← Back

Chrome

chrome

Vendor: Google • 7,384 CVEs

CVEs (7,384)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Chrome
Oct 7, 2026
Oct 6, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity:...Show more
UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low)Show less
1Google
1Chrome
Oct 7, 2026
Oct 6, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Lo...Show more
Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)Show less
1Google
1Chrome
Oct 7, 2026
Oct 6, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Incorrect authorization in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Oct 7, 2026
Oct 6, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Bindings in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Oct 7, 2026
Oct 6, 2026
N/A· v4
8.3 HIGH· v3
N/A· v2
Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chro...Show more
Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)Show less
1Google
1Chrome
Oct 7, 2026
Oct 6, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Oct 7, 2026
Oct 6, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Oct 8, 2026
Oct 6, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Incorrect authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)
1Google
1Chrome
Oct 7, 2026
Oct 6, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: High)
1Google
1Chrome
Oct 8, 2026
Oct 6, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Information leak in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via crafted network traffic. (Chromium security seve...Show more
Information leak in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via crafted network traffic. (Chromium security severity: Medium)Show less
1Google
1Chrome
Oct 7, 2026
Oct 6, 2026
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML...Show more
Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)Show less
1Google
1Chrome
Oct 7, 2026
Oct 6, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Oct 7, 2026
Oct 6, 2026
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Hi...Show more
Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)Show less
1Google
1Chrome
Oct 7, 2026
Oct 6, 2026
N/A· v4
8.3 HIGH· v3
N/A· v2
Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chrom...Show more
Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)Show less
1Google
1Chrome
Oct 9, 2026
Oct 6, 2026
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Oct 7, 2026
Oct 6, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severi...Show more
UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low)Show less
1Google
1Chrome
Oct 7, 2026
Oct 6, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Oct 7, 2026
Oct 6, 2026
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromiu...Show more
Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Low)Show less
1Google
1Chrome
Oct 7, 2026
Oct 6, 2026
N/A· v4
8.3 HIGH· v3
N/A· v2
Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium securi...Show more
Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)Show less
1Google
1Chrome
Oct 7, 2026
Oct 6, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)