Archive · Chrome
Release — Chrome · 2026-09-22
108 CVEs in this release · 108 mapped
· original advisory ↗
CVEs 108
| CVE | Component | Class | Severity | ITW | Fix | RCA |
|---|---|---|---|---|---|---|
| CVE-2026-95274 | DevTools | Logic Error | High | — | ● | ✓ |
| CVE-2026-95275 | MediaStream | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-95276 | Themes | Input Validation | Medium | — | ● | ✓ |
| CVE-2026-95277 | Views | UAF | High | — | ● | ✓ |
| CVE-2026-95278 | WakeLock | Authorization Error | Low | — | ● | ✓ |
| CVE-2026-95279 | Omnibox | Spoofing | Low | — | ● | ✓ |
| CVE-2026-95280 | V8 | Race | High | — | ● | ✓ |
| CVE-2026-95281 | ANGLE | OOB | Critical | — | ● | ✓ |
| CVE-2026-95282 | Platform | UAF | High | — | ● | ✓ |
| CVE-2026-95283 | Tint | OOB | High | — | ● | ✓ |
| CVE-2026-95284 | ANGLE | OOB | Critical | — | ● | ✓ |
| CVE-2026-95285 | WebView | Authorization Error | Low | — | ● | ✓ |
| CVE-2026-95286 | Bindings | Type Confusion | High | — | ● | ✓ |
| CVE-2026-95287 | Navigation | Authorization Error | Medium | — | ● | ✓ |
| CVE-2026-95288 | Mobile | Spoofing | Low | — | ● | ✓ |
| CVE-2026-95289 | Scroll | Authorization Error | Medium | — | ● | ✓ |
| CVE-2026-95290 | NFC | Authorization Error | Medium | — | ● | ✓ |
| CVE-2026-95291 | SecurityIndicators | Spoofing | High | — | ● | ✓ |
| CVE-2026-95292 | Safebrowsing | Authorization Error | Low | — | ● | ✓ |
| CVE-2026-95293 | GPU | Uninitialized Memory | High | — | ● | ✓ |
| CVE-2026-95294 | Browser | Spoofing | Medium | — | ● | ✓ |
| CVE-2026-95295 | Mobile | Info Disclosure | Medium | — | ● | ✓ |
| CVE-2026-95296 | Core | Authorization Error | Low | — | ● | ✓ |
| CVE-2026-95297 | Contextual Tasks | Authorization Error | Medium | — | ● | ✓ |
| CVE-2026-95298 | Browser | UAF | High | — | ● | ✓ |
| CVE-2026-95299 | GPU | UAF | High | — | ● | ✓ |
| CVE-2026-95300 | DevTools | Authorization Error | Medium | — | ● | ✓ |
| CVE-2026-95301 | Extensions | Authorization Error | High | — | ● | ✓ |
| CVE-2026-95302 | WebAPKs | Authorization Error | Medium | — | ● | ✓ |
| CVE-2026-95303 | SmartCard | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-95304 | V8 | OOB | High | — | ● | ✓ |
| CVE-2026-95305 | Chromoting | Spoofing | Low | — | ● | ✓ |
| CVE-2026-95306 | V8 | Type Confusion | High | — | ● | ✓ |
| CVE-2026-95307 | ExtensionsMenu | Spoofing | Low | — | ● | ✓ |
| CVE-2026-95308 | Metrics | Integer Overflow | Low | — | ● | ✓ |
| CVE-2026-95309 | Mobile | Spoofing | Low | — | ● | ✓ |
| CVE-2026-95310 | AdFilter | UAF | Critical | — | ● | ✓ |
| CVE-2026-95311 | Fonts | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-95312 | Passwords | Info Disclosure | Medium | — | ● | ✓ |
| CVE-2026-95313 | Fullscreen | UAF | Critical | — | ● | ✓ |
| CVE-2026-95314 | HID | Authorization Error | Medium | — | ● | ✓ |
| CVE-2026-95315 | Aura | UAF | High | — | ● | ✓ |
| CVE-2026-95316 | Performance | Logic Error | Low | — | ● | ✓ |
| CVE-2026-95317 | MediaCapture | Authorization Error | Medium | — | ● | ✓ |
| CVE-2026-95318 | Video | OOB | High | — | ● | ✓ |
| CVE-2026-95319 | Printing | UAF | Low | — | ● | ✓ |
| CVE-2026-95320 | Navigation | Authorization Error | Medium | — | ● | ✓ |
| CVE-2026-95321 | Payments | Spoofing | Medium | — | ● | ✓ |
| CVE-2026-95322 | GPU | OOB | Critical | — | ● | ✓ |
| CVE-2026-95323 | Chromium | Spoofing | Medium | — | ● | ✓ |
| CVE-2026-95324 | GPU | Uninitialized Memory | High | — | ● | ✓ |
| CVE-2026-95325 | ANGLE | UAF | Medium | — | ● | ✓ |
| CVE-2026-95326 | Bluetooth | Logic Error | Low | — | ● | ✓ |
| CVE-2026-95327 | Networking | Info Disclosure | Low | — | ● | ✓ |
| CVE-2026-95328 | Mobile | Authorization Error | Low | — | ● | ✓ |
| CVE-2026-95329 | WebGL | OOB | Critical | — | ● | ✓ |
| CVE-2026-95330 | Downloads | Input Validation | Medium | — | ● | ✓ |
| CVE-2026-95331 | ANGLE | OOB | Medium | — | ● | ✓ |
| CVE-2026-95332 | Tint | Uninitialized Memory | Medium | — | ● | ✓ |
| CVE-2026-95333 | Metrics | UAF | Medium | — | ● | ✓ |
| CVE-2026-95334 | WebProtect | Logic Error | Low | — | ● | ✓ |
| CVE-2026-95335 | HID | UAF | High | — | ● | ✓ |
| CVE-2026-95336 | Transactions Platform | Info Disclosure | Medium | — | ● | ✓ |
| CVE-2026-95337 | Messages | Spoofing | Medium | — | ● | ✓ |
| CVE-2026-95338 | PDFium | UAF | High | — | ● | ✓ |
| CVE-2026-95339 | ServiceWorker | UAF | Critical | — | ● | ✓ |
| CVE-2026-95340 | PictureInPicture | Authorization Error | Low | — | ● | ✓ |
| CVE-2026-95341 | Desktop | Input Validation | Medium | — | ● | ✓ |
| CVE-2026-95342 | V8 | Authorization Error | Low | — | ● | ✓ |
| CVE-2026-95343 | WebAudio | UAF | High | — | ● | ✓ |
| CVE-2026-95344 | DevTools | Race | Medium | — | ● | ✓ |
| CVE-2026-95345 | Actor | UAF | Medium | — | ● | ✓ |
| CVE-2026-95346 | Chromoting | Spoofing | Medium | — | ● | ✓ |
| CVE-2026-95347 | Updater | UAF | Medium | — | ● | ✓ |
| CVE-2026-95348 | Bluetooth | UAF | High | — | ● | ✓ |
| CVE-2026-95349 | WebGL | OOB | Critical | — | ● | ✓ |
| CVE-2026-95350 | ANGLE | OOB | Critical | — | ● | ✓ |
| CVE-2026-95351 | Views | UAF | High | — | ● | ✓ |
| CVE-2026-95352 | DevTools | Authorization Error | Low | — | ● | ✓ |
| CVE-2026-95353 | Bindings | UAF | Medium | — | ● | ✓ |
| CVE-2026-95354 | Verifier | UAF | Medium | — | ● | ✓ |
| CVE-2026-95355 | Navigation | Authorization Error | High | — | ● | ✓ |
| CVE-2026-95356 | WindowDialog | UAF | Critical | — | ● | ✓ |
| CVE-2026-95357 | GPU | OOB | Critical | — | ● | ✓ |
| CVE-2026-95358 | Mobile | Authorization Error | Medium | — | ● | ✓ |
| CVE-2026-95359 | GPU | Uninitialized Memory | Medium | — | ● | ✓ |
| CVE-2026-95360 | Editing | Race | Medium | — | ● | ✓ |
| CVE-2026-95361 | DevTools | Authorization Error | Low | — | ● | ✓ |
| CVE-2026-95362 | DevTools | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-95363 | FileSystem | Spoofing | Medium | — | ● | ✓ |
| CVE-2026-95364 | Passwords | Input Validation | Low | — | ● | ✓ |
| CVE-2026-95365 | IndexedDB | Type Confusion | High | — | ● | ✓ |
| CVE-2026-95366 | Core | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-95367 | DataTransfer | Info Disclosure | Low | — | ● | ✓ |
| CVE-2026-95368 | DevTools | Authorization Error | Low | — | ● | ✓ |
| CVE-2026-95369 | XML | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-95370 | NFC | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-95371 | Views | Authorization Error | Medium | — | ● | ✓ |
| CVE-2026-95372 | Chromecast | UAF | High | — | ● | ✓ |
| CVE-2026-95373 | DevTools | UAF | High | — | ● | ✓ |
| CVE-2026-95374 | Network | Authorization Error | Medium | — | ● | ✓ |
| CVE-2026-95375 | BrowserTag | Authorization Error | Medium | — | ● | ✓ |
| CVE-2026-95376 | DevTools | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-95380 | V8 | Type Confusion | Low | — | ● | ✓ |
| CVE-2026-95381 | Printing | Input Validation | Medium | — | ● | ✓ |
| CVE-2026-95382 | Auth | Input Validation | Medium | — | ● | ✓ |
| CVE-2026-95384 | Transactions Platform | Race | Medium | — | ● | ✓ |
| CVE-2026-95385 | PlatformIntegration | Logic Error | Low | — | ● | ✓ |