Skip to content

Vulnerabilities of Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-121202 Use after free in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social… 9.6 Critical Nov 3, 2026
CVE-2026-121257 Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute… 9.6 Critical Nov 3, 2026
CVE-2026-121096 Incomplete cleanup in V8 in Google Chrome prior to 157.0.8103.38 allowed a local attacker to read memory via a local… Not rated Nov 3, 2026
CVE-2026-121184 Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute… 8.8 High Nov 3, 2026
CVE-2026-121194 Missing authorization in SiteIsolation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had… 5.3 Medium Nov 3, 2026
CVE-2026-121215 UI misrepresentation in Bluetooth in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements… 5.4 Medium Nov 3, 2026
CVE-2026-121212 Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin… 8.8 High Nov 3, 2026
CVE-2026-121067 UI misrepresentation in PermissionElement in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging… 5.4 Medium Nov 3, 2026
CVE-2026-121116 Missing authorization in WebView in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker who had… 5.3 Medium Nov 3, 2026
CVE-2026-121171 Confused deputy in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social… 8.8 High Nov 3, 2026
CVE-2026-121132 Information leak in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via… 6.5 Medium Nov 3, 2026
CVE-2026-121187 Observable discrepancy in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive… 5.3 Medium Nov 3, 2026
CVE-2026-121239 Information leak in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data… 6.5 Medium Nov 3, 2026
CVE-2026-121033 Uninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker who had… Not rated Nov 3, 2026
CVE-2026-121065 Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging… 8.8 High Nov 3, 2026
CVE-2026-121088 Missing authorization in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain… 6.5 Medium Nov 3, 2026
CVE-2026-121163 Improper input validation in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had… 8.3 High Nov 3, 2026
CVE-2026-121254 Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive… 6.5 Medium Nov 3, 2026
CVE-2026-121030 Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging… 9.6 Critical Nov 3, 2026
CVE-2026-121059 Information leak in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to leak cross-origin data via… 6.5 Medium Nov 3, 2026
CVE-2026-121075 Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social… Not rated Nov 3, 2026
CVE-2026-121170 Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web… 8.8 High Nov 3, 2026
CVE-2026-121220 Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised… Not rated Nov 3, 2026
CVE-2026-121040 Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised… Not rated Nov 3, 2026
CVE-2026-121072 Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain… 6.5 Medium Nov 3, 2026

Other Google products