← Back

Chrome

chrome

Vendor: Google • 7,387 CVEs

CVEs (7,387)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Chrome
Oct 23, 2026
Aug 6, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in HTML in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Oct 23, 2026
Aug 6, 2026
N/A· v4
8.6 HIGH· v3
N/A· v2
Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a local attacker to potentially perform a sandbox escape via a malicious file. (Chromium security severity...Show more
Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a local attacker to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)Show less
1Google
1Chrome
Oct 23, 2026
Aug 6, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium...Show more
Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)Show less
1Google
1Chrome
Oct 23, 2026
Aug 6, 2026
N/A· v4
8.3 HIGH· v3
N/A· v2
Use after free in Resources in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromiu...Show more
Use after free in Resources in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)Show less
1Google
1Chrome
Oct 23, 2026
Aug 6, 2026
N/A· v4
8.3 HIGH· v3
N/A· v2
Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severi...Show more
Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)Show less
1Google
1Chrome
Oct 23, 2026
Aug 6, 2026
N/A· v4
7.4 HIGH· v3
N/A· v2
Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)
1Google
1Chrome
Oct 23, 2026
Aug 6, 2026
N/A· v4
8.3 HIGH· v3
N/A· v2
Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromiu...Show more
Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)Show less
1Google
1Chrome
Oct 23, 2026
Aug 6, 2026
N/A· v4
8.3 HIGH· v3
N/A· v2
Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium se...Show more
Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)Show less
1Google
1Chrome
Oct 23, 2026
Jul 30, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Oct 23, 2026
Jul 30, 2026
N/A· v4
4.0 MEDIUM· v3
N/A· v2
Inappropriate implementation in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform UI spoofing via a malicious file. (Chromium security severity: Low)
1Google
1Chrome
Oct 23, 2026
Jul 30, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Oct 23, 2026
Jul 30, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Oct 23, 2026
Jul 30, 2026
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Oct 23, 2026
Jul 30, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a malicious file. (Chromium security severity: Low)
1Google
1Chrome
Oct 23, 2026
Jul 30, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Oct 23, 2026
Jul 30, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: Low)
1Google
1Chrome
Oct 23, 2026
Jul 30, 2026
N/A· v4
2.4 LOW· v3
N/A· v2
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via physical access to the device. (C...Show more
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via physical access to the device. (Chromium security severity: Low)Show less
1Google
1Chrome
Oct 23, 2026
Jul 30, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)
1Google
1Chrome
Oct 23, 2026
Jul 30, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)
1Google
1Chrome
Oct 23, 2026
Jul 30, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Inappropriate implementation in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)