Archive · Chrome
Release — Chrome · 2026-10-06
CVEs 247
| CVE | Component | Class | Severity | ITW | Fix | RCA |
|---|---|---|---|---|---|---|
| CVE-2026-102322 | SiteIsolation | Authorization Error | High | — | — | — |
| CVE-2026-106179 | WebAppInstalls | Spoofing | Low | — | ● | — |
| CVE-2026-106180 | Animation | Info Disclosure | Medium | — | ● | — |
| CVE-2026-106181 | DevTools | Logic Error | Medium | — | ● | — |
| CVE-2026-106182 | Paint | Spoofing | Medium | — | ● | — |
| CVE-2026-106183 | Chromoting | Authorization Error | Medium | — | ● | — |
| CVE-2026-106184 | Media | Uninitialized Memory | High | — | ● | — |
| CVE-2026-106185 | Viz | Input Validation | Medium | — | ● | — |
| CVE-2026-106186 | CredentialProvider | Logic Error | Low | — | ● | — |
| CVE-2026-106187 | Permissions | Authorization Error | Low | — | ● | — |
| CVE-2026-106188 | SignIn | Authorization Error | Medium | — | ● | — |
| CVE-2026-106189 | ReaderMode | Logic Error | Medium | — | ● | — |
| CVE-2026-106190 | Media | UAF | High | — | ● | — |
| CVE-2026-106191 | Actor | Authorization Error | Low | — | ● | — |
| CVE-2026-106192 | Mobile | Info Disclosure | Low | — | ● | — |
| CVE-2026-106193 | Parser | UAF | High | — | ● | — |
| CVE-2026-106194 | WebAppInstalls | Authorization Error | Medium | — | ● | — |
| CVE-2026-106195 | Chromoting | Authorization Error | Low | — | ● | — |
| CVE-2026-106196 | Navigation | Authorization Error | Medium | — | ● | — |
| CVE-2026-106197 | Browser | UAF | Critical | — | ● | ✓ |
| CVE-2026-106198 | FileSystem | Authorization Error | Medium | — | ● | — |
| CVE-2026-106199 | Actor | Authorization Error | Low | — | ● | — |
| CVE-2026-106200 | Track | UAF | High | — | ● | — |
| CVE-2026-106201 | V8 | Race | Medium | — | ● | — |
| CVE-2026-106202 | ANGLE | Uninitialized Memory | High | — | ● | — |
| CVE-2026-106203 | Autofill | Logic Error | High | — | ● | — |
| CVE-2026-106204 | UAF | High | — | ● | — | |
| CVE-2026-106205 | Passwords | Authorization Error | Medium | — | ● | — |
| CVE-2026-106206 | Mobile | Input Validation | Medium | — | ● | — |
| CVE-2026-106207 | V8 | Race | Medium | — | ● | — |
| CVE-2026-106208 | API | Authorization Error | Medium | — | ● | — |
| CVE-2026-106209 | Mobile | Spoofing | Medium | — | ● | — |
| CVE-2026-106210 | Scroll | Info Disclosure | Medium | — | ● | — |
| CVE-2026-106211 | TabStrip | UAF | High | — | ● | — |
| CVE-2026-106212 | Autofill | Authorization Error | Medium | — | ● | — |
| CVE-2026-106213 | WebAudio | Race | Medium | — | ● | — |
| CVE-2026-106214 | Proxy | Info Disclosure | High | — | ● | — |
| CVE-2026-106215 | ANGLE | Uninitialized Memory | High | — | ● | — |
| CVE-2026-106216 | ReadingList | Logic Error | Medium | — | ● | — |
| CVE-2026-106217 | Google Lens | Authorization Error | Medium | — | ● | — |
| CVE-2026-106220 | Passwords | Info Disclosure | Low | — | ● | — |
| CVE-2026-106221 | WebAPKs | Authorization Error | Low | — | ● | — |
| CVE-2026-106222 | Sync | Authorization Error | Medium | — | ● | — |
| CVE-2026-106223 | GPU | Uninitialized Memory | Medium | — | ● | — |
| CVE-2026-106224 | Google Lens | Authorization Error | Medium | — | ● | — |
| CVE-2026-106225 | Autofill | Authorization Error | Medium | — | ● | — |
| CVE-2026-106226 | Compositing | Input Validation | Medium | — | ● | — |
| CVE-2026-106227 | Core | UAF | High | — | ● | — |
| CVE-2026-106228 | Google Lens | Authorization Error | Medium | — | ● | — |
| CVE-2026-106229 | FileSystem | Spoofing | Medium | — | ● | — |
| CVE-2026-106230 | Offline | Logic Error | Medium | — | ● | — |
| CVE-2026-106231 | Dawn | Uninitialized Memory | High | — | ● | — |
| CVE-2026-106232 | Browser | Spoofing | Medium | — | ● | — |
| CVE-2026-106233 | Metrics | UAF | High | — | ● | — |
| CVE-2026-106234 | Network | UAF | Low | — | ● | — |
| CVE-2026-106235 | WebAudio | UAF | High | — | ● | — |
| CVE-2026-106236 | Chromoting | Spoofing | Low | — | ● | — |
| CVE-2026-106237 | Permissions | Info Disclosure | Low | — | ● | — |
| CVE-2026-106238 | Fonts | Race | Medium | — | ● | — |
| CVE-2026-106239 | WebGL | Integer Overflow | High | — | ● | — |
| CVE-2026-106240 | V8 | Type Confusion | High | — | ● | — |
| CVE-2026-106241 | Search | Authorization Error | Medium | — | ● | — |
| CVE-2026-106242 | Omnibox | Info Disclosure | Medium | — | ● | — |
| CVE-2026-106243 | Proxy Auth | Logic Error | High | — | ● | — |
| CVE-2026-106244 | Permissions | Authorization Error | Medium | — | ● | — |
| CVE-2026-106245 | ANGLE | Uninitialized Memory | High | — | ● | ✓ |
| CVE-2026-106246 | Browser | Authorization Error | Medium | — | ● | — |
| CVE-2026-106247 | ANGLE | OOB | Low | — | ● | — |
| CVE-2026-106248 | Bindings | UAF | High | — | ● | — |
| CVE-2026-106249 | Autofill | Authorization Error | Low | — | ● | — |
| CVE-2026-106250 | Actor | Authorization Error | Low | — | ● | — |
| CVE-2026-106251 | Chromoting | Spoofing | Low | — | ● | — |
| CVE-2026-106252 | Fonts | Logic Error | Low | — | ● | — |
| CVE-2026-106253 | Extensions | Authorization Error | Medium | — | ● | — |
| CVE-2026-106254 | Mobile | Info Disclosure | Medium | — | ● | — |
| CVE-2026-106255 | V8 | Race | High | — | ● | — |
| CVE-2026-106256 | Passwords | Info Disclosure | Low | — | ● | — |
| CVE-2026-106257 | HTML | UAF | High | — | ● | — |
| CVE-2026-106258 | ANGLE | Uninitialized Memory | High | — | ● | — |
| CVE-2026-106259 | PermissionElement | Authorization Error | Low | — | ● | — |
| CVE-2026-106260 | DevTools | Authorization Error | Low | — | ● | — |
| CVE-2026-106261 | Video | Uninitialized Memory | Medium | — | ● | — |
| CVE-2026-106262 | GetUserMedia | Logic Error | Medium | — | ● | — |
| CVE-2026-106263 | SignIn | Input Validation | Medium | — | ● | — |
| CVE-2026-106264 | Chromium | Authorization Error | Low | — | ● | — |
| CVE-2026-106265 | File | Spoofing | Medium | — | ● | — |
| CVE-2026-106266 | Contextual Tasks | Authorization Error | Medium | — | ● | — |
| CVE-2026-106267 | Network | Authorization Error | Medium | — | ● | — |
| CVE-2026-106268 | WebRTC | UAF | High | — | ● | — |
| CVE-2026-106269 | CSS | UAF | Low | — | ● | — |
| CVE-2026-106270 | WebAppInstalls | Authorization Error | Low | — | ● | — |
| CVE-2026-106271 | Workers | Authorization Error | Medium | — | ● | — |
| CVE-2026-106272 | Chromoting | Spoofing | Low | — | ● | — |
| CVE-2026-106273 | Video | Uninitialized Memory | High | — | ● | — |
| CVE-2026-106274 | Browser | Logic Error | Medium | — | ● | — |
| CVE-2026-106275 | GPU | Uninitialized Memory | Low | — | ● | — |
| CVE-2026-106276 | Payments | Spoofing | Low | — | ● | — |
| CVE-2026-106277 | Animation | Info Disclosure | Medium | — | ● | — |
| CVE-2026-106278 | Select | UAF | High | — | ● | — |
| CVE-2026-106279 | Passwords | Logic Error | Medium | — | ● | — |
| CVE-2026-106280 | PermissionElement | Authorization Error | Medium | — | ● | — |
| CVE-2026-106281 | Tint | UAF | High | — | ● | — |
| CVE-2026-106282 | WebOTP | Spoofing | Medium | — | ● | — |
| CVE-2026-106283 | Streaming | UAF | Medium | — | ● | — |
| CVE-2026-106284 | Printing | OOB | Medium | — | ● | — |
| CVE-2026-106285 | WebAppInstalls | Spoofing | Low | — | ● | — |
| CVE-2026-106286 | Omnibox | Authorization Error | Medium | — | ● | — |
| CVE-2026-106287 | CORS | Cross Origin | Low | — | ● | — |
| CVE-2026-106288 | Browser | Authorization Error | Low | — | ● | — |
| CVE-2026-106289 | FedCM | Authorization Error | Medium | — | ● | — |
| CVE-2026-106290 | GPU | Uninitialized Memory | Medium | — | ● | — |
| CVE-2026-106291 | GarbageCollection | UAF | Medium | — | ● | — |
| CVE-2026-106292 | Fonts | OOB | Medium | — | — | — |
| CVE-2026-106293 | ANGLE | Type Confusion | High | — | ● | ✓ |
| CVE-2026-106294 | Chromoting | Logic Error | Low | — | ● | — |
| CVE-2026-106295 | Unbounded Element | Authorization Error | Medium | — | ● | — |
| CVE-2026-106296 | UI | Authorization Error | Low | — | ● | — |
| CVE-2026-106297 | Scheduling | Authorization Error | Low | — | ● | — |
| CVE-2026-106298 | Chrome Tabs | UAF | High | — | ● | — |
| CVE-2026-106299 | WebAudio | Input Validation | Low | — | ● | — |
| CVE-2026-106300 | CacheStorage | Race | Medium | — | ● | — |
| CVE-2026-106301 | Contextual Tasks | Authorization Error | Medium | — | ● | — |
| CVE-2026-106302 | PermissionElement | Spoofing | Medium | — | ● | — |
| CVE-2026-106303 | Autofill AI | Info Disclosure | Medium | — | ● | — |
| CVE-2026-106304 | ANGLE | OOB | Medium | — | ● | — |
| CVE-2026-106305 | Mobile | Spoofing | Low | — | ● | — |
| CVE-2026-106306 | DevTools | Authorization Error | Low | — | ● | — |
| CVE-2026-106307 | Network | Authorization Error | Medium | — | ● | — |
| CVE-2026-106308 | Autofill | Logic Error | High | — | ● | — |
| CVE-2026-106309 | Selection | Authorization Error | Low | — | ● | — |
| CVE-2026-106310 | FontAccess | Logic Error | Low | — | ● | — |
| CVE-2026-106311 | PermissionElement | Logic Error | Medium | — | ● | — |
| CVE-2026-106312 | SignIn | Authorization Error | Low | — | ● | — |
| CVE-2026-106313 | Browser | Authorization Error | Medium | — | ● | — |
| CVE-2026-106314 | Bluetooth | Authorization Error | Medium | — | ● | — |
| CVE-2026-106315 | Modularization | UAF | Medium | — | ● | — |
| CVE-2026-106316 | Chromoting | Spoofing | Low | — | ● | — |
| CVE-2026-106317 | FullScreen | Spoofing | Low | — | ● | — |
| CVE-2026-106318 | Media | UAF | High | — | ● | — |
| CVE-2026-106320 | UI | Logic Error | Low | — | ● | — |
| CVE-2026-106321 | Editing | Info Disclosure | Medium | — | ● | — |
| CVE-2026-106322 | AppManifest | Logic Error | Medium | — | ● | — |
| CVE-2026-106323 | Chrome for iOS | Authorization Error | High | — | ● | — |
| CVE-2026-106324 | WebAppInstalls | Authorization Error | Medium | — | ● | — |
| CVE-2026-106325 | Core | Logic Error | Low | — | ● | — |
| CVE-2026-106326 | UI | Authorization Error | Medium | — | ● | — |
| CVE-2026-106327 | Core | Authorization Error | High | — | ● | — |
| CVE-2026-106328 | Authorization Error | Medium | — | ● | — | |
| CVE-2026-106329 | FileSystem | Authorization Error | High | — | ● | — |
| CVE-2026-106330 | Paint | Info Disclosure | Medium | — | ● | — |
| CVE-2026-106331 | Extensions | Input Validation | Low | — | ● | — |
| CVE-2026-106332 | Compositing | Integer Overflow | High | — | ● | — |
| CVE-2026-106333 | Input | Authorization Error | Medium | — | ● | — |
| CVE-2026-106334 | Payments | Info Disclosure | Low | — | ● | — |
| CVE-2026-106335 | Media | UAF | Medium | — | ● | — |
| CVE-2026-106336 | Paint | Info Disclosure | Medium | — | ● | — |
| CVE-2026-106337 | UI | Spoofing | Medium | — | ● | — |
| CVE-2026-106338 | PictureInPicture | Spoofing | Low | — | ● | — |
| CVE-2026-106339 | Core | Logic Error | Low | — | ● | — |
| CVE-2026-106340 | CredentialProvider | Authorization Error | Low | — | ● | — |
| CVE-2026-106341 | V8 | Type Confusion | Medium | — | ● | — |
| CVE-2026-106342 | Autofill | Info Disclosure | Medium | — | ● | — |
| CVE-2026-106343 | Autofill AI | Input Validation | Low | — | ● | — |
| CVE-2026-106344 | Permissions | Authorization Error | Low | — | ● | — |
| CVE-2026-106345 | Session | Logic Error | Low | — | ● | — |
| CVE-2026-106346 | DevTools | Input Validation | High | — | ● | — |
| CVE-2026-106347 | Track | UAF | Critical | — | ● | — |
| CVE-2026-106348 | Animation | Info Disclosure | Medium | — | ● | — |
| CVE-2026-106349 | V8 | UAF | High | — | ● | — |
| CVE-2026-106350 | Browser | Authorization Error | Low | — | ● | — |
| CVE-2026-106351 | Safebrowsing | Info Disclosure | Medium | — | ● | — |
| CVE-2026-106352 | WebProtect | Authorization Error | Medium | — | ● | — |
| CVE-2026-106353 | Mobile | Input Validation | Low | — | ● | — |
| CVE-2026-106354 | Extensions | Logic Error | Medium | — | ● | — |
| CVE-2026-106355 | Media | Authorization Error | Low | — | ● | — |
| CVE-2026-106356 | EVP | Logic Error | Medium | — | ● | — |
| CVE-2026-106357 | WebRTC | UAF | High | — | ● | — |
| CVE-2026-106358 | Navigation | UAF | Critical | — | ● | — |
| CVE-2026-106359 | DeviceBoundSessionCredentials | Authorization Error | Low | — | ● | — |
| CVE-2026-106360 | Payments | Info Disclosure | Medium | — | ● | — |
| CVE-2026-106361 | Mobile | Logic Error | Medium | — | ● | — |
| CVE-2026-106362 | DevTools | Authorization Error | Low | — | ● | — |
| CVE-2026-106363 | FullScreen | Authorization Error | Medium | — | ● | — |
| CVE-2026-106364 | Omnibox | Authorization Error | High | — | ● | — |
| CVE-2026-106365 | Animation | Authorization Error | Medium | — | ● | — |
| CVE-2026-106366 | CustomTabs | Logic Error | High | — | ● | — |
| CVE-2026-106367 | Mobile | Authorization Error | Medium | — | ● | — |
| CVE-2026-106368 | UI | Spoofing | Low | — | ● | — |
| CVE-2026-106369 | Translate | Authorization Error | High | — | ● | — |
| CVE-2026-106370 | GPU | Uninitialized Memory | Medium | — | ● | — |
| CVE-2026-106371 | Transactions Platform | Authorization Error | Low | — | ● | — |
| CVE-2026-106372 | UI | Authorization Error | Medium | — | ● | — |
| CVE-2026-106373 | Fonts | UAF | Medium | — | ● | — |
| CVE-2026-106374 | V8 | Type Confusion | Low | — | ● | — |
| CVE-2026-106375 | Dawn | Logic Error | Medium | — | ● | — |
| CVE-2026-106376 | ANGLE | Uninitialized Memory | High | — | ● | — |
| CVE-2026-106377 | Fonts | Race | High | — | — | — |
| CVE-2026-106378 | Sandbox | Sandbox Escape | Medium | — | ● | — |
| CVE-2026-106379 | Skia | Uninitialized Memory | High | — | ● | — |
| CVE-2026-106380 | UI | Spoofing | Low | — | ● | — |
| CVE-2026-106381 | Passwords | Authorization Error | Medium | — | ● | — |
| CVE-2026-106382 | Chromecast | UAF | Critical | — | ● | — |
| CVE-2026-106383 | Media | UAF | High | — | ● | — |
| CVE-2026-106384 | SiteIsolation | Authorization Error | Medium | — | ● | — |
| CVE-2026-106385 | Chromoting | Race | Low | — | ● | — |
| CVE-2026-106386 | WebAudio | Uninitialized Memory | Medium | — | ● | — |
| CVE-2026-106387 | Mobile | Authorization Error | Medium | — | ● | — |
| CVE-2026-106388 | DataTransfer | Authorization Error | Medium | — | ● | — |
| CVE-2026-106389 | USB | Authorization Error | Medium | — | ● | — |
| CVE-2026-106390 | SanitizerAPI | Logic Error | Low | — | ● | — |
| CVE-2026-106391 | WebShare | Authorization Error | Medium | — | ● | — |
| CVE-2026-106392 | WebAudio | Info Disclosure | Medium | — | ● | — |
| CVE-2026-106393 | Storage | UAF | High | — | ● | — |
| CVE-2026-106394 | Glic | Logic Error | Low | — | ● | — |
| CVE-2026-106395 | Dawn | Uninitialized Memory | Medium | — | ● | — |
| CVE-2026-106396 | Omnibox | Input Validation | High | — | ● | — |
| CVE-2026-106397 | Mobile | Authorization Error | Medium | — | ● | — |
| CVE-2026-106398 | Media | Authorization Error | Medium | — | ● | — |
| CVE-2026-106399 | Skia | OOB | Low | — | ● | — |
| CVE-2026-106400 | Messages | Logic Error | Medium | — | ● | — |
| CVE-2026-106401 | Media | OOB | Medium | — | ● | — |
| CVE-2026-106402 | Extensions | Authorization Error | Medium | — | ● | — |
| CVE-2026-106403 | Accessibility | Authorization Error | Medium | — | ● | — |
| CVE-2026-106404 | FontAccess | Authorization Error | Medium | — | ● | — |
| CVE-2026-106405 | CustomTabs | Race | Medium | — | ● | — |
| CVE-2026-106406 | Mobile | Authorization Error | Medium | — | ● | — |
| CVE-2026-106407 | GetUserMedia | Authorization Error | Medium | — | ● | — |
| CVE-2026-106408 | Mobile | Logic Error | Medium | — | ● | — |
| CVE-2026-106409 | WebAppInstalls | Logic Error | Medium | — | ● | — |
| CVE-2026-106410 | Permissions | Authorization Error | Medium | — | ● | — |
| CVE-2026-106411 | Parser | UAF | High | — | ● | — |
| CVE-2026-106412 | Core | Race | High | — | ● | — |
| CVE-2026-106413 | Browser | Race | Low | — | ● | — |
| CVE-2026-106414 | Mobile | Input Validation | Medium | — | ● | — |
| CVE-2026-106415 | Enterprise | Info Disclosure | Medium | — | ● | — |
| CVE-2026-106416 | Extensions | Logic Error | Medium | — | ● | — |
| CVE-2026-106417 | Media | Integer Overflow | Low | — | ● | — |
| CVE-2026-106418 | Network | Authorization Error | Low | — | ● | — |
| CVE-2026-106419 | ANGLE | UAF | High | — | ● | — |
| CVE-2026-106420 | API | Logic Error | Medium | — | ● | — |
| CVE-2026-106421 | UAF | High | — | ● | — | |
| CVE-2026-106422 | API | Authorization Error | Low | — | ● | — |
| CVE-2026-106423 | Media | UAF | High | — | ● | — |
| CVE-2026-106424 | Audio | Info Disclosure | Medium | — | ● | — |
| CVE-2026-106425 | BrowserTag | Authorization Error | Medium | — | ● | — |
| CVE-2026-106426 | Fonts | Race | High | — | ● | — |
| CVE-2026-106427 | Mobile | Authorization Error | Low | — | ● | — |