Skip to content

Known vulnerabilities in Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-87551 Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging… 4.3 Medium Sep 9, 2026
CVE-2026-87571 Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging… 5.4 Medium Sep 9, 2026
CVE-2026-87601 Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code… 7.5 High Sep 9, 2026
CVE-2026-87602 Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to… 4.7 Medium Sep 9, 2026
CVE-2026-87608 Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging… 7.5 High Sep 9, 2026
CVE-2026-87461 Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via… 4.3 Medium Sep 9, 2026
CVE-2026-87473 Incorrect authorization in FileHandling in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging… 6.5 Medium Sep 9, 2026
CVE-2026-87469 Improper input validation in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass… 4.3 Medium Sep 9, 2026
CVE-2026-87489 Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute… 8.8 High Sep 9, 2026
CVE-2026-87575 Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social… 5.4 Medium Sep 9, 2026
CVE-2026-87631 Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak… 6.5 Medium Sep 9, 2026
CVE-2026-87490 Information leak in Transactions Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain… 6.5 Medium Sep 9, 2026
CVE-2026-87509 Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to… 8.1 High Sep 9, 2026
CVE-2026-87583 UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to… 5.4 Medium Sep 9, 2026
CVE-2026-87597 UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to… 4.8 Medium Sep 9, 2026
CVE-2026-87605 Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had… 5.3 Medium Sep 9, 2026
CVE-2026-87624 UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who… 4.2 Medium Sep 9, 2026
CVE-2026-87463 Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker… 4.8 Medium Sep 9, 2026
CVE-2026-87523 Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social… 6.5 Medium Sep 9, 2026
CVE-2026-87545 Information leak in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social… 6.5 Medium Sep 9, 2026
CVE-2026-87546 Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote… 4.3 Medium Sep 9, 2026
CVE-2026-87538 Clickjacking in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer… 4.2 Medium Sep 9, 2026
CVE-2026-87565 Information leak in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to leak… 6.5 Medium Sep 9, 2026
CVE-2026-87617 Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social… 8.8 High Sep 9, 2026
CVE-2026-87448 Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code… 9.6 Critical Sep 9, 2026

Other Google products