Archive · Chrome
Release — Chrome · 2026-09-08
230 CVEs in this release · 230 mapped
· original advisory ↗
CVEs 230
| CVE | Component | Class | Severity | ITW | Fix | RCA |
|---|---|---|---|---|---|---|
| CVE-2026-87429 | ServiceWorker | Logic Error | Low | — | ● | — |
| CVE-2026-87430 | WebRTC | OOB | Low | — | ● | ✓ |
| CVE-2026-87431 | Extensions | Logic Error | Medium | — | ● | — |
| CVE-2026-87432 | Navigation | Logic Error | Medium | — | ● | — |
| CVE-2026-87433 | FileAPI | Race | Medium | — | ● | — |
| CVE-2026-87434 | CORS | Cross Origin | Medium | — | ● | — |
| CVE-2026-87435 | ControlledFrame | Logic Error | Medium | — | ● | — |
| CVE-2026-87436 | Browser | Logic Error | Medium | — | ● | — |
| CVE-2026-87437 | Frames | Logic Error | Low | — | ● | — |
| CVE-2026-87438 | WebGL | OOB | Critical | — | ● | ✓ |
| CVE-2026-87439 | ServiceWorker | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-87440 | Media | OOB | High | — | ● | ✓ |
| CVE-2026-87441 | Downloads | Logic Error | Medium | — | ● | — |
| CVE-2026-87442 | Prerender | Logic Error | Medium | — | ● | — |
| CVE-2026-87443 | Actor | Logic Error | Medium | — | ● | — |
| CVE-2026-87444 | Codecs | Memory Corruption | High | — | ● | ✓ |
| CVE-2026-87445 | Session | Logic Error | Medium | — | ● | — |
| CVE-2026-87446 | Extensions | Logic Error | Medium | — | ● | — |
| CVE-2026-87447 | Network | Logic Error | High | — | ● | ✓ |
| CVE-2026-87448 | DevTools | UAF | Low | — | ● | — |
| CVE-2026-87449 | DeviceBoundSessionCredentials | Logic Error | Medium | — | ● | — |
| CVE-2026-87450 | Permissions | Logic Error | Medium | — | ● | — |
| CVE-2026-87451 | Downloads | Logic Error | Medium | — | ● | — |
| CVE-2026-87452 | GPU | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-87453 | BackgroundFetch | Logic Error | Medium | — | ● | — |
| CVE-2026-87454 | Enterprise | Logic Error | Medium | — | ● | — |
| CVE-2026-87455 | Aura | UAF | Medium | — | ● | — |
| CVE-2026-87456 | Media | Uninitialized Memory | Medium | — | ● | — |
| CVE-2026-87457 | Updater | Race | Medium | — | ● | — |
| CVE-2026-87458 | Geometry | Logic Error | Medium | — | ● | — |
| CVE-2026-87459 | Select | Logic Error | Low | — | ● | — |
| CVE-2026-87460 | Platform | UAF | High | — | ● | — |
| CVE-2026-87461 | Core | Logic Error | Low | — | ● | — |
| CVE-2026-87462 | FedCM | Logic Error | Medium | — | ● | — |
| CVE-2026-87463 | Certificate | Logic Error | Low | — | ● | — |
| CVE-2026-87464 | WebGL | UAF | Critical | — | ● | ✓ |
| CVE-2026-87465 | Downloads | Logic Error | Medium | — | ● | — |
| CVE-2026-87466 | Workers | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-87467 | Updater | Race | High | — | ● | — |
| CVE-2026-87468 | Isolated | Logic Error | Medium | — | ● | — |
| CVE-2026-87469 | Extensions | Logic Error | Low | — | ● | — |
| CVE-2026-87470 | Tint | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-87471 | ServiceWorker | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-87472 | FedCM | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-87473 | FileHandling | Logic Error | Low | — | ● | — |
| CVE-2026-87474 | Payments | UAF | High | — | ● | — |
| CVE-2026-87475 | Omnibox | Logic Error | Medium | — | ● | — |
| CVE-2026-87476 | Loader | Logic Error | Medium | — | ● | — |
| CVE-2026-87477 | Core | Logic Error | Low | — | ● | — |
| CVE-2026-87478 | Autofill | Logic Error | Medium | — | ● | — |
| CVE-2026-87479 | Extensions | Logic Error | Medium | — | ● | — |
| CVE-2026-87480 | Printing | UAF | High | — | ● | — |
| CVE-2026-87481 | WebView | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-87482 | HttpsUpgrades | Logic Error | Medium | — | ● | — |
| CVE-2026-87483 | Browser | Logic Error | Medium | — | ● | — |
| CVE-2026-87484 | Geometry | Logic Error | Medium | — | ● | — |
| CVE-2026-87485 | CORS | Cross Origin | Medium | — | ● | — |
| CVE-2026-87486 | TrustedWebActivities | Logic Error | Medium | — | ● | — |
| CVE-2026-87487 | FileSystem | Logic Error | Medium | — | ● | — |
| CVE-2026-87488 | WebGL | UAF | Critical | — | ● | ✓ |
| CVE-2026-87489 | V8 | Memory Corruption | Low | — | ● | ✓ |
| CVE-2026-87490 | Transactions Platform | Logic Error | Low | — | ● | — |
| CVE-2026-87491 | V8 | OOB | Medium | ⚠ | ● | ✓ |
| CVE-2026-87492 | DevTools | Logic Error | High | — | ● | — |
| CVE-2026-87493 | FileSystem | Logic Error | Medium | — | ● | — |
| CVE-2026-87494 | Browser | UAF | Medium | — | ● | — |
| CVE-2026-87495 | Scroll | Logic Error | Medium | — | ● | — |
| CVE-2026-87496 | Browser | Logic Error | Medium | — | ● | — |
| CVE-2026-87497 | Codecs | Uninitialized Memory | Medium | — | ● | — |
| CVE-2026-87498 | WebUI | Logic Error | High | — | ● | — |
| CVE-2026-87499 | Network | Logic Error | High | — | ● | ✓ |
| CVE-2026-87500 | ANGLE | Logic Error | High | — | ● | ✓ |
| CVE-2026-87501 | Passwords | Logic Error | Medium | — | ● | — |
| CVE-2026-87502 | Fullscreen | Logic Error | Low | — | ● | — |
| CVE-2026-87503 | Downloads | Logic Error | Medium | — | ● | — |
| CVE-2026-87504 | Core | UAF | Medium | — | ● | — |
| CVE-2026-87505 | FileSystem | Logic Error | Medium | — | ● | — |
| CVE-2026-87506 | WebUI | Logic Error | Medium | — | ● | — |
| CVE-2026-87507 | Downloads | Logic Error | Medium | — | ● | — |
| CVE-2026-87508 | Loader | Logic Error | Medium | — | ● | — |
| CVE-2026-87509 | Updater | Logic Error | Low | — | ● | — |
| CVE-2026-87510 | FileAPI | Logic Error | Medium | — | ● | — |
| CVE-2026-87511 | DevTools | Logic Error | Low | — | ● | — |
| CVE-2026-87512 | ANGLE | UAF | High | — | ● | ✓ |
| CVE-2026-87513 | ControlledFrame | Logic Error | Medium | — | ● | — |
| CVE-2026-87514 | Views | UAF | High | — | ● | — |
| CVE-2026-87515 | FileAPI | Logic Error | Medium | — | ● | — |
| CVE-2026-87516 | Navigation | Logic Error | Medium | — | ● | — |
| CVE-2026-87517 | Mobile | Race | High | — | ● | — |
| CVE-2026-87518 | Safebrowsing | Logic Error | Medium | — | ● | — |
| CVE-2026-87519 | Safebrowsing | Logic Error | Low | — | ● | — |
| CVE-2026-87520 | Dawn | UAF | High | — | ● | ✓ |
| CVE-2026-87521 | WebMCP | Logic Error | Medium | — | ● | — |
| CVE-2026-87522 | WebView | Logic Error | Low | — | ● | — |
| CVE-2026-87523 | DataTransfer | Race | Low | — | ● | — |
| CVE-2026-87524 | Core | UAF | High | — | ● | — |
| CVE-2026-87525 | Chromoting | OOB | High | — | ● | — |
| CVE-2026-87526 | Passwords | UAF | Medium | — | ● | — |
| CVE-2026-87527 | WebGL | OOB | Critical | — | ● | ✓ |
| CVE-2026-87528 | Rust | Type Confusion | Medium | — | ● | — |
| CVE-2026-87529 | Media | Logic Error | Medium | — | ● | — |
| CVE-2026-87530 | CredentialProvider | Logic Error | Medium | — | ● | — |
| CVE-2026-87531 | CORS | Cross Origin | Medium | — | ● | — |
| CVE-2026-87532 | Safebrowsing | Logic Error | Medium | — | ● | — |
| CVE-2026-87533 | DevTools | UAF | Medium | — | ● | — |
| CVE-2026-87534 | WebView | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-87535 | Safebrowsing | Logic Error | Medium | — | ● | — |
| CVE-2026-87536 | V8 | UAF | High | — | ● | ✓ |
| CVE-2026-87537 | Extensions | Logic Error | Medium | — | ● | — |
| CVE-2026-87538 | Input | Logic Error | Low | — | ● | — |
| CVE-2026-87539 | Network | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-87540 | Isolated | Logic Error | Medium | — | ● | — |
| CVE-2026-87541 | Navigation | Logic Error | Medium | — | ● | — |
| CVE-2026-87542 | Input | UAF | High | — | ● | — |
| CVE-2026-87543 | Core | Logic Error | Low | — | ● | — |
| CVE-2026-87544 | Extensions | Logic Error | Low | — | ● | — |
| CVE-2026-87545 | Mobile | Logic Error | Low | — | ● | — |
| CVE-2026-87546 | Safebrowsing | Type Confusion | Low | — | ● | — |
| CVE-2026-87547 | FileSystem | Logic Error | Medium | — | ● | — |
| CVE-2026-87548 | Installer | Logic Error | Medium | — | ● | — |
| CVE-2026-87549 | Downloads | Logic Error | Medium | — | ● | — |
| CVE-2026-87550 | CSS | Logic Error | Medium | — | ● | — |
| CVE-2026-87551 | CORS | Cross Origin | Low | — | ● | — |
| CVE-2026-87552 | TrustedWebActivities | Logic Error | High | — | ● | — |
| CVE-2026-87553 | SiteIsolation | Logic Error | Medium | — | ● | — |
| CVE-2026-87554 | Chromoting | Race | High | — | ● | — |
| CVE-2026-87555 | GPU | Uninitialized Memory | Medium | — | ● | ✓ |
| CVE-2026-87556 | Browser | Logic Error | Medium | — | ● | — |
| CVE-2026-87557 | LocalNetworkAccess | Logic Error | Medium | — | ● | — |
| CVE-2026-87558 | Payments | UAF | High | — | ● | — |
| CVE-2026-87559 | UI | Logic Error | Medium | — | ● | — |
| CVE-2026-87560 | Browser | Logic Error | Medium | — | ● | — |
| CVE-2026-87561 | Web Authentication | Logic Error | Low | — | ● | — |
| CVE-2026-87562 | Accessibility | Logic Error | Medium | — | ● | — |
| CVE-2026-87563 | Paint | Logic Error | Medium | — | ● | — |
| CVE-2026-87564 | V8 | Type Confusion | High | — | ● | ✓ |
| CVE-2026-87565 | Passwords | Logic Error | Low | — | ● | — |
| CVE-2026-87566 | Layout | Logic Error | Medium | — | ● | — |
| CVE-2026-87567 | UrlFormatting | Logic Error | Medium | — | ● | — |
| CVE-2026-87568 | Chromium | Logic Error | Low | — | ● | — |
| CVE-2026-87569 | Views | Logic Error | High | — | ● | — |
| CVE-2026-87570 | SiteIsolation | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-87571 | Loader | Logic Error | Low | — | ● | — |
| CVE-2026-87572 | DevTools | Logic Error | High | — | ● | — |
| CVE-2026-87573 | Network | Logic Error | Medium | — | ● | — |
| CVE-2026-87574 | ServiceWorker | Logic Error | Medium | — | ● | — |
| CVE-2026-87575 | Loader | Logic Error | Low | — | ● | — |
| CVE-2026-87576 | GPU | Uninitialized Memory | Medium | — | ● | — |
| CVE-2026-87577 | Isolated | Logic Error | Medium | — | ● | — |
| CVE-2026-87578 | Receiver | UAF | High | — | ● | — |
| CVE-2026-87579 | WebRTC | OOB | Medium | — | ● | — |
| CVE-2026-87580 | WebAppInstalls | Logic Error | Medium | — | ● | — |
| CVE-2026-87581 | Payments | UAF | High | — | ● | — |
| CVE-2026-87582 | DataTransfer | Logic Error | Medium | — | ● | — |
| CVE-2026-87583 | Passwords | Logic Error | Low | — | ● | — |
| CVE-2026-87584 | WebUI | Logic Error | Medium | — | ● | — |
| CVE-2026-87585 | PDFium | Logic Error | High | — | ● | ✓ |
| CVE-2026-87586 | ANGLE | OOB | Medium | — | ● | — |
| CVE-2026-87587 | V8 | UAF | High | — | ● | — |
| CVE-2026-87588 | Chromecast | UAF | Medium | — | ● | — |
| CVE-2026-87589 | SiteIsolation | Logic Error | Medium | — | ● | — |
| CVE-2026-87590 | Passwords | Logic Error | Medium | — | ● | — |
| CVE-2026-87591 | Extensions | Logic Error | Medium | — | ● | — |
| CVE-2026-87592 | Tint | OOB | Low | — | ● | — |
| CVE-2026-87593 | Editing | Logic Error | Low | — | ● | — |
| CVE-2026-87594 | DataTransfer | Logic Error | Medium | — | ● | — |
| CVE-2026-87595 | Mobile | Logic Error | Low | — | ● | — |
| CVE-2026-87596 | ANGLE | OOB | High | — | ● | ✓ |
| CVE-2026-87597 | CustomTabs | Logic Error | Low | — | ● | — |
| CVE-2026-87598 | ServiceWorker | Logic Error | Low | — | ● | — |
| CVE-2026-87599 | Interstitials | Logic Error | Medium | — | ● | — |
| CVE-2026-87600 | Safebrowsing | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-87601 | V8 | Race | Low | — | ● | — |
| CVE-2026-87602 | ANGLE | OOB | Low | — | ● | — |
| CVE-2026-87603 | FileSystem | Logic Error | Medium | — | ● | — |
| CVE-2026-87604 | ANGLE | OOB | High | — | ● | — |
| CVE-2026-87605 | Contacts | Logic Error | Low | — | ● | — |
| CVE-2026-87606 | SiteIsolation | Logic Error | Medium | — | ● | — |
| CVE-2026-87607 | Device | UAF | High | — | ● | — |
| CVE-2026-87608 | FedCM | Logic Error | Low | — | ● | — |
| CVE-2026-87609 | Sharing | UAF | Medium | — | ● | — |
| CVE-2026-87610 | Omnibox | Logic Error | Medium | — | ● | — |
| CVE-2026-87611 | FileSystem | Logic Error | Medium | — | ● | — |
| CVE-2026-87612 | V8 | Type Confusion | High | — | ● | — |
| CVE-2026-87613 | Extensions | Logic Error | Medium | — | ● | — |
| CVE-2026-87614 | ServiceWorker | Logic Error | Low | — | ● | — |
| CVE-2026-87615 | Payments | Race | Medium | — | ● | — |
| CVE-2026-87616 | Views | Logic Error | Medium | — | ● | — |
| CVE-2026-87617 | DevTools | UAF | Low | — | ● | — |
| CVE-2026-87618 | Storage | Logic Error | Low | — | ● | — |
| CVE-2026-87619 | Prefetch | Logic Error | Low | — | ● | ✓ |
| CVE-2026-87620 | SVG | Logic Error | Low | — | ● | — |
| CVE-2026-87621 | ANGLE | OOB | High | — | ● | — |
| CVE-2026-87622 | FedCM | Logic Error | Medium | — | ● | — |
| CVE-2026-87623 | DOM | Logic Error | Medium | — | ● | — |
| CVE-2026-87624 | Passwords | Logic Error | Low | — | ● | — |
| CVE-2026-87625 | V8 | UAF | Medium | — | ● | ✓ |
| CVE-2026-87626 | DeviceBoundSessionCredentials | Logic Error | Medium | — | ● | — |
| CVE-2026-87627 | Safebrowsing | Logic Error | Low | — | ● | — |
| CVE-2026-87628 | Cast | UAF | Critical | — | ● | — |
| CVE-2026-87629 | Sources | Logic Error | Low | — | ● | — |
| CVE-2026-87630 | WebRTC | Integer Overflow | Medium | — | ● | ✓ |
| CVE-2026-87631 | DOM | Logic Error | Low | — | ● | — |
| CVE-2026-87632 | SanitizerAPI | Logic Error | Medium | — | ● | — |
| CVE-2026-87633 | Views | UAF | High | — | ● | — |
| CVE-2026-87634 | WebPackaging | UAF | Low | — | ● | — |
| CVE-2026-87635 | Payments | Logic Error | Medium | — | ● | — |
| CVE-2026-87636 | XML | Type Confusion | Medium | — | ● | — |
| CVE-2026-87637 | Extensions | UAF | Medium | — | ● | — |
| CVE-2026-87638 | Media | OOB | Medium | — | ● | — |
| CVE-2026-87639 | WebPackaging | UAF | High | — | ● | — |
| CVE-2026-87640 | WebView | OOB | Medium | — | ● | — |
| CVE-2026-87641 | Browser | Race | Medium | — | ● | — |
| CVE-2026-87642 | WebGL | Uninitialized Memory | Medium | — | ● | — |
| CVE-2026-87643 | GPU | Integer Overflow | Medium | — | ● | — |
| CVE-2026-87644 | Views | Logic Error | Medium | — | ● | — |
| CVE-2026-87645 | Safebrowsing | Logic Error | Medium | — | ● | — |
| CVE-2026-87646 | Web Authentication | UAF | High | — | ● | — |
| CVE-2026-87647 | GPU | Uninitialized Memory | High | — | ● | — |
| CVE-2026-87648 | ANGLE | UAF | Medium | — | ● | — |
| CVE-2026-87649 | Downloads | Logic Error | Medium | — | ● | — |
| CVE-2026-87650 | WebGL | OOB | High | — | ● | — |
| CVE-2026-87651 | Paint | Logic Error | High | — | ● | — |
| CVE-2026-87652 | PushAPI | Logic Error | Medium | — | ● | — |
| CVE-2026-87653 | FullScreen | Logic Error | Low | — | ● | — |
| CVE-2026-87654 | ANGLE | OOB | High | — | ● | — |
| CVE-2026-87655 | Downloads | Logic Error | Medium | — | ● | — |
| CVE-2026-87656 | Safebrowsing | Logic Error | Low | — | ● | — |
| CVE-2026-87657 | V8 | UAF | Medium | — | ● | — |
| CVE-2026-87658 | Extensions | Logic Error | Medium | — | ● | — |