Skip to content

Known vulnerabilities in Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-102310 Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had… 6.5 Medium Sep 29, 2026
CVE-2026-102302 Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside… 8.8 High Sep 29, 2026
CVE-2026-102315 Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who… 3.4 Low Sep 29, 2026
CVE-2026-102320 Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised… 6.5 Medium Sep 29, 2026
CVE-2026-102321 Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code… 8.8 High Sep 29, 2026
CVE-2026-102308 Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social… 9.6 Critical Sep 29, 2026
CVE-2026-102301 Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the… 8.3 High Sep 29, 2026
CVE-2026-102324 Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised… 8.3 High Sep 29, 2026
CVE-2026-102318 Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside the… 4.7 Medium Sep 29, 2026
CVE-2026-102329 Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin… 6.1 Medium Sep 29, 2026
CVE-2026-102319 Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised… 3.4 Low Sep 29, 2026
CVE-2026-102304 Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary… 9.6 Critical Sep 29, 2026
CVE-2026-102309 Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code… 9.6 Critical Sep 29, 2026
CVE-2026-102325 Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain… 4.3 Medium Sep 29, 2026
CVE-2026-102316 Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social… 9.6 Critical Sep 29, 2026
CVE-2026-102328 Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code… 8.8 High Sep 29, 2026
CVE-2026-102303 Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to… 4.3 Medium Sep 29, 2026
CVE-2026-102307 Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read… 4.7 Medium Sep 29, 2026
CVE-2026-102300 Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain… 4.3 Medium Sep 29, 2026
CVE-2026-102311 Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had… 3.4 Low Sep 29, 2026
CVE-2026-102326 Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code… 8.8 High Sep 29, 2026
CVE-2026-102323 Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code… 8.8 High Sep 29, 2026
CVE-2026-102306 Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute… 9.6 Critical Sep 29, 2026
CVE-2026-102299 Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code… 8.8 High Sep 29, 2026
CVE-2026-102313 Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to… 4.7 Medium Sep 29, 2026

Other Google products