Skip to content

Known vulnerabilities in Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-87481 Incorrect authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who… 8.3 High Sep 9, 2026
CVE-2026-87471 Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had… 8.1 High Sep 9, 2026
CVE-2026-87503 Inappropriate implementation in Downloads in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote… 6.5 Medium Sep 9, 2026
CVE-2026-87485 Incorrect authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised… 3.1 Low Sep 9, 2026
CVE-2026-87537 Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had… 8.1 High Sep 9, 2026
CVE-2026-87442 Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the… 3.1 Low Sep 9, 2026
CVE-2026-87433 Race condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the… 8.8 High Sep 9, 2026
CVE-2026-87457 Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute… 8.1 High Sep 9, 2026
CVE-2026-87506 Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the… 8.3 High Sep 9, 2026
CVE-2026-87557 Missing authorization in LocalNetworkAccess in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had… 4.3 Medium Sep 9, 2026
CVE-2026-87515 Incorrect authorization in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social… 6.5 Medium Sep 9, 2026
CVE-2026-87456 Uninitialized resource in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised… 3.4 Low Sep 9, 2026
CVE-2026-87465 Incorrect authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had… 4.2 Medium Sep 9, 2026
CVE-2026-87553 Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had… 8.3 High Sep 9, 2026
CVE-2026-87547 Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker… 9.6 Critical Sep 9, 2026
CVE-2026-87606 Missing authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had… 8.1 High Sep 9, 2026
CVE-2026-87658 Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social… 4.3 Medium Sep 9, 2026
CVE-2026-87434 Missing authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised… 3.1 Low Sep 9, 2026
CVE-2026-87453 Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised… 5.3 Medium Sep 9, 2026
CVE-2026-87487 Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had… 8.3 High Sep 9, 2026
CVE-2026-87588 Use after free in Chromecast in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code… 8.8 High Sep 9, 2026
CVE-2026-87611 Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had… 3.1 Low Sep 9, 2026
CVE-2026-87636 Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary… 8.8 High Sep 9, 2026
CVE-2026-87446 Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social… 6.5 Medium Sep 9, 2026
CVE-2026-87491 Exploited Google Chromium V8 Out of Bounds Write Vulnerability 8.8 High Sep 9, 2026

Other Google products