6, 2026
CVE-2026-106425 Missing authorization in BrowserTag in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had… 4.2 Medium Oct 6, 2026
CVE-2026-106241 Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker… 9.6 Critical Oct 6, 2026
CVE-2026-106242 Information leak in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging… 6.5 Medium Oct 6, 2026
CVE-2026-106223 Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read… 4.7 Medium Oct 6, 2026
CVE-2026-106300 Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the… 4.7 Medium Oct 6, 2026
CVE-2026-106291 Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute… 8.8 High Oct 6, 2026
CVE-2026-106283 Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social… 8.8 High Oct 6, 2026
CVE-2026-106314 Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain… 8.8 High Oct 6, 2026
CVE-2026-106194 Missing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had… 8.3 High Oct 6, 2026
CVE-2026-106267 Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised… 6.5 Medium Oct 6, 2026
CVE-2026-106274 Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker… 8.8 High Oct 6, 2026
CVE-2026-106313 Incorrect authorization in Browser in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker… 5.1 Medium Oct 6, 2026
CVE-2026-106315 Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute… 8.8 High Oct 6, 2026
CVE-2026-106365 Missing authorization in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web… 6.5 Medium Oct 6, 2026
CVE-2026-106181 Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had… 5.3 Medium Oct 6, 2026
CVE-2026-106238 Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the… 8.3 High Oct 6, 2026
CVE-2026-106208 Missing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social… 6.5 Medium Oct 6, 2026
CVE-2026-106222 Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive… 5.9 Medium Oct 6, 2026
CVE-2026-106286 Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy… 6.5 Medium Oct 6, 2026

Other Google products