Skip to content

Known vulnerabilities in Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-106376 Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to… 4.7 Medium Oct 6, 2026
CVE-2026-106366 Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to… 5.4 Medium Oct 6, 2026
CVE-2026-106369 Missing authorization in Translate in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised… 4.2 Medium Oct 6, 2026
CVE-2026-102322 Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute… 9.6 Critical Oct 6, 2026
CVE-2026-106245 Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin… 4.3 Medium Oct 6, 2026
CVE-2026-106327 Incorrect authorization in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised… 8.3 High Oct 6, 2026
CVE-2026-106347 Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… 8.8 High Oct 6, 2026
CVE-2026-106197 Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… 9.6 Critical Oct 6, 2026
CVE-2026-106358 Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… 9.6 Critical Oct 6, 2026
CVE-2026-106382 Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code… 9.6 Critical Oct 6, 2026
CVE-2026-103623 Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary… 8.8 High Oct 2, 2026
CVE-2026-103627 Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to obtain sensitive… 6.5 Medium Oct 2, 2026
CVE-2026-103631 Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code… 8.8 High Oct 2, 2026
CVE-2026-103622 Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside… 8.8 High Oct 2, 2026
CVE-2026-103624 Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who… 8.3 High Oct 2, 2026
CVE-2026-103629 Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via… 4.3 Medium Oct 2, 2026
CVE-2026-103625 Type confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code… 8.8 High Oct 2, 2026
CVE-2026-103621 Integer overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin… 4.3 Medium Oct 2, 2026
CVE-2026-103630 Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code… 9.6 Critical Oct 2, 2026
CVE-2026-103626 Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker… 9.6 Critical Oct 2, 2026
CVE-2026-103628 Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code… 9.6 Critical Oct 2, 2026
CVE-2026-102305 UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI… 5.4 Medium Sep 29, 2026
CVE-2026-102314 UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI… 5.4 Medium Sep 29, 2026
CVE-2026-102327 Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who… 7.5 High Sep 29, 2026
CVE-2026-102330 Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had… 6.5 Medium Sep 29, 2026

Other Google products