Skip to content

Known vulnerabilities in Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-87459 Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive… 6.5 Medium Sep 9, 2026
CVE-2026-87502 Confused deputy in Fullscreen in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised… 4.2 Medium Sep 9, 2026
CVE-2026-87592 Out of bounds read in Tint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially read… 4.3 Medium Sep 9, 2026
CVE-2026-87595 Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging… 9.8 Critical Sep 9, 2026
CVE-2026-87620 Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive… 6.5 Medium Sep 9, 2026
CVE-2026-87511 Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain… 4.3 Medium Sep 9, 2026
CVE-2026-87522 Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker… 6.5 Medium Sep 9, 2026
CVE-2026-87543 Missing authorization in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised… 4.3 Medium Sep 9, 2026
CVE-2026-87568 Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had… 4.8 Medium Sep 9, 2026
CVE-2026-87627 Interpretation conflict in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker… 6.5 Medium Sep 9, 2026
CVE-2026-87656 Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass… 5.4 Medium Sep 9, 2026
CVE-2026-87429 Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had… 6.5 Medium Sep 9, 2026
CVE-2026-87519 Incorrect authorization in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging… 6.5 Medium Sep 9, 2026
CVE-2026-87561 Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to… 4.3 Medium Sep 9, 2026
CVE-2026-87598 Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web… 4.3 Medium Sep 9, 2026
CVE-2026-87614 Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had… 3.1 Low Sep 9, 2026
CVE-2026-87618 Incorrect reference resolution in Storage in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote… 8.3 High Sep 9, 2026
CVE-2026-87619 Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak… 4.3 Medium Sep 9, 2026
CVE-2026-87526 Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social… 9.6 Critical Sep 9, 2026
CVE-2026-87610 Incorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system… 6.5 Medium Sep 9, 2026
CVE-2026-87609 Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute… 9.6 Critical Sep 9, 2026
CVE-2026-87626 Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote… 6.5 Medium Sep 9, 2026
CVE-2026-87634 Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially… 9.6 Critical Sep 9, 2026
CVE-2026-87629 Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social… 6.5 Medium Sep 9, 2026
CVE-2026-87653 UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to… 5.4 Medium Sep 9, 2026

Other Google products