Skip to content

Known vulnerabilities in Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-87455 Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute… 9.6 Critical Sep 9, 2026
CVE-2026-87528 Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially… 9.6 Critical Sep 9, 2026
CVE-2026-87566 Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive… 5.3 Medium Sep 9, 2026
CVE-2026-87591 Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system… 6.5 Medium Sep 9, 2026
CVE-2026-87623 Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social… 6.5 Medium Sep 9, 2026
CVE-2026-87638 Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute… 9.6 Critical Sep 9, 2026
CVE-2026-87470 Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to… 9.6 Critical Sep 9, 2026
CVE-2026-87531 Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the… 3.1 Low Sep 9, 2026
CVE-2026-87529 Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially… 9.6 Critical Sep 9, 2026
CVE-2026-87584 Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system… 6.5 Medium Sep 9, 2026
CVE-2026-87586 Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the… 4.3 Medium Sep 9, 2026
CVE-2026-87632 Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web… 4.3 Medium Sep 9, 2026
CVE-2026-87637 Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute… 9.6 Critical Sep 9, 2026
CVE-2026-87431 Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain… 7.5 High Sep 9, 2026
CVE-2026-87510 Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had… 8.3 High Sep 9, 2026
CVE-2026-87435 Information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had… 5.3 Medium Sep 9, 2026
CVE-2026-87493 Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging… 6.5 Medium Sep 9, 2026
CVE-2026-87468 Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass site… 6.5 Medium Sep 9, 2026
CVE-2026-87563 Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain… 4.3 Medium Sep 9, 2026
CVE-2026-87625 Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering… 8.8 High Sep 9, 2026
CVE-2026-87533 Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code… 8.1 High Sep 9, 2026
CVE-2026-87535 Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker… 6.5 Medium Sep 9, 2026
CVE-2026-87616 Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had… 8.3 High Sep 9, 2026
CVE-2026-87635 UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI… 5.4 Medium Sep 9, 2026
CVE-2026-87641 Race condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access… 5.3 Medium Sep 9, 2026

Other Google products