Archive · Chrome
Release — Chrome · 2026-09-15
42 CVEs in this release · 42 mapped
· original advisory ↗
CVEs 42
| CVE | Component | Class | Severity | ITW | Fix | RCA |
|---|---|---|---|---|---|---|
| CVE-2026-91708 | Network | Race | High | — | ● | ✓ |
| CVE-2026-91709 | ServiceWorker | Type Confusion | High | — | ● | ✓ |
| CVE-2026-91710 | WebAppInstalls | UAF | High | — | ● | ✓ |
| CVE-2026-91711 | ServiceWorker | OOB | High | — | ● | ✓ |
| CVE-2026-91712 | Extensions | Race | High | — | ● | ✓ |
| CVE-2026-91713 | Browser | Authorization Error | Medium | — | ● | ✓ |
| CVE-2026-91714 | Fonts | Info Disclosure | Medium | — | ● | ✓ |
| CVE-2026-91715 | ServiceWorker | Type Confusion | High | — | ● | ✓ |
| CVE-2026-91716 | Auth | UAF | High | — | ● | ✓ |
| CVE-2026-91717 | Android | Authorization Error | High | — | ● | ✓ |
| CVE-2026-91718 | Core | UAF | High | — | ● | ✓ |
| CVE-2026-91719 | XML | Logic Error | Low | — | ● | ✓ |
| CVE-2026-91720 | ANGLE | Uninitialized Memory | High | — | ● | ✓ |
| CVE-2026-91721 | Internals | UAF | Critical | — | ● | ✓ |
| CVE-2026-91722 | Input | UAF | Medium | — | ● | ✓ |
| CVE-2026-91723 | WebAppInstalls | Race | Medium | — | ● | ✓ |
| CVE-2026-91724 | Input | UAF | High | — | ● | ✓ |
| CVE-2026-91725 | CSS | Info Disclosure | Medium | — | ● | ✓ |
| CVE-2026-91726 | WebGL | OOB | Critical | — | ● | ✓ |
| CVE-2026-91727 | Extensions | Logic Error | High | — | ● | ✓ |
| CVE-2026-91728 | V8 | Integer Overflow | High | — | ● | ✓ |
| CVE-2026-91729 | DigitalCredentials | UAF | High | — | ● | ✓ |
| CVE-2026-91730 | GetUserMedia | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-91731 | Compositing | Type Confusion | High | — | ● | ✓ |
| CVE-2026-91732 | AppManifest | Authorization Error | Medium | — | ● | ✓ |
| CVE-2026-91733 | Skia | Input Validation | High | — | ● | ✓ |
| CVE-2026-91734 | Core | Authorization Error | High | — | ● | ✓ |
| CVE-2026-91735 | WebUI | Authorization Error | High | — | ● | ✓ |
| CVE-2026-91736 | DOM | UAF | High | — | ● | ✓ |
| CVE-2026-91737 | UAF | High | — | ● | ✓ | |
| CVE-2026-91738 | ANGLE | Input Validation | Medium | — | ● | ✓ |
| CVE-2026-91739 | Transactions Platform | Authorization Error | Medium | — | ● | ✓ |
| CVE-2026-91740 | Skia | Uninitialized Memory | High | — | ● | ✓ |
| CVE-2026-91741 | CacheStorage | Type Confusion | High | — | ● | ✓ |
| CVE-2026-91742 | PriceTracking | Authorization Error | Medium | — | ● | ✓ |
| CVE-2026-91743 | Core | Race | High | — | ● | ✓ |
| CVE-2026-91744 | PlatformIntegration | Race | High | — | ● | ✓ |
| CVE-2026-91745 | V8 | UAF | High | — | ● | ✓ |
| CVE-2026-91746 | Compositing | Integer Overflow | High | — | ● | ✓ |
| CVE-2026-91747 | Skia | UAF | High | — | ● | ✓ |
| CVE-2026-91748 | Extensions | Race | High | — | ● | ✓ |
| CVE-2026-91749 | Workers | UAF | Critical | — | ● | ✓ |