Skip to content

Vulnerabilities of Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-121120 Improper input validation in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had… 8.8 High Nov 3, 2026
CVE-2026-121161 Information leak in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain… 6.5 Medium Nov 3, 2026
CVE-2026-121105 Information leak in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin… 6.5 Medium Nov 3, 2026
CVE-2026-121237 Improper state validation in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging… Not rated Nov 3, 2026
CVE-2026-121244 UI misrepresentation in FileAPI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social… 5.4 Medium Nov 3, 2026
CVE-2026-121242 Improper input validation in WebPackaging in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass… Not rated Nov 3, 2026
CVE-2026-121060 Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging… 9.6 Critical Nov 3, 2026
CVE-2026-121076 Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social… 9.6 Critical Nov 3, 2026
CVE-2026-121078 Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute… 8.8 High Nov 3, 2026
CVE-2026-121119 Use after free in Controls in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code… 8.8 High Nov 3, 2026
CVE-2026-121221 Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute… 8.8 High Nov 3, 2026
CVE-2026-121034 Use after free in Views in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging… 9.6 Critical Nov 3, 2026
CVE-2026-121036 Use after free in CSS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside… 8.8 High Nov 3, 2026
CVE-2026-121104 Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging… 9.6 Critical Nov 3, 2026
CVE-2026-121129 Use after free in WebRTC in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code… 8.8 High Nov 3, 2026
CVE-2026-121208 Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute… 8.8 High Nov 3, 2026
CVE-2026-121211 Use after free in PowerBookmarks in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised… 8.3 High Nov 3, 2026
CVE-2026-121068 Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code… 8.8 High Nov 3, 2026
CVE-2026-121137 Type confusion in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social… 8.8 High Nov 3, 2026
CVE-2026-121160 Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside… Not rated Nov 3, 2026
CVE-2026-121226 Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute… 8.8 High Nov 3, 2026
CVE-2026-121227 Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the… Not rated Nov 3, 2026
CVE-2026-121061 Use after free in Modularization in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute… 8.8 High Nov 3, 2026
CVE-2026-121117 Use after free in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code… 8.8 High Nov 3, 2026
CVE-2026-121182 Use after free in DOM in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside… 8.8 High Nov 3, 2026

Other Google products