Archive · Chrome
Release — Chrome · 2026-04-07
59 CVEs in this release · 59 mapped
· original advisory ↗
CVEs 59
| CVE | Component | Class | Severity | ITW | Fix | RCA |
|---|---|---|---|---|---|---|
| CVE-2026-5858 | WebML | OOB | Critical | — | ● | ✓ |
| CVE-2026-5859 | WebML | Integer Overflow | Critical | — | ● | ✓ |
| CVE-2026-5860 | WebRTC | UAF | High | — | ● | ✓ |
| CVE-2026-5861 | V8 | UAF | High | — | ● | ✓ |
| CVE-2026-5862 | V8 | Logic Error | High | — | ● | ✓ |
| CVE-2026-5863 | V8 | Logic Error | High | — | ● | ✓ |
| CVE-2026-5864 | WebAudio | OOB | High | — | ● | ✓ |
| CVE-2026-5865 | V8 | Type Confusion | High | — | ● | ✓ |
| CVE-2026-5866 | Media | UAF | High | — | ● | ✓ |
| CVE-2026-5867 | WebML | OOB | High | — | ● | ✓ |
| CVE-2026-5868 | ANGLE | OOB | High | — | ● | ✓ |
| CVE-2026-5869 | WebML | OOB | High | — | ● | ✓ |
| CVE-2026-5870 | Skia | Integer Overflow | High | — | ● | ✓ |
| CVE-2026-5871 | V8 | Type Confusion | High | — | ● | ✓ |
| CVE-2026-5872 | Blink | UAF | High | — | ● | ✓ |
| CVE-2026-5873 | V8 | OOB | High | — | ● | ✓ |
| CVE-2026-5874 | PrivateAI | UAF | Medium | — | ● | ✓ |
| CVE-2026-5875 | Blink | Policy Bypass | Medium | — | ● | ✓ |
| CVE-2026-5876 | Navigation | Info Disclosure | Medium | — | ● | ✓ |
| CVE-2026-5877 | Navigation | UAF | Medium | — | ● | ✓ |
| CVE-2026-5878 | Blink | Spoofing | Medium | — | ● | ✓ |
| CVE-2026-5879 | ANGLE | Input Validation | Medium | — | ● | ✓ |
| CVE-2026-5880 | Chromium | Spoofing | Medium | — | ● | ✓ |
| CVE-2026-5881 | LocalNetworkAccess | Policy Bypass | Medium | — | ● | ✓ |
| CVE-2026-5882 | Fullscreen | Spoofing | Medium | — | ● | ✓ |
| CVE-2026-5883 | Media | UAF | Medium | — | ● | ✓ |
| CVE-2026-5884 | Media | Input Validation | Medium | — | ● | ✓ |
| CVE-2026-5885 | WebML | Input Validation | Medium | — | ● | ✓ |
| CVE-2026-5886 | WebAudio | OOB | Medium | — | ● | ✓ |
| CVE-2026-5887 | Downloads | Input Validation | Medium | — | ● | ✓ |
| CVE-2026-5888 | WebCodecs | Uninitialized Memory | Medium | — | ● | ✓ |
| CVE-2026-5889 | PDFium | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-5890 | WebCodecs | Race | Medium | — | ● | ✓ |
| CVE-2026-5891 | Chromium | Policy Bypass | Medium | — | ● | ✓ |
| CVE-2026-5892 | PWAs | Policy Bypass | Medium | — | ● | ✓ |
| CVE-2026-5893 | V8 | Race | Medium | — | ● | ✓ |
| CVE-2026-5894 | Logic Error | Low | — | ● | ✓ | |
| CVE-2026-5895 | Omnibox | Spoofing | Low | — | ● | ✓ |
| CVE-2026-5896 | Audio | Policy Bypass | Low | — | ● | ✓ |
| CVE-2026-5897 | Downloads | Spoofing | Low | — | ● | ✓ |
| CVE-2026-5898 | Omnibox | Spoofing | Low | — | ● | ✓ |
| CVE-2026-5899 | History Navigation | Spoofing | Low | — | ● | ✓ |
| CVE-2026-5900 | Downloads | Policy Bypass | Low | — | ● | ✓ |
| CVE-2026-5901 | DevTools | Policy Bypass | Low | — | ● | ✓ |
| CVE-2026-5902 | Media | Race | Low | — | ● | ✓ |
| CVE-2026-5903 | IFrameSandbox | Sandbox Escape | Low | — | ● | ✓ |
| CVE-2026-5905 | Permissions | Spoofing | Low | — | ● | ✓ |
| CVE-2026-5906 | Omnibox | Spoofing | Low | — | ● | ✓ |
| CVE-2026-5907 | Media | Input Validation | Low | — | ● | ✓ |
| CVE-2026-5908 | Media | Integer Overflow | Low | — | ● | ✓ |
| CVE-2026-5909 | Media | Integer Overflow | Low | — | ● | ✓ |
| CVE-2026-5910 | Media | Integer Overflow | Low | — | ● | ✓ |
| CVE-2026-5911 | ServiceWorkers | Policy Bypass | Low | — | ● | ✓ |
| CVE-2026-5912 | WebRTC | Integer Overflow | Low | — | ● | ✓ |
| CVE-2026-5913 | Blink | OOB | Low | — | ● | ✓ |
| CVE-2026-5914 | CSS | Type Confusion | Low | — | ● | ✓ |
| CVE-2026-5915 | WebML | Input Validation | Low | — | ● | ✓ |
| CVE-2026-5918 | Navigation | Logic Error | Low | — | ● | ✓ |
| CVE-2026-5919 | WebSockets | Input Validation | Low | — | ● | ✓ |