CVE Program partner

Chrome

Chrome

API
CVEs, 365 days3,3256,838 all time, 123 rejected
Quality59%median 99%
CVSS by the CNA0%share of records
CWE77%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA100%lower is better
OrganisationChrome
RoleCNA
TypeVendor, Open Source, Researcher
Reports toGoogle → mitre
ScopeChrome issues and projects that are not in another CNA’s scope.
Advisorieshttps://chromereleases.googleblog.com/

Latest CVEs · RSS

  • CVE-2026-110914 2026-10-15
    Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a cr
  • CVE-2026-110915 2026-10-15
    Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML
  • CVE-2026-110916 2026-10-15
    Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox
  • CVE-2026-110920 2026-10-15
    Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
  • CVE-2026-110921 2026-10-15
    Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Ch
  • CVE-2026-110917 2026-10-15
    Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity:
  • CVE-2026-110918 2026-10-15
    Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity:
  • CVE-2026-110919 2026-10-15
    Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Ch
  • CVE-2026-110913 2026-10-15
    Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
  • CVE-2026-110922 2026-10-15
    Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pa
  • CVE-2026-110142 2026-10-13
    Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML
  • CVE-2026-110171 2026-10-13
    Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
  • CVE-2026-110167 2026-10-13
    Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
  • CVE-2026-110155 2026-10-13
    Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
  • CVE-2026-110154 2026-10-13
    Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafte
  • CVE-2026-110147 2026-10-13
    Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C
  • CVE-2026-110157 2026-10-13
    Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C
  • CVE-2026-110138 2026-10-13
    Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary
  • CVE-2026-110141 2026-10-13
    Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium s
  • CVE-2026-110163 2026-10-13
    Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C
  • CVE-2026-110164 2026-10-13
    Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted H
  • CVE-2026-110172 2026-10-13
    Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
  • CVE-2026-110139 2026-10-13
    Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
  • CVE-2026-110168 2026-10-13
    Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Ch
  • CVE-2026-110169 2026-10-13
    Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Ch

All CVE Program partners