Open MalwareTips from your Home Screen or desktop. Follow discussions, find answers and pick up where you left off.
If you cannot find an install option, update your browser or use its bookmark option to keep MalwareTips close.
After installation, open the app and sign in. Enable push notifications in Preferences if you want alerts. On iPhone and iPad, push requires a Home Screen web app and iOS or iPadOS 16.4 or later.
Sign in to manage notificationsInstallation is optional. Your notification settings stay under your control.
Thread starter
Gandalf_The_Grey
Security changes will be updated shortly
This update includes 247 security fixes. Please see the Chrome Security Page for more information.
[N/A][534994449] Critical CVE-2026-106382: Use after free in Chromecast. Reported by Google on 2026-07-15
[TBD][560238696] Critical CVE-2026-106197: Use after free in Browser. Reported by Xinyang Ge on 2026-09-11
[TBD][567160164] Critical CVE-2026-106358: Use after free in Navigation. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-28
[N/A][567936270] Critical CVE-2026-106347: Use after free in Track. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-30
[$5000][527023137] High CVE-2026-102322: Incorrect Authorization in SiteIsolation. Reported by Avadhut Mahamuni on 2026-06-23
[$2,000][550302121] High CVE-2026-106245: Uninitialized resource in ANGLE. Reported by JonathanBouman on 2026-08-21
[$2,000][551529559] High CVE-2026-106327: Incorrect authorization in Core. Reported by OGINOME Tomohito on 2026-08-23
[$2,000][552115620] High CVE-2026-106366: Incomplete cleanup in CustomTabs. Reported by Naoya Miyaguchi on 2026-08-24
[$2,000][553857574] High CVE-2026-106258: Uninitialized resource in ANGLE. Reported by weihengqiuu on 2026-08-28
[$2,000][553881031] High CVE-2026-106376: Uninitialized resource in ANGLE. Reported by weihengqiuu on 2026-08-28
[$2,000][560055258] High CVE-2026-106308: Incorrect reference resolution in Autofill. Reported by Anonymous on 2026-09-11
[$2,000][561066220] High CVE-2026-106215: Uninitialized resource in ANGLE. Reported by JonathanBouman on 2026-09-13
[$1,000][539043243] High CVE-2026-106369: Missing authorization in Translate. Reported by M. Fauzan Wijaya (Gh05t666nero) on 2026-07-26
[$1,000][547343108] High CVE-2026-106293: Type confusion in ANGLE. Reported by Jinpyo Lee on 2026-08-16
[N/A][520179149] High CVE-2026-106377: Race condition in Fonts. Reported by Google on 2026-06-05
[N/A][520755056] High CVE-2026-106412: Race condition in Core. Reported by Google on 2026-06-06
[N/A][533426590] High CVE-2026-106243: Incomplete cleanup in Proxy Auth. Reported by Google on 2026-07-10
[N/A][533493992] High CVE-2026-106214: Information leak in Proxy. Reported by Google on 2026-07-10
[N/A][540018068] High CVE-2026-106364: Incorrect authorization in Omnibox. Reported by Google on 2026-07-28
[N/A][546630009] High CVE-2026-106239: Integer overflow in WebGL. Reported by Google on 2026-08-14
[TBD][547065823] High CVE-2026-106426: Race condition in Fonts. Reported by Emond Papegaaij on 2026-08-17
[TBD][550379413] High CVE-2026-106419: Use after free in ANGLE. Reported by Shaked Reiner (Palo Alto Networks) on 2026-08-21
[N/A][552423127] High CVE-2026-106396: Improper input validation in Omnibox. Reported by Google on 2026-08-25
[N/A][553114676] High CVE-2026-106323: Missing authorization in Chrome for iOS. Reported by Google on 2026-08-26
[N/A][553115993] High CVE-2026-106231: Uninitialized resource in Dawn. Reported by Google on 2026-08-26
[N/A][553117809] High CVE-2026-106202: Uninitialized resource in ANGLE. Reported by Google on 2026-08-26
[N/A][553118338] High CVE-2026-106273: Uninitialized resource in Video. Reported by Google on 2026-08-26
[TBD][553394296] High CVE-2026-106203: Incomplete cleanup in Autofill. Reported by Anonymous on 2026-08-27
[N/A][553454734] High CVE-2026-106332: Integer overflow in Compositing. Reported by Google on 2026-08-27
[TBD][554992296] High CVE-2026-106281: Use after free in Tint. Reported by 0599jiangyc on 2026-08-31
[TBD][555932520] High CVE-2026-106298: Use after free in Chrome Tabs. Reported by TIENPA on 2026-09-02
[TBD][557729858] High CVE-2026-106193: Use after free in Parser. Reported by Blockian Creator of Kritt and Open-Kritt on 2026-09-05
[N/A][559780376] High CVE-2026-106255: Race condition in V8. Reported by Google on 2026-09-10
[TBD][559793873] High CVE-2026-106393: Use after free in Storage. Reported by Xinyang Ge on 2026-09-10
[N/A][561891645] High CVE-2026-106227: Use after free in Core. Reported by Google on 2026-09-15
[N/A][561987051] High CVE-2026-106379: Uninitialized resource in Skia. Reported by Google on 2026-09-15
[N/A][562002095] High CVE-2026-106211: Use after free in TabStrip. Reported by Google on 2026-09-15
[N/A][562043997] High CVE-2026-106329: Incorrect authorization in FileSystem. Reported by Google on 2026-09-15
[TBD][563673584] High CVE-2026-106248: Use after free in Bindings. Reported by Alessandro Rizzo (0xAlessandro) on 2026-09-19
[TBD][565612897] High CVE-2026-106235: Use after free in WebAudio. Reported by Team Allied (Hyeongeun Ji, h4nk3r1n, h4vrut4, HunSec, nag0x) on 2026-09-24
[TBD][565674529] High CVE-2026-106257: Use after free in HTML. Reported by OpenAI Codex Security (amyb) on 2026-09-24
[TBD][565742177] High CVE-2026-106268: Use after free in WebRTC. Reported by xinyang on 2026-09-24
[TBD][565774991] High CVE-2026-106278: Use after free in Select. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-24
[TBD][565797213] High CVE-2026-106233: Use after free in Metrics. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-24
[TBD][566111249] High CVE-2026-106318: Use after free in Media. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-25
[TBD][566136674] High CVE-2026-106411: Use after free in Parser. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-25
[TBD][566347711] High CVE-2026-106423: Use after free in Media. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-26
[N/A][566404364] High CVE-2026-106346: Improper state validation in DevTools. Reported by Google on 2026-09-26
[TBD][566824998] High CVE-2026-106190: Use after free in Media. Reported by weihengqiuu on 2026-09-27
[TBD][567160162] High CVE-2026-106357: Use after free in WebRTC. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-28
[TBD][567177599] High CVE-2026-106240: Type confusion in V8. Reported by OpenAI Codex Security (amyb) on 2026-09-28
[TBD][567379988] High CVE-2026-106184: Uninitialized resource in Media. Reported by James Burton (Offensive Security @ Meta) on 2026-09-29
[TBD][567447106] High CVE-2026-106383: Use after free in Media. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-29
[TBD][567538973] High CVE-2026-106349: Use after free in V8. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-29
[N/A][567873463] High CVE-2026-106421: Use after free in PDF. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-30
[N/A][567910530] High CVE-2026-106204: Use after free in PDF. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-30
[N/A][568422505] High CVE-2026-106200: Use after free in Track. Reported by Google on 2026-10-01
[$3,000][380789337] Medium CVE-2026-106265: UI misrepresentation in File. Reported by Umar Farooq on 2024-11-25
[$3,000][492374387] Medium CVE-2026-106238: Race condition in Fonts. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-13
[$2,000][501171258] Medium CVE-2026-106324: Incorrect authorization in WebAppInstalls. Reported by Narenda Singh (@_3P1C) on 2026-04-09
[$1,000][477327257] Medium CVE-2026-106420: Incorrect calculation in API. Reported by Luan Herrera (@lbherrera_) on 2026-01-21
[N/A][496623893] Medium CVE-2026-106222: Incorrect authorization in Sync. Reported by Google on 2026-03-26
[N/A][497062057] Medium CVE-2026-106208: Missing authorization in API. Reported by Google on 2026-03-28
[N/A][497148613] Medium CVE-2026-106286: Confused deputy in Omnibox. Reported by Google on 2026-03-28
[N/A][497350668] Medium CVE-2026-106181: Incorrect reference resolution in DevTools. Reported by Google on 2026-03-29
[N/A][497652727] Medium CVE-2026-106315: Use after free in Modularization. Reported by Google on 2026-03-30
[N/A][497842821] Medium CVE-2026-106274: Incorrect reference resolution in Browser. Reported by Google on 2026-03-30
[N/A][498075038] Medium CVE-2026-106365: Missing authorization in Animation. Reported by Google on 2026-03-31
[N/A][498737756] Medium CVE-2026-106267: Missing authorization in Network. Reported by Google on 2026-04-01
[N/A][498739277] Medium CVE-2026-106194: Missing authorization in WebAppInstalls. Reported by Google on 2026-04-01
[N/A][498770931] Medium CVE-2026-106313: Incorrect authorization in Browser. Reported by Google on 2026-04-02
[N/A][499468981] Medium CVE-2026-106283: Use after free in Streaming. Reported by Google on 2026-04-04
[N/A][499571442] Medium CVE-2026-106291: Use after free in GarbageCollection. Reported by Google on 2026-04-04
[N/A][500106110] Medium CVE-2026-106300: Race condition in CacheStorage. Reported by Google on 2026-04-06
[N/A][501533684] Medium CVE-2026-106314: Incorrect authorization in Bluetooth. Reported by Google on 2026-04-10
[N/A][501633302] Medium CVE-2026-106223: Uninitialized resource in GPU. Reported by Google on 2026-04-11
[N/A][501647772] Medium CVE-2026-106242: Information leak in Omnibox. Reported by Google on 2026-04-11
[N/A][501729675] Medium CVE-2026-106241: Incorrect authorization in Search. Reported by Google on 2026-04-11
[N/A][501763586] Medium CVE-2026-106381: Incorrect authorization in Passwords. Reported by Google on 2026-04-11
[N/A][501770489] Medium CVE-2026-106217: Missing authorization in Google Lens. Reported by Google on 2026-04-12
[N/A][501790682] Medium CVE-2026-106425: Missing authorization in BrowserTag. Reported by Google on 2026-04-12
[N/A][501805355] Medium CVE-2026-106225: Missing authorization in Autofill. Reported by Google on 2026-04-12
[N/A][501896592] Medium CVE-2026-106363: Missing authorization in FullScreen. Reported by Google on 2026-04-12
[N/A][501914204] Medium CVE-2026-106266: Confused deputy in Contextual Tasks. Reported by Google on 2026-04-12
[N/A][502034469] Medium CVE-2026-106189: Code injection in ReaderMode. Reported by Google on 2026-04-13
[N/A][502105238] Medium CVE-2026-106335: Use after free in Media. Reported by Google on 2026-04-13
[N/A][502179715] Medium CVE-2026-106415: Information leak in Enterprise. Reported by Google on 2026-04-13
[N/A][502278429] Medium CVE-2026-106224: Missing authorization in Google Lens. Reported by Google on 2026-04-13
[N/A][502462485] Medium CVE-2026-106185: Improper input validation in Viz. Reported by Google on 2026-04-14
[N/A][502475175] Medium CVE-2026-106244: Incorrect authorization in Permissions. Reported by Google on 2026-04-14
[N/A][502648640] Medium CVE-2026-106407: Incorrect authorization in GetUserMedia. Reported by Google on 2026-04-14
[N/A][503625361] Medium CVE-2026-106389: Incorrect authorization in USB. Reported by Google on 2026-04-17
[N/A][503725788] Medium CVE-2026-106397: Incorrect authorization in Mobile. Reported by Google on 2026-04-17
[N/A][504215649] Medium CVE-2026-106196: Missing authorization in Navigation. Reported by Google on 2026-04-19
[N/A][504223609] Medium CVE-2026-106414: Improper input validation in Mobile. Reported by Google on 2026-04-19
[N/A][504227656] Medium CVE-2026-106408: Protection mechanism failure in Mobile. Reported by Google on 2026-04-19
[N/A][504638005] Medium CVE-2026-106261: Uninitialized resource in Video. Reported by Google on 2026-04-20
[N/A][505186109] Medium CVE-2026-106406: Missing authorization in Mobile. Reported by Google on 2026-04-22
[N/A][507351786] Medium CVE-2026-106290: Uninitialized resource in GPU. Reported by Google on 2026-04-28
[TBD][507596239] Medium CVE-2026-106378: Privilege elevation in Sandbox. Reported by Paulos Yibelo Mesfin on 2026-04-29
[TBD][510773353] Medium CVE-2026-106198: Missing authorization in FileSystem. Reported by pakhunov.anton.n on 2026-05-07
[N/A][511745101] Medium CVE-2026-106326: Confused deputy in UI. Reported by Google on 2026-05-10
[N/A][511796554] Medium CVE-2026-106354: Improper resource exposure in Extensions. Reported by Google on 2026-05-10
[N/A][512998592] Medium CVE-2026-106342: Information leak in Autofill. Reported by Google on 2026-05-13
[N/A][513365978] Medium CVE-2026-106424: Information leak in Audio. Reported by Google on 2026-05-15
[N/A][513741326] Medium CVE-2026-106253: Incorrect authorization in Extensions. Reported by Google on 2026-05-16
[N/A][513757840] Medium CVE-2026-106279: Incorrect reference resolution in Passwords. Reported by Google on 2026-05-16
[N/A][513781133] Medium CVE-2026-106361: Incorrect provision of specified functionality in Mobile. Reported by Google on 2026-05-16
[N/A][514041626] Medium CVE-2026-106402: Incorrect authorization in Extensions. Reported by Google on 2026-05-17
[N/A][514061289] Medium CVE-2026-106311: Clickjacking in PermissionElement. Reported by Google on 2026-05-17
[N/A][514070956] Medium CVE-2026-106246: Incorrect authorization in Browser. Reported by Google on 2026-05-17
[N/A][514071472] Medium CVE-2026-106302: UI misrepresentation in PermissionElement. Reported by Google on 2026-05-17
[N/A][514072462] Medium CVE-2026-106416: Code injection in Extensions. Reported by Google on 2026-05-17
[N/A][514078734] Medium CVE-2026-106182: UI misrepresentation in Paint. Reported by Google on 2026-05-17
[N/A][514204338] Medium CVE-2026-106282: UI misrepresentation in WebOTP. Reported by Google on 2026-05-18
[N/A][514426571] Medium CVE-2026-106392: Information leak in WebAudio. Reported by Google on 2026-05-18
[N/A][515477538] Medium CVE-2026-106188: Confused deputy in SignIn. Reported by Google on 2026-05-21
[N/A][517033396] Medium CVE-2026-106370: Uninitialized resource in GPU. Reported by Google on 2026-05-27
[N/A][517090646] Medium CVE-2026-106356: Clickjacking in EVP. Reported by Google on 2026-05-27
[N/A][517150523] Medium CVE-2026-106405: Race condition in CustomTabs. Reported by Google on 2026-05-27
[N/A][517213220] Medium CVE-2026-106322: Open redirect in AppManifest. Reported by Google on 2026-05-27
[N/A][517366426] Medium CVE-2026-106280: Incorrect authorization in PermissionElement. Reported by Google on 2026-05-28
[N/A][517374100] Medium CVE-2026-106206: Improper input validation in Mobile. Reported by Google on 2026-05-28
[N/A][517429254] Medium CVE-2026-106180: Observable discrepancy in Animation. Reported by Google on 2026-05-28
[N/A][517475258] Medium CVE-2026-106303: Observable discrepancy in Autofill AI. Reported by Google on 2026-05-28
[N/A][517546096] Medium CVE-2026-106201: Race condition in V8. Reported by Google on 2026-05-28
[N/A][517649552] Medium CVE-2026-106333: Incorrect authorization in Input. Reported by Google on 2026-05-28
[N/A][517689673] Medium CVE-2026-106228: Confused deputy in Google Lens. Reported by Google on 2026-05-29
[N/A][517700327] Medium CVE-2026-106289: Missing authorization in FedCM. Reported by Google on 2026-05-29
[N/A][517708426] Medium CVE-2026-106277: Information leak in Animation. Reported by Google on 2026-05-29
[N/A][517801814] Medium CVE-2026-106410: Missing authorization in Permissions. Reported by Google on 2026-05-29
[N/A][517804731] Medium CVE-2026-106284: Out of bounds read in Printing. Reported by Google on 2026-05-29
[N/A][518039724] Medium CVE-2026-106209: UI misrepresentation in Mobile. Reported by Google on 2026-05-29
[N/A][518076654] Medium CVE-2026-106216: Cross-site request forgery in ReadingList. Reported by Google on 2026-05-30
[N/A][518091868] Medium CVE-2026-106328: Incorrect authorization in PDF. Reported by Google on 2026-05-30
[N/A][518096516] Medium CVE-2026-106387: Missing authorization in Mobile. Reported by Google on 2026-05-30
[N/A][518108937] Medium CVE-2026-106400: Clickjacking in Messages. Reported by Google on 2026-05-30
[N/A][519499907] Medium CVE-2026-106205: Missing authorization in Passwords. Reported by Google on 2026-06-03
[N/A][520153320] Medium CVE-2026-106213: Race condition in WebAudio. Reported by Google on 2026-06-05
[N/A][520507737] Medium CVE-2026-106230: Incorrect reference resolution in Offline. Reported by Google on 2026-06-05
[N/A][520533412] Medium CVE-2026-106367: Missing authorization in Mobile. Reported by Google on 2026-06-05
[N/A][520573237] Medium CVE-2026-106226: Improper input validation in Compositing. Reported by Google on 2026-06-06
[N/A][521949525] Medium CVE-2026-106229: UI misrepresentation in FileSystem. Reported by Google on 2026-06-09
[N/A][522299740] Medium CVE-2026-106232: UI misrepresentation in Browser. Reported by Google on 2026-06-10
[N/A][522325665] Medium CVE-2026-106391: Incorrect authorization in WebShare. Reported by Google on 2026-06-10
[N/A][522722456] Medium CVE-2026-106336: Observable discrepancy in Paint. Reported by Google on 2026-06-11
[N/A][523601696] Medium CVE-2026-106403: Incorrect authorization in Accessibility. Reported by Google on 2026-06-13
[N/A][523699645] Medium CVE-2026-106373: Use after free in Fonts. Reported by Google on 2026-06-13
[N/A][523750306] Medium CVE-2026-106301: Confused deputy in Contextual Tasks. Reported by Google on 2026-06-14
[N/A][524587778] Medium CVE-2026-106292: Buffer overflow in Fonts. Reported by Google on 2026-06-16
[N/A][533066295] Medium CVE-2026-106262: Incomplete cleanup in GetUserMedia. Reported by Google on 2026-07-09
[TBD][535639435] Medium CVE-2026-106360: Information leak in Payments. Reported by NH DEV on 2026-07-17
[N/A][536507840] Medium CVE-2026-106375: Incomplete cleanup in Dawn. Reported by Google on 2026-07-19
[N/A][537107728] Medium CVE-2026-106348: Information leak in Animation. Reported by Google on 2026-07-21
[N/A][537832408] Medium CVE-2026-106307: Incorrect authorization in Network. Reported by Google on 2026-07-22
[N/A][540072162] Medium CVE-2026-106212: Incorrect authorization in Autofill. Reported by Google on 2026-07-28
[TBD][543082212] Medium CVE-2026-106398: Incorrect authorization in Media. Reported by caveeroo on 2026-08-05
[N/A][550512266] Medium CVE-2026-106388: Missing authorization in DataTransfer. Reported by leolee on 2026-08-21
[N/A][553118313] Medium CVE-2026-106271: Missing authorization in Workers. Reported by Google on 2026-08-26
[N/A][553121488] Medium CVE-2026-106395: Uninitialized resource in Dawn. Reported by Google on 2026-08-26
[N/A][553124799] Medium CVE-2026-106304: Out of bounds read in ANGLE. Reported by Google on 2026-08-26
[N/A][553129739] Medium CVE-2026-106401: Out of bounds write in Media. Reported by Google on 2026-08-26
[N/A][553135213] Medium CVE-2026-106330: Information leak in Paint. Reported by Google on 2026-08-26
[N/A][553138969] Medium CVE-2026-106295: Incorrect authorization in Unbounded Element. Reported by Google on 2026-08-26
[N/A][553139506] Medium CVE-2026-106352: Incorrect authorization in WebProtect. Reported by Google on 2026-08-26
[N/A][553145497] Medium CVE-2026-106337: UI misrepresentation in UI. Reported by Google on 2026-08-26
[N/A][553149001] Medium CVE-2026-106263: Improper input validation in SignIn. Reported by Google on 2026-08-26
[N/A][553150261] Medium CVE-2026-106404: Incorrect authorization in FontAccess. Reported by Google on 2026-08-26
[N/A][553154579] Medium CVE-2026-106183: Missing authorization in Chromoting. Reported by Google on 2026-08-26
[N/A][553156221] Medium CVE-2026-106386: Uninitialized resource in WebAudio. Reported by Google on 2026-08-26
[N/A][553164077] Medium CVE-2026-106351: Observable discrepancy in Safebrowsing. Reported by Google on 2026-08-27
[TBD][554348119] Medium CVE-2026-106384: Missing authorization in SiteIsolation. Reported by med.bassia on 2026-08-29
[TBD][554619028] Medium CVE-2026-106207: Race condition in V8. Reported by flyyy on 2026-08-30
[N/A][556235808] Medium CVE-2026-106321: Information leak in Editing. Reported by Google on 2026-09-02
[TBD][556304559] Medium CVE-2026-106210: Observable discrepancy in Scroll. Reported by Hafiizh on 2026-09-03
[TBD][557036053] Medium CVE-2026-106254: Information leak in Mobile. Reported by Anonymous on 2026-09-04
[TBD][557288890] Medium CVE-2026-106372: Incorrect authorization in UI. Reported by Quyen Son at VinFast (@zer0qs) on 2026-09-05
[N/A][558539954] Medium CVE-2026-106341: Type confusion in V8. Reported by Google on 2026-09-08
[TBD][559097675] Medium CVE-2026-106409: Incorrect reference resolution in WebAppInstalls. Reported by Quyen Son at VinFast (@zer0qs) on 2026-09-09
[$2,000][503794852] Low CVE-2026-106340: Missing authorization in CredentialProvider. Reported by Wooseok Sung on 2026-04-17
[$1,000][417555081] Low CVE-2026-106276: UI misrepresentation in Payments. Reported by Khalil Zhani on 2025-05-14
[TBD][448789663] Low CVE-2026-106338: UI misrepresentation in PictureInPicture. Reported by Hafiizh on 2025-10-02
[TBD][450323465] Low CVE-2026-106317: UI misrepresentation in FullScreen. Reported by Manojkumar Jaganathan (Manojkumar J - HackerBro Technologies | LinkedIn) Aka TheWhiteEvil (HackerOne profile - the-white-evil) with HackerBro Technologies on 2025-10-09
[N/A][498375898] Low CVE-2026-106344: Missing authorization in Permissions. Reported by Google on 2026-04-01
[N/A][500532594] Low CVE-2026-106359: Confused deputy in DeviceBoundSessionCredentials. Reported by Google on 2026-04-08
[N/A][502078791] Low CVE-2026-106353: Improper input validation in Mobile. Reported by Google on 2026-04-13
[N/A][502111211] Low CVE-2026-106312: Missing authorization in SignIn. Reported by Google on 2026-04-13
[N/A][502282293] Low CVE-2026-106191: Missing authorization in Actor. Reported by Google on 2026-04-13
[N/A][502497790] Low CVE-2026-106250: Missing authorization in Actor. Reported by Google on 2026-04-14
[TBD][503708636] Low CVE-2026-106309: Incorrect authorization in Selection. Reported by Putra Mahardika | Instagram @mhrdkaa._ on 2026-04-17
[N/A][511776800] Low CVE-2026-106187: Missing authorization in Permissions. Reported by Google on 2026-05-10
[N/A][513122002] Low CVE-2026-106394: Incomplete cleanup in Glic. Reported by Project Fortify on 2026-05-14
[N/A][513383360] Low CVE-2026-106306: Incorrect authorization in DevTools. Reported by Google on 2026-05-15
[N/A][513423334] Low CVE-2026-106427: Confused deputy in Mobile. Reported by Google on 2026-05-15
[N/A][513446410] Low CVE-2026-106252: Incorrect comparison in Fonts. Reported by Google on 2026-05-15
[N/A][513518289] Low CVE-2026-106287: Information loss in CORS. Reported by Google on 2026-05-15
[N/A][513735469] Low CVE-2026-106297: Incorrect authorization in Scheduling. Reported by Google on 2026-05-16
[N/A][513821237] Low CVE-2026-106260: Incorrect authorization in DevTools. Reported by Google on 2026-05-16
[N/A][514456975] Low CVE-2026-106362: Missing authorization in DevTools. Reported by Google on 2026-05-19
[N/A][514460295] Low CVE-2026-106275: Uninitialized resource in GPU. Reported by Google on 2026-05-19
[N/A][517703787] Low CVE-2026-106199: Incorrect authorization in Actor. Reported by Google on 2026-05-29
[N/A][519211890] Low CVE-2026-106299: Improper input validation in WebAudio. Reported by Google on 2026-06-02
[N/A][519458746] Low CVE-2026-106422: Incorrect authorization in API. Reported by Google on 2026-06-03
[N/A][522557469] Low CVE-2026-106186: Uncontrolled search path element in CredentialProvider. Reported by Google on 2026-06-11
[N/A][524435922] Low CVE-2026-106247: Buffer overflow in ANGLE. Reported by Google on 2026-06-16
[N/A][524681280] Low CVE-2026-106192: Information leak in Mobile. Reported by Google on 2026-06-16
[N/A][530237174] Low CVE-2026-106399: Out of bounds read in Skia. Reported by Google on 2026-07-01
[N/A][533084756] Low CVE-2026-106264: Missing authorization in Web Authentication (Passkeys & Security Keys). Reported by Google on 2026-07-09
[N/A][533119681] Low CVE-2026-106285: UI misrepresentation in WebAppInstalls. Reported by Google on 2026-07-09
[N/A][534843648] Low CVE-2026-106220: Information leak in Passwords. Reported by Google on 2026-07-14
[N/A][536471438] Low CVE-2026-106417: Integer overflow in Media. Reported by Google on 2026-07-19
[N/A][540049672] Low CVE-2026-106221: Confused deputy in WebAPKs. Reported by Google on 2026-07-28
[N/A][540076586] Low CVE-2026-106259: Incorrect authorization in PermissionElement. Reported by Google on 2026-07-28
[N/A][540078886] Low CVE-2026-106296: Improper privilege management in UI. Reported by Google on 2026-07-28
[TBD][552440317] Low CVE-2026-106249: Incorrect authorization in Autofill. Reported by mute1008 on 2026-08-25
[TBD][552832446] Low CVE-2026-106374: Type confusion in V8. Reported by SecBuddyN, Tencent KeenLab (CodeBuddy Security) on 2026-08-26
[N/A][553168380] Low CVE-2026-106380: UI misrepresentation in UI. Reported by Google on 2026-08-27
[N/A][553250818] Low CVE-2026-106179: UI misrepresentation in WebAppInstalls. Reported by Google on 2026-08-27
[N/A][553252261] Low CVE-2026-106368: UI misrepresentation in UI. Reported by Google on 2026-08-27
[N/A][553255283] Low CVE-2026-106237: Information leak in Permissions. Reported by Google on 2026-08-27
[N/A][553256068] Low CVE-2026-106331: Improper input validation in Extensions. Reported by Google on 2026-08-27
[N/A][553269860] Low CVE-2026-106270: Incorrect authorization in WebAppInstalls. Reported by Google on 2026-08-27
[N/A][553270559] Low CVE-2026-106350: Incorrect authorization in Browser. Reported by Google on 2026-08-27
[N/A][553274076] Low CVE-2026-106288: Missing authorization in Browser. Reported by Google on 2026-08-27
[N/A][553276352] Low CVE-2026-106305: UI misrepresentation in Mobile. Reported by Google on 2026-08-27
[N/A][553283471] Low CVE-2026-106418: Missing authorization in Network. Reported by Google on 2026-08-27
[N/A][553317583] Low CVE-2026-106343: Improper state validation in Autofill AI. Reported by Google on 2026-08-27
[N/A][553326010] Low CVE-2026-106371: Incorrect authorization in Transactions Platform. Reported by Google on 2026-08-27
[N/A][553335319] Low CVE-2026-106256: Information leak in Passwords. Reported by Google on 2026-08-27
[N/A][553336689] Low CVE-2026-106413: Race condition in Browser. Reported by Google on 2026-08-27
[N/A][553913506] Low CVE-2026-106339: Use of released resource in Core. Reported by Google on 2026-08-28
[N/A][553929758] Low CVE-2026-106320: Use of released resource in UI. Reported by Google on 2026-08-28
[N/A][553930843] Low CVE-2026-106195: Incorrect authorization in Chromoting. Reported by Google on 2026-08-28
[N/A][554556423] Low CVE-2026-106316: UI misrepresentation in Chromoting. Reported by Google on 2026-08-29
[N/A][554874487] Low CVE-2026-106385: Race condition in Chromoting. Reported by Google on 2026-08-30
[N/A][556211265] Low CVE-2026-106325: Incorrect reference resolution in Core. Reported by Google on 2026-09-02
[N/A][556213916] Low CVE-2026-106390: Incorrect provision of specified functionality in SanitizerAPI. Reported by Google on 2026-09-02
[N/A][556215048] Low CVE-2026-106294: Incomplete cleanup in Chromoting. Reported by Google on 2026-09-02
[N/A][556229780] Low CVE-2026-106334: Information leak in Payments. Reported by Google on 2026-09-02
[N/A][556233068] Low CVE-2026-106236: UI misrepresentation in Chromoting. Reported by Google on 2026-09-02
[N/A][556237314] Low CVE-2026-106251: UI misrepresentation in Chromoting. Reported by Google on 2026-09-02
[N/A][556250086] Low CVE-2026-106310: Use of released resource in FontAccess. Reported by Google on 2026-09-02
[N/A][556258544] Low CVE-2026-106345: Use of released resource in Session. Reported by Google on 2026-09-02
[N/A][556259957] Low CVE-2026-106272: UI misrepresentation in Chromoting. Reported by Google on 2026-09-02
[N/A][559777100] Low CVE-2026-106355: Missing authorization in Media. Reported by Google on 2026-09-10
[TBD][564085088] Low CVE-2026-106234: Use after free in Network. Reported by Findingz on 2026-09-20
[TBD][565742178] Low CVE-2026-106269: Use after free in CSS. Reported by xinyang on 2026-09-24
This update includes 37 security fixes. Please see the Chrome Security Page for more information.
[TBD][567736859] Critical CVE-2026-110152: Buffer overflow in ANGLE. Reported by Zhenpeng (Leo) Lin at depthfirst on 2026-09-30
[N/A][568437149] Critical CVE-2026-110149: Use after free in Browser. Reported by Google on 2026-10-01
[N/A][568719364] Critical CVE-2026-110136: Use after free in PDF. Reported by Xinyang Ge on 2026-10-02
[N/A][568826881] Critical CVE-2026-110161: Use after free in Network. Reported by Google on 2026-10-02
[N/A][568827293] Critical CVE-2026-110165: Use after free in Core. Reported by Google on 2026-10-02
[N/A][570050934] Critical CVE-2026-110148: Use after free in SVG. Reported by Xinyang Ge on 2026-10-05
[N/A][570638834] Critical CVE-2026-110151: Use after free in Media. Reported by Xinyang Ge on 2026-10-06
[$1,000][540499008] High CVE-2026-110162: Use after free in Desktop. Reported by Findingz on 2026-07-29
[N/A][496308073] High CVE-2026-110170: Use after free in Bindings. Reported by Google on 2026-03-25
[N/A][552510359] High CVE-2026-110160: Missing authorization in ReadingMode. Reported by Google on 2026-08-25
[N/A][554531101] High CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk. Reported by Google on 2026-08-29
[TBD][561039723] High CVE-2026-110146: Information leak in Passwords. Reported by Hoyong Jin on 2026-09-14
[TBD][561334760] High CVE-2026-110150: Privilege elevation in Installer. Reported by M. Fauzan Wijaya (Gh05t666nero) on 2026-09-14
[N/A][561892119] High CVE-2026-110156: Incorrect reference resolution in Extensions. Reported by Google on 2026-09-15
[N/A][561997899] High CVE-2026-110137: Use after free in WebRTC. Reported by Google on 2026-09-15
[N/A][562038980] High CVE-2026-110140: Type confusion in V8. Reported by Google on 2026-09-15
[N/A][562242421] High CVE-2026-110158: Use after free in Passwords. Reported by Xinyang Ge on 2026-09-16
[N/A][562243925] High CVE-2026-110145: Use after free in Passwords. Reported by Xinyang Ge on 2026-09-16
[TBD][564573066] High CVE-2026-110159: Incorrect authorization in Updater. Reported by Aria Akhavan - Haikhavan Security on 2026-09-21
[TBD][565252396] High CVE-2026-110144: Incorrect authorization in Mojo. Reported by Souma Ohsawa on 2026-09-23
[N/A][565742182] High CVE-2026-110153: Use after free in Media. Reported by xinyang on 2026-09-24
[TBD][566496747] High CVE-2026-110166: Buffer overflow in Animation. Reported by Syn4pse (@ret2happy) on 2026-09-26
[N/A][567088929] High CVE-2026-110169: Use after free in V8. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-28
[N/A][568010382] High CVE-2026-110168: Use after free in V8. Reported by Google on 2026-10-01
[TBD][568037533] High CVE-2026-110139: Use after free in Media. Reported by weihengqiuu on 2026-09-30
[N/A][568719352] High CVE-2026-110172: Use after free in Media. Reported by Xinyang Ge on 2026-10-02
[N/A][568730794] High CVE-2026-110164: Use after free in DOM. Reported by Xinyang Ge on 2026-10-02
[N/A][568831102] High CVE-2026-110163: Use after free in DOM. Reported by Xinyang Ge on 2026-10-02
[N/A][568895734] High CVE-2026-110141: Observable discrepancy in Media. Reported by Google on 2026-10-02
[N/A][568899705] High CVE-2026-110138: Use after free in ShapeDetection. Reported by Google on 2026-10-02
[N/A][570047270] High CVE-2026-110157: Use after free in SVG. Reported by Xinyang Ge on 2026-10-05
[N/A][570050928] High CVE-2026-110147: Use after free in PDF. Reported by Xinyang Ge on 2026-10-05
[N/A][570167920] High CVE-2026-110154: Use after free in Canvas. Reported by Xinyang Ge on 2026-10-05
[N/A][570167922] High CVE-2026-110155: Buffer overflow in PDFium. Reported by Xinyang Ge on 2026-10-05
[N/A][570461696] High CVE-2026-110167: Use after free in Media. Reported by Xinyang Ge on 2026-10-06
[N/A][570675082] High CVE-2026-110171: Use after free in Media. Reported by Xinyang Ge on 2026-10-06
[TBD][553525515] Medium CVE-2026-110142: Use after free in FileSystem. Reported by Andrew Boni on 2026-08-27
This update includes 10 security fixes. Please see the Chrome Security Page for more information.
[N/A][568719351] Critical CVE-2026-110922: Use after free in Prerender. Reported by Xinyang Ge on 2026-10-02
[N/A][567638392] High CVE-2026-110913: Memory corruption in DOM. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-29
[N/A][568831769] High CVE-2026-110919: Use after free in V8. Reported by Xinyang Ge on 2026-10-02
[N/A][568937999] High CVE-2026-110918: Memory corruption in Core. Reported by Google on 2026-10-03
[TBD][569038297] High CVE-2026-110917: Memory corruption in SVG. Reported by C0rk1 on 2026-10-03
[N/A][569286602] High CVE-2026-110921: Use after free in V8. Reported by Xinyang Ge on 2026-10-05
[N/A][569659194] High CVE-2026-110920: Memory corruption in V8. Reported by Xinyang Ge on 2026-10-05
[N/A][501886301] Medium CVE-2026-110916: Improper input validation in Desktop. Reported by Google on 2026-04-12
[N/A][556272421] Medium CVE-2026-110915: Use after free in Compositing. Reported by Google on 2026-09-02
[N/A][563194341] Medium CVE-2026-110914: Memory corruption in Workers. Reported by Google on 2026-09-18
This update includes 353 security fixes. Please see the Chrome Security Page for more information.
[N/A][569165786] Critical CVE-2026-113341: Memory corruption in Skia. Reported by Google on 2026-10-03
[N/A][570093145] Critical CVE-2026-113279: Memory corruption in Accessibility. Reported by Xinyang Ge on 2026-10-05
[N/A][570638836] Critical CVE-2026-113072: Memory corruption in CSS. Reported by Xinyang Ge on 2026-10-06
[N/A][570740320] Critical CVE-2026-113280: Memory corruption in Paint. Reported by Xinyang Ge on 2026-10-06
[N/A][571618833] Critical CVE-2026-113271: Use after free in Accessibility. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-10-08
[N/A][574041825] Critical CVE-2026-113303: Memory corruption in WebRTC. Reported by OpenAI Codex Security (kylebot) on 2026-10-15
[$10,000][560749221] High CVE-2026-113101: Use after free in SiteIsolation. Reported by Quyen Son at VinFast (@zer0qs) on 2026-09-13
[$3,000][526039697] High CVE-2026-113097: Use after free in FileSystem. Reported by nh.dev2022 on 2026-06-21
[$2,000][548989584] High CVE-2026-113098: Memory corruption in CacheStorage. Reported by Salvatore Gulizia (nickname: Serotav) on 2026-08-19
[$2,000][550626693] High CVE-2026-113242: Memory corruption in ANGLE. Reported by JonathanBouman on 2026-08-23
[$2,000][551059870] High CVE-2026-113058: Use after free in WebUI. Reported by OGINOME Tomohito on 2026-08-22
[$2,000][556505644] High CVE-2026-113082: Memory corruption in ANGLE. Reported by Zabith Mohammed on 2026-09-03
[$2,000][557075191] High CVE-2026-113119: Use after free in Network. Reported by JonathanBouman on 2026-09-04
[$2,000][558377544] High CVE-2026-113092: Use after free in Passwords. Reported by OGINOME Tomohito on 2026-09-07
[$2,000][560423758] High CVE-2026-113134: Memory corruption in ANGLE. Reported by Jinpyo Lee on 2026-09-12
[$2,000][572862424] High CVE-2026-113339: Use after free in SVG. Reported by Arni Hardarson (Neonix Security) on 2026-10-12
[$1,000][555337558] High CVE-2026-113317: Memory corruption in Accessibility. Reported by Findingz on 2026-08-31
[$1,000][559932543] High CVE-2026-113193: Memory corruption in V8. Reported by Nebula Security (@nebusecurity) on 2026-09-11
[$1,000][563788518] High CVE-2026-113117: Improper input validation in ANGLE. Reported by hamayanhamayan on 2026-09-19
[N/A][533122125] High CVE-2026-113188: Memory corruption in GPU. Reported by Google on 2026-07-09
[N/A][535749304] High CVE-2026-113104: Memory corruption in Frames. Reported by Google on 2026-07-17
[N/A][536639352] High CVE-2026-113322: Memory corruption in Dawn. Reported by Google on 2026-07-19
[N/A][548066294] High CVE-2026-113163: Use after free in WebGL. Reported by Google on 2026-08-17
[N/A][553117109] High CVE-2026-113253: Use after free in Canvas. Reported by Google on 2026-08-26
[N/A][553117374] High CVE-2026-113298: Use after free in Transactions Platform. Reported by Google on 2026-08-26
[N/A][553117511] High CVE-2026-113315: Memory corruption in ANGLE. Reported by Google on 2026-08-26
[N/A][553119084] High CVE-2026-113236: Use after free in Navigation. Reported by Google on 2026-08-26
[N/A][553121395] High CVE-2026-113284: Memory corruption in XML. Reported by Google on 2026-08-26
[N/A][553128833] High CVE-2026-113141: Use after free in Transactions Platform. Reported by Google on 2026-08-26
[N/A][553140050] High CVE-2026-113316: Improper input validation in Views. Reported by Google on 2026-08-26
[N/A][556750158] High CVE-2026-113234: Memory corruption in ANGLE. Reported by Google on 2026-09-03
[N/A][556750258] High CVE-2026-113252: Improper input validation in ANGLE. Reported by Google on 2026-09-03
[TBD][558464760] High CVE-2026-113305: Use after free in Privacy. Reported by Hafiizh on 2026-09-08
[N/A][559266116] High CVE-2026-113044: Use after free in V8. Reported by OpenAI Codex Security (amyb) on 2026-09-10
[N/A][560251733] High CVE-2026-113135: Memory corruption in PictureInPicture. Reported by Xinyang Ge on 2026-09-11
[N/A][561499641] High CVE-2026-113266: Memory corruption in ANGLE. Reported by Google on 2026-09-14
[N/A][561999377] High CVE-2026-113273: Memory corruption in ANGLE. Reported by Google on 2026-09-15
[N/A][562040486] High CVE-2026-113293: Use after free in ANGLE. Reported by Google on 2026-09-15
[N/A][562109703] High CVE-2026-113225: Memory corruption in Browser. Reported by Google on 2026-09-15
[N/A][563354824] High CVE-2026-113210: Use after free in ANGLE. Reported by Google on 2026-09-18
[N/A][563355257] High CVE-2026-113285: Memory corruption in ANGLE. Reported by Google on 2026-09-18
[N/A][563357593] High CVE-2026-113324: Use after free in GPU. Reported by Google on 2026-09-18
[TBD][564064199] High CVE-2026-113334: Improper input validation in ANGLE. Reported by Jinpyo Lee on 2026-09-20
[N/A][565838017] High CVE-2026-113020: Improper input validation in Date. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-24
[TBD][566091009] High CVE-2026-113222: Use after free in V8. Reported by zenneth (randomguy6407) on 2026-09-25
[N/A][566136673] High CVE-2026-113318: Memory corruption in ServiceWorker. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-25
[TBD][566687517] High CVE-2026-113310: Out of bounds read in Bluetooth. Reported by James Burton on 2026-09-27
[N/A][567175125] High CVE-2026-113338: Use after free in Turbolev. Reported by OpenAI Codex Security (amyb) on 2026-09-28
[N/A][567612004] High CVE-2026-113093: Memory corruption in DisplayLocking. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-29
[TBD][568215670] High CVE-2026-113012: Improper input validation in GPU. Reported by Matthias Pleschinger (Popax21) on 2026-10-01
[TBD][568822820] High CVE-2026-113175: Improper input validation in FileSystem. Reported by huntersnot4 on 2026-10-02
[N/A][568831099] High CVE-2026-113192: Memory corruption in V8. Reported by Xinyang Ge on 2026-10-02
[N/A][568831768] High CVE-2026-113309: Out of bounds read in Media. Reported by Xinyang Ge on 2026-10-02
[N/A][568897206] High CVE-2026-113295: Out of bounds read in ANGLE. Reported by Google on 2026-10-02
[N/A][568900845] High CVE-2026-113217: Use after free in WebAppInstalls. Reported by Google on 2026-10-02
[TBD][568906040] High CVE-2026-113040: Improper input validation in Proxy. Reported by o on 2026-10-02
[TBD][568945639] High CVE-2026-113161: Use after free in WebRTC. Reported by C0rk1 on 2026-10-03
[N/A][569127861] High CVE-2026-113154: Memory corruption in Canvas. Reported by Xinyang Ge on 2026-10-05
[N/A][569286604] High CVE-2026-113336: Memory corruption in Compositing. Reported by Xinyang Ge on 2026-10-05
[N/A][569408568] High CVE-2026-113181: Use after free in Navigation. Reported by Xinyang Ge on 2026-10-05
[TBD][570003644] High CVE-2026-113019: Use after free in Turbolev. Reported by Project WhatForLunch (@nebusecurity) on 2026-10-05
[N/A][570167919] High CVE-2026-113095: Out of bounds read in Focus. Reported by Xinyang Ge on 2026-10-05
[TBD][570203091] High CVE-2026-113160: Use after free in Turbolev. Reported by Hoyong Jin on 2026-10-06
[N/A][572237007] High CVE-2026-113212: Memory corruption in PDF. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-10-10
[TBD][572598342] High CVE-2026-113000: Memory corruption in Paint. Reported by Arni Hardarson (Neonix Security) on 2026-10-12
[TBD][572695599] High CVE-2026-113179: Use after free in Paint. Reported by Arni Hardarson (Neonix Security) on 2026-10-12
[TBD][572893186] High CVE-2026-112993: Use after free in Input. Reported by Arni Hardarson (Neonix Security) on 2026-10-12
[$2,000][340578708] Medium CVE-2026-113055: Type confusion in FullScreen. Reported by Kirill Baev on 2024-05-15
[$2,000][40942045] Medium CVE-2026-113068: Use after free in Input. Reported by Hafiizh (hafiizh . - Part time Independent vulnerability researcher | LinkedIn) on 2023-11-13
[$2,000][429432679] Medium CVE-2026-113320: Memory corruption in Navigation. Reported by @RenwaX23 on 2025-07-03
[$2,000][477664550] Medium CVE-2026-113231: Improper input validation in Extensions. Reported by Luan Herrera (@lbherrera_) on 2026-01-21
[$2,000][501419037] Medium CVE-2026-113174: Use after free in Extensions. Reported by foxribeye on 2026-04-10
[$1,000][494352583] Medium CVE-2026-113022: Memory corruption in PDFium. Reported by Jamos Zhu, Sebastian Dowell on 2026-03-19
[TBD][40055319] Medium CVE-2026-113079: Use after free in SiteIsolation. Reported by David Erceg on 2021-03-25
[N/A][441089142] Medium CVE-2026-113191: Use after free in Internals. Reported by Google on 2025-08-25
[TBD][490808751] Medium CVE-2026-113250: Use after free in ANGLE. Reported by mikey233 of HackerOne on 2026-03-08
[N/A][495471295] Medium CVE-2026-113109: Memory corruption in API. Reported by Google on 2026-03-23
[N/A][495899355] Medium CVE-2026-113113: Use after free in Extensions. Reported by Google on 2026-03-24
[N/A][496644575] Medium CVE-2026-113069: Memory corruption in Compositing. Reported by Google on 2026-03-26
[N/A][496650333] Medium CVE-2026-113006: Out of bounds read in Navigation. Reported by Google on 2026-03-26
[N/A][497026542] Medium CVE-2026-113263: Use after free in Core. Reported by Google on 2026-03-27
[N/A][497072295] Medium CVE-2026-113018: Memory corruption in IME. Reported by Google on 2026-03-28
[N/A][497299147] Medium CVE-2026-113301: Memory corruption in WebAppInstalls. Reported by Google on 2026-03-28
[N/A][497482008] Medium CVE-2026-113034: Memory corruption in FileSystem. Reported by Google on 2026-03-29
[N/A][497494634] Medium CVE-2026-113094: Memory corruption in API. Reported by Google on 2026-03-29
[N/A][497577345] Medium CVE-2026-113240: Use after free in Chromecast. Reported by Google on 2026-03-30
[N/A][497965748] Medium CVE-2026-113102: Out of bounds read in FileSystem. Reported by Google on 2026-03-31
[N/A][498733953] Medium CVE-2026-113142: Memory corruption in Extensions. Reported by Google on 2026-04-01
[N/A][498742883] Medium CVE-2026-113281: Memory corruption in SiteIsolation. Reported by Google on 2026-04-01
[N/A][498786597] Medium CVE-2026-113035: Out of bounds read in API. Reported by Google on 2026-04-02
[N/A][498828493] Medium CVE-2026-113211: Memory corruption in ServiceWorker. Reported by Google on 2026-04-02
[N/A][498843754] Medium CVE-2026-113011: Use after free in CredentialProvider. Reported by Google on 2026-04-02
[N/A][498861195] Medium CVE-2026-113198: Use after free in Extensions. Reported by Google on 2026-04-02
[N/A][498994634] Medium CVE-2026-113257: Memory corruption in Media. Reported by Google on 2026-04-02
[N/A][499112419] Medium CVE-2026-113070: Out of bounds read in GetUserMedia. Reported by Google on 2026-04-03
[N/A][499143720] Medium CVE-2026-113176: Memory corruption in Omnibox. Reported by Google on 2026-04-03
[N/A][499250086] Medium CVE-2026-113150: Memory corruption in Bindings. Reported by Google on 2026-04-03
[N/A][499365667] Medium CVE-2026-113311: Use after free in ServiceWorker. Reported by Google on 2026-04-03
[TBD][499520020] Medium CVE-2026-113078: Improper input validation in Compositing. Reported by Werner Kasselman on 2026-04-05
[N/A][499869964] Medium CVE-2026-113033: Use after free in Streaming. Reported by Google on 2026-04-06
[N/A][500173014] Medium CVE-2026-113026: Memory corruption in PDF. Reported by Google on 2026-04-07
[N/A][500491981] Medium CVE-2026-113302: Use after free in Extensions. Reported by Google on 2026-04-08
[N/A][500497398] Medium CVE-2026-113164: Memory corruption in Voice. Reported by Google on 2026-04-08
[N/A][500522368] Medium CVE-2026-113239: Range error in SiteIsolation. Reported by Google on 2026-04-08
[N/A][500536121] Medium CVE-2026-113131: Memory corruption in Bluetooth. Reported by Google on 2026-04-08
[N/A][501370810] Medium CVE-2026-113333: Memory corruption in Extensions. Reported by Google on 2026-04-10
[N/A][501531546] Medium CVE-2026-113147: Improper input validation in WebShare. Reported by Google on 2026-04-10
[N/A][501680084] Medium CVE-2026-113337: Memory corruption in Scroll. Reported by Google on 2026-04-11
[N/A][501730091] Medium CVE-2026-113127: Memory corruption in Browser. Reported by Google on 2026-04-11
[N/A][501738293] Medium CVE-2026-113129: Improper access control in Extensions. Reported by Google on 2026-04-11
[N/A][501786099] Medium CVE-2026-113264: Improper input validation in Extensions. Reported by Google on 2026-04-12
[N/A][501805751] Medium CVE-2026-113105: Use after free in Extensions. Reported by Google on 2026-04-12
[N/A][501875966] Medium CVE-2026-113220: Memory corruption in Extensions. Reported by Google on 2026-04-12
[N/A][502040109] Medium CVE-2026-113275: Use after free in API. Reported by Google on 2026-04-13
[N/A][502085234] Medium CVE-2026-113283: Memory corruption in CredentialProvider. Reported by Google on 2026-04-13
[N/A][502251640] Medium CVE-2026-113014: Use after free in PerformanceAPIs. Reported by Google on 2026-04-13
[N/A][502299325] Medium CVE-2026-113108: Use after free in Script. Reported by Google on 2026-04-13
[N/A][502376419] Medium CVE-2026-113343: Memory corruption in Sandbox. Reported by Google on 2026-04-14
[N/A][502689637] Medium CVE-2026-113319: Use after free in Accessibility. Reported by Google on 2026-04-14
[N/A][502710681] Medium CVE-2026-113057: Improper access control in ComputePressure. Reported by Google on 2026-04-15
[N/A][503583985] Medium CVE-2026-113219: Memory corruption in Contacts. Reported by Google on 2026-04-17
[N/A][503584859] Medium CVE-2026-113005: Memory corruption in Bluetooth. Reported by Google on 2026-04-17
[N/A][503774403] Medium CVE-2026-113209: Memory corruption in Navigation. Reported by Google on 2026-04-17
[N/A][504073211] Medium CVE-2026-113166: Memory corruption in History. Reported by Google on 2026-04-18
[N/A][504107363] Medium CVE-2026-113051: Memory corruption in CSS. Reported by Google on 2026-04-18
[N/A][504231046] Medium CVE-2026-113196: Improper access control in Mobile. Reported by Google on 2026-04-19
[TBD][505024593] Medium CVE-2026-113003: Memory corruption in HID. Reported by Florian Pradines on 2026-04-21
[N/A][505994167] Medium CVE-2026-113155: Use after free in Glic. Reported by Google on 2026-04-24
[N/A][506152584] Medium CVE-2026-113290: Use after free in Input. Reported by Google on 2026-04-24
[N/A][507227196] Medium CVE-2026-113183: Memory corruption in FedCM. Reported by Google on 2026-04-28
[N/A][511311494] Medium CVE-2026-113289: Improper input validation in PerformanceAPIs. Reported by Google on 2026-05-08
[N/A][511325076] Medium CVE-2026-113146: Memory corruption in PerformanceAPIs. Reported by Google on 2026-05-09
[N/A][511806651] Medium CVE-2026-113207: Use after free in SiteIsolation. Reported by Google on 2026-05-10
[N/A][511820971] Medium CVE-2026-113205: Use after free in Variations. Reported by Google on 2026-05-10
[N/A][513147880] Medium CVE-2026-113162: Improper input validation in Actor. Reported by Google on 2026-05-14
[N/A][513184498] Medium CVE-2026-113118: Memory corruption in Extensions. Reported by Google on 2026-05-14
[N/A][513226023] Medium CVE-2026-113232: Memory corruption in Search. Reported by Google on 2026-05-14
[N/A][513417142] Medium CVE-2026-113327: Use after free in Chromecast. Reported by Google on 2026-05-15
[N/A][513452101] Medium CVE-2026-112999: Use after free in API. Reported by Google on 2026-05-15
[N/A][513480110] Medium CVE-2026-113249: Improper input validation in Mobile. Reported by Google on 2026-05-15
[N/A][513486355] Medium CVE-2026-113272: Memory corruption in Extensions. Reported by Google on 2026-05-15
[N/A][513512147] Medium CVE-2026-113112: Use after free in Extensions. Reported by Google on 2026-05-15
[N/A][513521516] Medium CVE-2026-113321: Use after free in Extensions. Reported by Google on 2026-05-15
[N/A][513620385] Medium CVE-2026-113059: Memory corruption in Sensor. Reported by Google on 2026-05-15
[N/A][513758047] Medium CVE-2026-113137: Memory corruption in Extensions. Reported by Google on 2026-05-16
[N/A][513774784] Medium CVE-2026-113208: Use after free in ContextualSearch. Reported by Google on 2026-05-16
[N/A][513789297] Medium CVE-2026-113238: Memory corruption in CustomTabs. Reported by Google on 2026-05-16
[N/A][513989760] Medium CVE-2026-113194: Memory corruption in Core. Reported by Google on 2026-05-17
[N/A][514016335] Medium CVE-2026-113189: Use after free in Core. Reported by Google on 2026-05-17
[N/A][514017698] Medium CVE-2026-113060: Improper input validation in Bluetooth. Reported by Google on 2026-05-17
[N/A][514018015] Medium CVE-2026-113115: Use after free in Transactions Platform. Reported by Google on 2026-05-17
[N/A][514040146] Medium CVE-2026-113045: Out of bounds read in Offline. Reported by Google on 2026-05-17
[N/A][514066180] Medium CVE-2026-113307: Memory corruption in Extensions. Reported by Google on 2026-05-17
[N/A][514066540] Medium CVE-2026-113009: Use after free in WindowControlsOverlay. Reported by Google on 2026-05-17
[N/A][514079212] Medium CVE-2026-113071: Use after free in Notifications. Reported by Google on 2026-05-17
[N/A][514080341] Medium CVE-2026-113278: Use after free in Extensions. Reported by Google on 2026-05-17
[TBD][514372708] Medium CVE-2026-113190: Use after free in ServiceWorker. Reported by TheKng on 2026-05-18
[N/A][514422784] Medium CVE-2026-112992: Memory corruption in Canvas. Reported by Google on 2026-05-18
[N/A][514447367] Medium CVE-2026-112995: Use after free in Animation. Reported by Google on 2026-05-18
[N/A][515440087] Medium CVE-2026-113261: Use after free in WebAppInstalls. Reported by Google on 2026-05-21
[TBD][515451922] Medium CVE-2026-113172: Memory corruption in ServiceWorker. Reported by Bhavya on 2026-05-21
[N/A][517031871] Medium CVE-2026-113332: Memory corruption in GPU. Reported by Google on 2026-05-27
[N/A][517094892] Medium CVE-2026-113262: Use after free in Extensions. Reported by Google on 2026-05-27
[N/A][517221283] Medium CVE-2026-113149: Memory corruption in FullScreen. Reported by Google on 2026-05-27
[N/A][517407917] Medium CVE-2026-113206: Memory corruption in Omnibox. Reported by Google on 2026-05-28
[N/A][517461056] Medium CVE-2026-113185: Memory corruption in Extensions. Reported by Google on 2026-05-28
[N/A][517477395] Medium CVE-2026-113171: Memory corruption in Prompts. Reported by Google on 2026-05-28
[N/A][517486906] Medium CVE-2026-113042: Use after free in Extensions. Reported by Google on 2026-05-28
[N/A][517809727] Medium CVE-2026-113276: Memory corruption in Passwords. Reported by Google on 2026-05-29
[N/A][518003952] Medium CVE-2026-113218: Use after free in DataTransfer. Reported by Google on 2026-05-29
[N/A][518055043] Medium CVE-2026-113195: Improper input validation in Downloads. Reported by Google on 2026-05-30
[N/A][518055862] Medium CVE-2026-113328: Improper input validation in Privacy. Reported by Google on 2026-05-30
[N/A][518055882] Medium CVE-2026-113335: Memory corruption in Extensions. Reported by Google on 2026-05-30
[N/A][518065595] Medium CVE-2026-113255: Use after free in CustomTabs. Reported by Google on 2026-05-30
[N/A][518068748] Medium CVE-2026-113076: Use after free in Toolbar. Reported by Google on 2026-05-30
[N/A][518088604] Medium CVE-2026-113325: Memory corruption in SignIn. Reported by Google on 2026-05-30
[N/A][518099505] Medium CVE-2026-113084: Improper input validation in Permissions. Reported by Google on 2026-05-30
[N/A][518102808] Medium CVE-2026-113308: Use after free in Core. Reported by Google on 2026-05-30
[N/A][518108422] Medium CVE-2026-113224: Memory corruption in WebAppInstalls. Reported by Google on 2026-05-30
[N/A][518138781] Medium CVE-2026-113148: Memory corruption in WebUI. Reported by Google on 2026-05-30
[N/A][518240362] Medium CVE-2026-113010: Out of bounds read in Extensions. Reported by Google on 2026-05-30
[N/A][519217664] Medium CVE-2026-113073: Use after free in Browser. Reported by Google on 2026-06-02
[N/A][520017400] Medium CVE-2026-113265: Memory corruption in BFCache. Reported by Google on 2026-06-04
[N/A][520429499] Medium CVE-2026-113329: Out of bounds read in Installer. Reported by Google on 2026-06-05
[N/A][521978171] Medium CVE-2026-113043: Use after free in iOSWeb. Reported by Google on 2026-06-09
[N/A][523201686] Medium CVE-2026-113202: Use after free in BrowserTag. Reported by Google on 2026-06-12
[N/A][523237501] Medium CVE-2026-113016: Improper input validation in Extensions. Reported by Google on 2026-06-12
[N/A][523705767] Medium CVE-2026-113246: Memory corruption in iOSWebView. Reported by Google on 2026-06-13
[N/A][524319033] Medium CVE-2026-113041: Use after free in Actor. Reported by Google on 2026-06-15
[N/A][531182364] Medium CVE-2026-113126: Memory corruption in PolicyContainer. Reported by Google on 2026-07-04
[N/A][532939000] Medium CVE-2026-113031: Memory corruption in Media. Reported by Google on 2026-07-09
[N/A][534956586] Medium CVE-2026-113081: Use after free in Compositing. Reported by Google on 2026-07-15
[N/A][536607604] Medium CVE-2026-113139: Memory corruption in Autofill. Reported by Google on 2026-07-19
[N/A][537109293] Medium CVE-2026-113128: Missing authorization in Animation. Reported by Google on 2026-07-21
[N/A][537465180] Medium CVE-2026-113049: Memory corruption in Core. Reported by Google on 2026-07-21
[TBD][541604102] Medium CVE-2026-113032: Memory corruption in Omnibox. Reported by Anonymous on 2026-08-01
[TBD][544328873] Medium CVE-2026-113204: Use after free in TrustedWebActivities. Reported by jodyritonga on 2026-08-09
[TBD][544498565] Medium CVE-2026-113144: Memory corruption in Speech. Reported by Cassio Lima on 2026-08-10
[TBD][549529981] Medium CVE-2026-113054: Out of bounds read in SiteIsolation. Reported by a45hif on 2026-08-20
[TBD][551930637] Medium CVE-2026-113123: Use after free in GPU. Reported by TIENPA on 2026-08-24
[TBD][552951369] Medium CVE-2026-113277: Out of bounds read in CustomTabs. Reported by mute1008 on 2026-08-26
[N/A][553114456] Medium CVE-2026-113136: Memory corruption in DevTools. Reported by Google on 2026-08-26
[N/A][553126587] Medium CVE-2026-113106: Memory corruption in Skia. Reported by Google on 2026-08-26
[N/A][553144392] Medium CVE-2026-113001: Use after free in Workers. Reported by Google on 2026-08-26
[N/A][553146807] Medium CVE-2026-113064: Memory corruption in OptimizationGuide. Reported by Google on 2026-08-26
[N/A][553147798] Medium CVE-2026-113243: Memory corruption in DOM. Reported by Google on 2026-08-26
[N/A][553150372] Medium CVE-2026-113326: Memory corruption in Core. Reported by Google on 2026-08-26
[N/A][553150456] Medium CVE-2026-113124: Memory corruption in DataTransfer. Reported by Google on 2026-08-26
[N/A][553153823] Medium CVE-2026-113230: Improper input validation in Browser. Reported by Google on 2026-08-26
[N/A][553155133] Medium CVE-2026-113090: Memory corruption in Interstitials. Reported by Google on 2026-08-26
[N/A][553157579] Medium CVE-2026-113158: Use after free in Streaming. Reported by Google on 2026-08-26
[N/A][553159183] Medium CVE-2026-113077: Memory corruption in Core. Reported by Google on 2026-08-26
[N/A][553160293] Medium CVE-2026-113282: Use after free in Views. Reported by Google on 2026-08-26
[N/A][553163770] Medium CVE-2026-113165: Use after free in Core. Reported by Google on 2026-08-27
[N/A][553163820] Medium CVE-2026-113178: Memory corruption in Views. Reported by Google on 2026-08-27
[TBD][553390794] Medium CVE-2026-113110: Memory corruption in ShadowDOM. Reported by Zabith Mohammed on 2026-08-27
[TBD][553394270] Medium CVE-2026-113007: Memory corruption in Permissions. Reported by Anonymous on 2026-08-27
[TBD][553845833] Medium CVE-2026-113187: Use after free in DOM. Reported by Zabith Mohammed on 2026-08-28
[N/A][553931271] Medium CVE-2026-113075: Use after free in DevTools. Reported by Google on 2026-08-28
[TBD][554008013] Medium CVE-2026-113259: Use after free in Frames. Reported by Zabith Mohammed on 2026-08-28
[N/A][554556700] Medium CVE-2026-113228: Use after free in Network. Reported by Google on 2026-08-29
[N/A][556227230] Medium CVE-2026-113099: Improper input validation in Omnibox. Reported by Google on 2026-09-02
[N/A][556899544] Medium CVE-2026-113216: Use after free in Navigation. Reported by Google on 2026-09-04
[TBD][557501968] Medium CVE-2026-113270: Use after free in Internals. Reported by weihengqiuu on 2026-09-05
[TBD][558301759] Medium CVE-2026-113087: Use after free in Actor. Reported by Joshua Uphold on 2026-09-07
[TBD][559707641] Medium CVE-2026-113267: Memory corruption in Video. Reported by weihengqiuu on 2026-09-10
[N/A][559720179] Medium CVE-2026-113304: Memory corruption in GPU. Reported by Google on 2026-09-10
[TBD][559795243] Medium CVE-2026-113177: Use after free in FileSystem. Reported by Hoyong Jin on 2026-09-11
[N/A][560157609] Medium CVE-2026-113151: Out of bounds read in Actor. Reported by Google on 2026-09-11
[N/A][560373976] Medium CVE-2026-113028: Use after free in Media. Reported by Google on 2026-09-12
[N/A][560476932] Medium CVE-2026-113120: Improper input validation in Media. Reported by Google on 2026-09-12
[TBD][560664595] Medium CVE-2026-112997: Memory corruption in CSS. Reported by caveeroo on 2026-09-12
[TBD][560939312] Medium CVE-2026-113037: Use after free in WebSockets. Reported by HoneyBee on 2026-09-13
[TBD][561099700] Medium CVE-2026-113153: Memory corruption in SiteIsolation. Reported by Hoyong Jin on 2026-09-14
[TBD][561396577] Medium CVE-2026-113138: Memory corruption in WebAppInstalls. Reported by phamtien.ohr.s on 2026-09-14
[N/A][561660149] Medium CVE-2026-113030: Improper access control in V8. Reported by OpenAI Codex Security (amyb) on 2026-09-15
[N/A][561787556] Medium CVE-2026-113100: Memory corruption in Audio. Reported by Google on 2026-09-15
[TBD][561921279] Medium CVE-2026-113221: Use after free in Google Lens. Reported by OGINOME Tomohito on 2026-09-15
[N/A][561926123] Medium CVE-2026-113344: Use after free in Performance. Reported by Google on 2026-09-15
[N/A][562024413] Medium CVE-2026-113342: Memory corruption in Network. Reported by Google on 2026-09-15
[N/A][562041808] Medium CVE-2026-113159: Improper access control in DevTools. Reported by Google on 2026-09-15
[N/A][562111801] Medium CVE-2026-113233: Out of bounds read in Core. Reported by Google on 2026-09-15
[N/A][562223549] Medium CVE-2026-113065: Use after free in Media. Reported by Google on 2026-09-16
[N/A][562225226] Medium CVE-2026-113002: Memory corruption in Transactions Platform. Reported by Google on 2026-09-16
[N/A][562226316] Medium CVE-2026-113199: Out of bounds read in Payments. Reported by Google on 2026-09-16
[N/A][562230410] Medium CVE-2026-113197: Use after free in Forms. Reported by Google on 2026-09-16
[N/A][562230438] Medium CVE-2026-113203: Use after free in CSS. Reported by Google on 2026-09-16
[N/A][562236428] Medium CVE-2026-113170: Use after free in Autofill. Reported by Google on 2026-09-16
[N/A][562236876] Medium CVE-2026-113258: Memory corruption in Chromoting. Reported by Google on 2026-09-16
[N/A][562237117] Medium CVE-2026-113297: Improper access control in Ozone. Reported by Google on 2026-09-16
[N/A][562237871] Medium CVE-2026-113062: Improper input validation in API. Reported by Google on 2026-09-16
[N/A][562238089] Medium CVE-2026-113096: Memory corruption in Text. Reported by Google on 2026-09-16
[N/A][562655586] Medium CVE-2026-113050: Out of bounds read in HID. Reported by Google on 2026-09-17
[N/A][563089510] Medium CVE-2026-113008: Memory corruption in Transactions Platform. Reported by Google on 2026-09-18
[TBD][563163857] Medium CVE-2026-113111: Use after free in Compositing. Reported by Shubham Raj, Causal Security - https://causalsecurity.com on 2026-09-18
[N/A][563350676] Medium CVE-2026-113200: Use after free in ANGLE. Reported by Google on 2026-09-18
[N/A][563352451] Medium CVE-2026-113143: Memory corruption in ANGLE. Reported by Google on 2026-09-18
[N/A][563352515] Medium CVE-2026-113157: Information leak in ANGLE. Reported by Google on 2026-09-18
[N/A][563352925] Medium CVE-2026-113235: Improper input validation in Passwords. Reported by Google on 2026-09-18
[N/A][563362367] Medium CVE-2026-113089: Improper input validation in PrintPreview. Reported by Google on 2026-09-18
[TBD][564213722] Medium CVE-2026-113340: Memory corruption in ANGLE. Reported by Jinpyo Lee on 2026-09-21
[TBD][564326756] Medium CVE-2026-113052: Memory corruption in V8. Reported by gundyman on 2026-09-21
[TBD][565349184] Medium CVE-2026-113133: Memory corruption in PlatformIntegration. Reported by Roshan Singh on 2026-09-23
[N/A][567673405] Medium CVE-2026-113086: Improper input validation in Input. Reported by Google on 2026-09-29
[$2,000][40056239] Low CVE-2026-113251: Use after free in PDF. Reported by kirtikumarar on 2021-06-16
[$2,000][40092886] Low CVE-2026-113215: Use after free in Extensions. Reported by David Erceg on 2018-10-29
[$1,000][40061291] Low CVE-2026-113053: Use after free in Cookies. Reported by Luan Herrera (@lbherrera_) on 2022-10-09
[$1,000][439873332] Low CVE-2026-113312: Memory corruption in Autofill. Reported by Manojkumar Jaganathan (Manojkumar J - HackerBro Technologies | LinkedIn) Aka TheWhiteEvil (HackerOne profile - the-white-evil) with HackerBro Technologies on 2025-08-20
[$1,000][480153486] Low CVE-2026-113323: Use after free in Chrome for iOS. Reported by Qadhafy Muhammad Tera on 2026-01-30
[N/A][497087197] Low CVE-2026-113114: Use after free in SignIn. Reported by Google on 2026-03-28
[N/A][497408124] Low CVE-2026-113015: Use after free in Workers. Reported by Google on 2026-03-29
[N/A][497433155] Low CVE-2026-113091: Use after free in PerformanceAPIs. Reported by Google on 2026-03-29
[N/A][497593347] Low CVE-2026-113168: Use after free in Permissions. Reported by Google on 2026-03-30
[N/A][497827101] Low CVE-2026-113229: Use after free in Loader. Reported by Google on 2026-03-30
[N/A][498748871] Low CVE-2026-113256: Use after free in Permissions. Reported by Google on 2026-04-02
[N/A][500474551] Low CVE-2026-113103: Use after free in WebProtect. Reported by Google on 2026-04-07
[N/A][502288792] Low CVE-2026-113056: Memory corruption in PerformanceAPIs. Reported by Google on 2026-04-13
[N/A][503665813] Low CVE-2026-113201: Memory corruption in Google Lens. Reported by Google on 2026-04-17
[N/A][505807063] Low CVE-2026-113027: Memory corruption in WebFonts. Reported by Google on 2026-04-23
[N/A][506148052] Low CVE-2026-113214: Improper input validation in FullScreen. Reported by Google on 2026-04-24
[N/A][513394775] Low CVE-2026-113004: Memory corruption in Sync. Reported by Google on 2026-05-15
[N/A][513468106] Low CVE-2026-113300: Out of bounds write in Forms. Reported by Google on 2026-05-15
[N/A][513686739] Low CVE-2026-113213: Memory corruption in DevTools. Reported by Google on 2026-05-15
[N/A][513692667] Low CVE-2026-113167: Memory corruption in Network. Reported by Google on 2026-05-16
[N/A][513735940] Low CVE-2026-113223: Memory corruption in DevTools. Reported by Google on 2026-05-16
[N/A][514008724] Low CVE-2026-113291: Memory corruption in FullScreen. Reported by Google on 2026-05-17
[N/A][514078082] Low CVE-2026-113241: Memory corruption in Toolbar. Reported by Google on 2026-05-17
[N/A][514078112] Low CVE-2026-113244: Improper input validation in UI. Reported by Google on 2026-05-17
[N/A][514445657] Low CVE-2026-113048: Memory corruption in DevTools. Reported by Google on 2026-05-18
[N/A][514508203] Low CVE-2026-113247: Memory corruption in DevTools. Reported by Google on 2026-05-19
[N/A][517148875] Low CVE-2026-113023: Improper input validation in Extensions. Reported by Google on 2026-05-27
[N/A][517320634] Low CVE-2026-113330: Memory corruption in CustomTabs. Reported by Google on 2026-05-28
[N/A][523248913] Low CVE-2026-113226: Memory corruption in Model. Reported by Google on 2026-06-12
[N/A][523264945] Low CVE-2026-113152: Memory corruption in SignIn. Reported by Google on 2026-06-12
[N/A][523708661] Low CVE-2026-113029: Improper access control in ANGLE. Reported by Google on 2026-06-13
[N/A][524316342] Low CVE-2026-113296: Memory corruption in Actor. Reported by Google on 2026-06-15
[N/A][524695296] Low CVE-2026-113306: Improper input validation in Network. Reported by Google on 2026-06-16
[N/A][532985249] Low CVE-2026-113245: Memory corruption in DevTools. Reported by Google on 2026-07-09
[N/A][532987588] Low CVE-2026-113299: Memory corruption in WebProtect. Reported by Google on 2026-07-09
[N/A][533043403] Low CVE-2026-113024: Use after free in WebAppInstalls. Reported by Google on 2026-07-09
[N/A][533113044] Low CVE-2026-113025: Use after free in Input. Reported by Google on 2026-07-09
[N/A][533135911] Low CVE-2026-113080: Use after free in WebAppInstalls. Reported by Google on 2026-07-10
[N/A][533644359] Low CVE-2026-113186: Memory corruption in DevTools. Reported by Google on 2026-07-11
[N/A][535725111] Low CVE-2026-113180: Memory corruption in ContentCapture. Reported by Google on 2026-07-16
[N/A][536445815] Low CVE-2026-113140: Use after free in ANGLE. Reported by Google on 2026-07-19
[N/A][540068924] Low CVE-2026-113184: Memory corruption in Scheduling. Reported by Google on 2026-07-28
[N/A][553132165] Low CVE-2026-113017: Use after free in Views. Reported by Google on 2026-08-26
[N/A][553134101] Low CVE-2026-112998: Memory corruption in Views. Reported by Google on 2026-08-26
[N/A][553146562] Low CVE-2026-113021: Use after free in WebAppInstalls. Reported by Google on 2026-08-26
[N/A][553169805] Low CVE-2026-113145: Memory corruption in Messages. Reported by Google on 2026-08-27
[N/A][553248404] Low CVE-2026-113292: Improper input validation in Omnibox. Reported by Google on 2026-08-27
[N/A][553253820] Low CVE-2026-113156: Use after free in Messages. Reported by Google on 2026-08-27
[N/A][553259748] Low CVE-2026-113116: Use after free in DevTools. Reported by Google on 2026-08-27
[N/A][553267541] Low CVE-2026-113047: Memory corruption in BrowserTag. Reported by Google on 2026-08-27
[N/A][553274389] Low CVE-2026-113173: Improper input validation in UI. Reported by Google on 2026-08-27
[N/A][553326035] Low CVE-2026-113260: Memory corruption in Core. Reported by Google on 2026-08-27
[N/A][553334273] Low CVE-2026-113269: Memory corruption in BrowserTag. Reported by Google on 2026-08-27
[N/A][553335083] Low CVE-2026-113036: Memory corruption in HTML. Reported by Google on 2026-08-27
[N/A][553661952] Low CVE-2026-113268: Memory corruption in Navigation. Reported by Google on 2026-08-27
[N/A][553931056] Low CVE-2026-113038: Memory corruption in DevTools. Reported by Google on 2026-08-28
[N/A][554475322] Low CVE-2026-113313: Memory corruption in DevTools. Reported by Google on 2026-08-29
[N/A][554557866] Low CVE-2026-113061: Memory corruption in Chromoting. Reported by Google on 2026-08-29
[N/A][554560940] Low CVE-2026-113248: Memory corruption in FileSystem. Reported by Google on 2026-08-29
[N/A][556213889] Low CVE-2026-113288: Memory corruption in Core. Reported by Google on 2026-09-02
[N/A][559776316] Low CVE-2026-113085: Use after free in Media. Reported by Google on 2026-09-10
[N/A][559776445] Low CVE-2026-113107: Use after free in Media. Reported by Google on 2026-09-10
[N/A][562223550] Low CVE-2026-113066: Memory corruption in Fonts. Reported by Google on 2026-09-16
[N/A][562909956] Low CVE-2026-113121: Memory corruption in ContextMenu. Reported by Google on 2026-09-17
[N/A][562945664] Low CVE-2026-113287: Use after free in Prompts. Reported by Google on 2026-09-17
[N/A][562953023] Low CVE-2026-113132: Memory corruption in DevTools. Reported by Google on 2026-09-17
[N/A][562955271] Low CVE-2026-113169: Memory corruption in WebAppInstalls. Reported by Google on 2026-09-17
[N/A][562955705] Low CVE-2026-113254: Memory corruption in DevTools. Reported by Google on 2026-09-17
[N/A][562960821] Low CVE-2026-113063: Improper input validation in Chromoting. Reported by Google on 2026-09-17
[N/A][562962437] Low CVE-2026-112994: Memory corruption in Browser. Reported by Google on 2026-09-17
[N/A][562970433] Low CVE-2026-113314: Use after free in Media. Reported by Google on 2026-09-17
[N/A][562978160] Low CVE-2026-113237: Memory corruption in Chromoting. Reported by Google on 2026-09-17
[N/A][562993085] Low CVE-2026-113331: Memory corruption in Controls. Reported by Google on 2026-09-17
[N/A][562994234] Low CVE-2026-113182: Memory corruption in Passwords. Reported by Google on 2026-09-17
[N/A][562999635] Low CVE-2026-113046: Improper input validation in Passwords. Reported by Google on 2026-09-17
[N/A][562999766] Low CVE-2026-113067: Use after free in Chromoting. Reported by Google on 2026-09-17
[N/A][563003907] Low CVE-2026-113074: Use after free in Media. Reported by Google on 2026-09-17
[N/A][563004214] Low CVE-2026-113130: Use after free in Actor. Reported by Google on 2026-09-17
[N/A][563015337] Low CVE-2026-113294: Improper input validation in Loader. Reported by Google on 2026-09-17
[N/A][563015686] Low CVE-2026-112996: Memory corruption in Loader. Reported by Google on 2026-09-17
[N/A][563016452] Low CVE-2026-113122: Memory corruption in Loader. Reported by Google on 2026-09-17
[N/A][563021080] Low CVE-2026-113227: Use after free in Editing. Reported by Google on 2026-09-17
[N/A][563183231] Low CVE-2026-113286: Memory corruption in Google Lens. Reported by Google on 2026-09-18
[N/A][563337773] Low CVE-2026-113083: Memory corruption in Actor. Reported by Google on 2026-09-18
[N/A][563812927] Low CVE-2026-113088: Memory corruption in Mobile. Reported by Google on 2026-09-19
[N/A][563814519] Low CVE-2026-113013: Memory corruption in DevTools. Reported by Google on 2026-09-19
[N/A][563819290] Low CVE-2026-113125: Memory corruption in DevTools. Reported by Google on 2026-09-19
[TBD][566069559] Low CVE-2026-113039: Use after free in Bookmarks. Reported by NH DEV on 2026-09-25
[TBD][570715681] Low CVE-2026-113274: Use after free in ReadingMode. Reported by chipsec on 2026-10-06
Members who viewed this thread in the last 5 minutes
