Skip to content

Known vulnerabilities in Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-102312 UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof… 4.3 Medium Sep 29, 2026
CVE-2026-102317 Improper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92 allowed a local attacker… 8.6 High Sep 29, 2026
CVE-2026-102331 Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to… 9.6 Critical Sep 29, 2026
CVE-2026-95305 UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social… 4.8 Medium Sep 29, 2026
CVE-2026-95340 Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging… 4.3 Medium Sep 29, 2026
CVE-2026-95364 Improper input validation in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI… 5.4 Medium Sep 29, 2026
CVE-2026-95296 Missing authorization in Core in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker leveraging… 4.3 Medium Sep 29, 2026
CVE-2026-95316 Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially… 2.9 Low Sep 29, 2026
CVE-2026-95328 Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker leveraging… 6.5 Medium Sep 29, 2026
CVE-2026-95342 Missing authorization in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin… 4.3 Medium Sep 29, 2026
CVE-2026-95288 UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI… 5.4 Medium Sep 29, 2026
CVE-2026-95309 UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI… 5.4 Medium Sep 29, 2026
CVE-2026-95361 Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social… 4.3 Medium Sep 29, 2026
CVE-2026-95380 Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering… 8.8 High Sep 29, 2026
CVE-2026-95326 Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social… 8.4 High Sep 29, 2026
CVE-2026-95319 Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the… 8.3 High Sep 29, 2026
CVE-2026-95368 Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging… 4.3 Medium Sep 29, 2026
CVE-2026-95385 Inappropriate implementation in PlatformIntegration in Google Chrome on on Windows prior to 154.0.8037.57 allowed a… 6.5 Medium Sep 29, 2026
CVE-2026-95279 UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof… 5.4 Medium Sep 29, 2026
CVE-2026-95308 Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the… 3.4 Low Sep 29, 2026
CVE-2026-95292 Incorrect authorization in Safebrowsing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass… 4.8 Medium Sep 29, 2026
CVE-2026-95367 Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised… 5.3 Medium Sep 29, 2026
CVE-2026-95352 Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging… 5.4 Medium Sep 29, 2026
CVE-2026-95278 Missing authorization in WakeLock in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had… 8.4 High Sep 29, 2026
CVE-2026-95327 Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to leak sensitive… 6.5 Medium Sep 29, 2026

Other Google products