Skip to content

Known vulnerabilities in Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-106324 Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote… 6.1 Medium Oct 6, 2026
CVE-2026-106420 Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker… 5.4 Medium Oct 6, 2026
CVE-2026-106204 Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside… 8.8 High Oct 6, 2026
CVE-2026-106200 Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… 8.8 High Oct 6, 2026
CVE-2026-106265 UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social… 5.4 Medium Oct 6, 2026
CVE-2026-106349 Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… 8.8 High Oct 6, 2026
CVE-2026-106383 Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… 8.8 High Oct 6, 2026
CVE-2026-106421 Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside… 8.8 High Oct 6, 2026
CVE-2026-106184 Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin… 4.3 Medium Oct 6, 2026
CVE-2026-106240 Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… 8.8 High Oct 6, 2026
CVE-2026-106190 Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… 8.8 High Oct 6, 2026
CVE-2026-106346 Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially… 8.8 High Oct 6, 2026
CVE-2026-106357 Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… 8.8 High Oct 6, 2026
CVE-2026-106411 Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… 8.8 High Oct 6, 2026
CVE-2026-106423 Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… 8.8 High Oct 6, 2026
CVE-2026-106235 Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… 8.8 High Oct 6, 2026
CVE-2026-106233 Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the… 8.3 High Oct 6, 2026
CVE-2026-106257 Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… 8.8 High Oct 6, 2026
CVE-2026-106268 Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… 8.8 High Oct 6, 2026
CVE-2026-106278 Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering… 8.8 High Oct 6, 2026
CVE-2026-106318 Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… 8.8 High Oct 6, 2026
CVE-2026-106227 Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… 9.6 Critical Oct 6, 2026
CVE-2026-106248 Use after free in Bindings in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… 8.8 High Oct 6, 2026
CVE-2026-106211 Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social… 9.6 Critical Oct 6, 2026
CVE-2026-106255 Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute… 8.8 High Oct 6, 2026

Other Google products