chromium-bin

Version: 153.0.8010.12

Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.

Install package

min add chromium-bin

Toolautomationchromechromium

Updated last month

OpenSSF Score

Last scored on 2026-08-24

What is "chromium-bin"?

Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.

How to use this package

Quick install

Installs the package into the current environment for this session. Use --build or --runtime to persist it as a build-time or runtime dependency.

min add chromium-bin

Declare as a task dependency in minimal.toml

Listing the package under tasks.<name>.packages makes it available inside that task’s sandbox.

[tasks.dev]
packages = ["chromium-bin"]

Build-time vs runtime

Choose build-time for tools needed during compilation, runtime for dynamic libraries loaded at runtime.

min add --build chromium-bin
min add --runtime chromium-bin

Compare versions

Dependencies (35)

Dependencies
Name	Version	Kind
alsa-lib	1.2.16.1	runtime
at-spi2-core	2.60.6	runtime
atk	2.38.0	runtime
base	—	build
bash	5.3	runtime
cairo	1.18.4	runtime
cups CVE:3	2.4.20	runtime
dbus	1.16.2	runtime
eudev	3.2.14	runtime
expat	2.9.0	runtime
fontconfig	2.18.3	runtime
freetype	2.14.3	runtime
fribidi	1.0.16	runtime
gcc	15.2.0	runtime
glib	2.88.3	runtime
glibc	2.44	runtime
harfbuzz	14.5.0	runtime
libdrm	2.4.134	runtime
liberation-fonts	2.1.5	runtime
libx11	1.8.13	runtime
libxcb	1.17.0	runtime
libxcomposite	0.4.7	runtime
libxdamage	1.1.7	runtime
libxext	1.3.7	runtime
libxfixes	6.0.2	runtime
libxkbcommon	1.13.2	runtime
libxrandr	1.5.5	runtime
libxrender	0.9.12	runtime
libxshmfence	1.3.3	runtime
libxtst	1.2.5	runtime
mesa	26.2.0	runtime
nspr	4.40	runtime
nss	3.126.1	runtime
pango	1.58.2	runtime
unzip CVE:1	6.0	build

Dependency changes

No dependants

No other packages in the registry depend on this one.

chromium-bin v153.0.8010.1218b2cfb
Diff
Lines:+6 / -6Deps:35CVE:723
Released: last month
chromium-bin v152.0.7977.8094a134
Diff
Lines:+14 / -6Deps:35
Released: 2 months ago
chromium-bin v151.0.7922.346f5a478
Diff
Lines:+4 / -4Deps:35
Released: 3 months ago
chromium-bin v151.0.7922.1923a2fb4
Diff
Lines:+8 / -6Deps:35(+1)
Released: 3 months ago
chromium-bin v147.0.7727.1518aa69e
Diff
Lines:+320 / -22Deps:34
Released: 3 months ago
1. 18aa69e
  Diff
  Lines:+37 / -22Deps:34
  Released: 3 months ago
2. 1975757
  Diff
  Lines:+1Deps:34
  Released: 4 months ago
3. ebcee4f
  Diff
  Lines:+282Deps:34(+34)
  Released: 5 months ago
chromium-bin v150.0.7871.465ab6fd7
Diff
Lines:+2 / -2Deps:34(+34)
Released: 4 months ago

Include transitive

Showing 729 advisories, 6 of which are transitive via chromium-bin's dependencies

Security advisories for this package
	Status	IDs	Package	Version	Severity	Published
Critical (100)
	Under investigation	CVE-2026-110165	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	3 days ago
Summary Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-110161	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	3 days ago
Summary Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-110159	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	3 days ago
Summary Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-110152	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	3 days ago
Summary Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-110149	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	3 days ago
Summary Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-110142	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	3 days ago
Summary Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-110136	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	3 days ago
Summary Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106419	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	10 days ago
Summary Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106417	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	10 days ago
Summary Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106414	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	10 days ago
Summary Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106401	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	10 days ago
Summary Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106382	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	10 days ago
Summary Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106375	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	10 days ago
Summary Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106372	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	10 days ago
Summary Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106358	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	10 days ago
Summary Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106329	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	10 days ago
Summary Incorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106323	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	10 days ago
Summary Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106298	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	10 days ago
Summary Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106294	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.1	10 days ago
Summary Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
	Under investigation	CVE-2026-106281	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	10 days ago
Summary Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106241	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	10 days ago
Summary Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106239	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	10 days ago
Summary Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106237	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	10 days ago
Summary Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
	Under investigation	CVE-2026-106234	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	10 days ago
Summary Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106227	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	10 days ago
Summary Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106211	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	10 days ago
Summary Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106197	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	10 days ago
Summary Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106195	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.1	10 days ago
Summary Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
	Under investigation	CVE-2026-102322	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	10 days ago
Summary Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-103630	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	14 days ago
Summary Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-103628	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	14 days ago
Summary Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-103626	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	14 days ago
Summary Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-102331	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-102316	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-102309	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-102308	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-102306	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-102304	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95357	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95356	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95350	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95349	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95347	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Use after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95339	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95331	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95329	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95325	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95318	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95313	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95311	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95310	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95299	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95284	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95283	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95281	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95277	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	17 days ago
Summary Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-93374	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	29 days ago
Summary Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-93373	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	29 days ago
Summary Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-93372	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	29 days ago
Summary Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-91749	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-91738	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-91729	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-91728	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-91718	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-91716	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-91710	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87654	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87650	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87646	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87643	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87638	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87637	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87634	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87621	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87613	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.0	last month
Summary Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87609	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87607	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in Device in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87595	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.8	last month
Summary Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87581	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87558	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87547	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87544	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.8	last month
Summary Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87534	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.8	last month
Summary Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87529	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87528	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87527	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87526	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87520	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87512	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87504	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87500	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87494	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87492	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87488	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87474	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87470	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87464	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87455	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87448	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87438	chromium-bin	151.0.7922.34 – 153.0.8010.12	Critical: 9.6	last month
Summary Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
High (232)
	Status	IDs	Package	Version	Severity	Published
	Under investigation	CVE-2026-110172	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	3 days ago
Summary Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-110171	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	3 days ago
Summary Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-110169	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	3 days ago
Summary Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-110168	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	3 days ago
Summary Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-110167	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	3 days ago
Summary Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-110166	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	3 days ago
Summary Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-110164	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	3 days ago
Summary Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-110163	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	3 days ago
Summary Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-110162	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	3 days ago
Summary Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-110158	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	3 days ago
Summary Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-110157	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	3 days ago
Summary Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-110156	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	3 days ago
Summary Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-110155	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	3 days ago
Summary Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-110154	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	3 days ago
Summary Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-110153	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	3 days ago
Summary Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-110151	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	3 days ago
Summary Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-110148	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	3 days ago
Summary Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-110147	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	3 days ago
Summary Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-110145	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	3 days ago
Summary Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-110144	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.6	3 days ago
Summary Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-110140	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	3 days ago
Summary Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-110139	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	3 days ago
Summary Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-110138	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	3 days ago
Summary Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-110137	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	3 days ago
Summary Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106426	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	10 days ago
Summary Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106423	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106421	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106412	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	10 days ago
Summary Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106411	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106409	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	10 days ago
Summary Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106403	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	10 days ago
Summary Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
	Under investigation	CVE-2026-106393	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	10 days ago
Summary Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106387	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106383	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106378	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	10 days ago
Summary Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106377	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	10 days ago
Summary Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106374	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106373	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106371	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106367	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.4	10 days ago
Summary Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a co-installed app. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106363	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	10 days ago
Summary Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106357	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106352	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106350	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106349	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106347	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106346	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106342	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106341	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106335	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106334	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106318	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106315	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106314	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106309	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106308	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Incorrect reference resolution in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106301	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	10 days ago
Summary Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
	Under investigation	CVE-2026-106293	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	10 days ago
Summary Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106292	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	10 days ago
Summary Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106291	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106283	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106279	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 7.4	10 days ago
Summary Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106278	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106274	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106271	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	10 days ago
Summary Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
	Under investigation	CVE-2026-106269	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106268	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106257	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106256	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Information leak in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106255	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106252	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106249	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Incorrect authorization in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106248	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in Bindings in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106247	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	10 days ago
Summary Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106240	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106238	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	10 days ago
Summary Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106235	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106233	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	10 days ago
Summary Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106228	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	10 days ago
Summary Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106225	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106221	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	10 days ago
Summary Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
	Under investigation	CVE-2026-106220	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106212	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106207	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106205	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	10 days ago
Summary Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
	Under investigation	CVE-2026-106204	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106203	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106201	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106200	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106199	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.2	10 days ago
Summary Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially bypass site isolation via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
	Under investigation	CVE-2026-106198	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.2	10 days ago
Summary Missing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
	Under investigation	CVE-2026-106196	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 7.6	10 days ago
Summary Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
	Under investigation	CVE-2026-106194	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	10 days ago
Summary Missing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106193	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106191	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	10 days ago
Summary Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-106190	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	10 days ago
Summary Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-106189	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 7.3	10 days ago
Summary Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
	Under investigation	CVE-2026-106188	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 7.1	10 days ago
Summary Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
	Under investigation	CVE-2026-106186	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.6	10 days ago
Summary Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-103631	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	14 days ago
Summary Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-103625	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	14 days ago
Summary Type confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-103624	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	14 days ago
Summary Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-103623	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	14 days ago
Summary Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-103622	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	14 days ago
Summary Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-102328	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	17 days ago
Summary Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-102327	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 7.5	17 days ago
Summary Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-102326	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	17 days ago
Summary Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-102324	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	17 days ago
Summary Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-102323	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	17 days ago
Summary Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-102321	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	17 days ago
Summary Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-102317	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.6	17 days ago
Summary Improper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-102302	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	17 days ago
Summary Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-102301	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	17 days ago
Summary Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-102299	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	17 days ago
Summary Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95381	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	17 days ago
Summary Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95380	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	17 days ago
Summary Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95376	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.0	17 days ago
Summary Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95373	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	17 days ago
Summary Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95372	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	17 days ago
Summary Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95369	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	17 days ago
Summary Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95365	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	17 days ago
Summary Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95362	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	17 days ago
Summary Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95355	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	17 days ago
Summary Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95354	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	17 days ago
Summary Use after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95353	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	17 days ago
Summary Use after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95351	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	17 days ago
Summary Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95348	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	17 days ago
Summary Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95345	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	17 days ago
Summary Use after free in Actor in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95344	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.0	17 days ago
Summary Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isolation via a crafted Chrome extension. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
	Under investigation	CVE-2026-95343	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	17 days ago
Summary Use after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95341	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	17 days ago
Summary Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95338	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	17 days ago
Summary Use after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95335	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	17 days ago
Summary Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95334	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	17 days ago
Summary Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95333	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	17 days ago
Summary Use after free in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95326	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.4	17 days ago
Summary Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95322	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	17 days ago
Summary Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95319	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	17 days ago
Summary Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95315	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 7.8	17 days ago
Summary Use after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95314	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	17 days ago
Summary Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
	Under investigation	CVE-2026-95306	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	17 days ago
Summary Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95304	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	17 days ago
Summary Out of bounds write in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95301	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	17 days ago
Summary Missing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
	Under investigation	CVE-2026-95298	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 7.8	17 days ago
Summary Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95286	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	17 days ago
Summary Type confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95285	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.4	17 days ago
Summary Missing authorization in WebView in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95282	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	17 days ago
Summary Use after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95280	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 7.5	17 days ago
Summary Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95278	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.4	17 days ago
Summary Missing authorization in WakeLock in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-95276	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	17 days ago
Summary Improper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code inside the sandbox via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-95274	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	17 days ago
Summary Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-93382	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	29 days ago
Summary Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-93381	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	29 days ago
Summary Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-93377	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	29 days ago
Summary Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-93375	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	29 days ago
Summary Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-91748	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-91745	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-91743	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-91741	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-91737	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-91736	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-91735	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-91734	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 7.4	last month
Summary Incorrect authorization in Core in Google Chrome on on Windows prior to 153.0.8010.47 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-91733	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-91732	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	last month
Summary Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
	Under investigation	CVE-2026-91731	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-91727	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	last month
Summary Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-91724	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-91722	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-91721	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-91719	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	last month
Summary Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
	Under investigation	CVE-2026-91715	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-91712	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-91711	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-91709	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87648	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87644	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Incorrect authorization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87639	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87636	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87633	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.6	last month
Summary Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87628	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87625	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87618	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Incorrect reference resolution in Storage in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87617	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87616	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87612	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87608	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 7.5	last month
Summary Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87606	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	last month
Summary Missing authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
	Under investigation	CVE-2026-87604	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87601	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 7.5	last month
Summary Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87588	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Use after free in Chromecast in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87587	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87585	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87582	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87579	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87578	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87572	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Injection in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87570	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted file. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87569	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Missing authorization in Views in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87554	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	last month
Summary Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87553	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87542	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87537	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	last month
Summary Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87536	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87533	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	last month
Summary Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87530	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	last month
Summary Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87524	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Use after free in Core in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87514	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	last month
Summary Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87510	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87509	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	last month
Summary Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87506	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87505	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	last month
Summary Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
	Under investigation	CVE-2026-87499	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	last month
Summary Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
	Under investigation	CVE-2026-87491	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87489	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87487	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87481	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Incorrect authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87480	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Use after free in Printing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87479	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.3	last month
Summary Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87471	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	last month
Summary Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
	Under investigation	CVE-2026-87467	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	last month
Summary Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87460	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87457	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.1	last month
Summary Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-87450	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 7.5	last month
Summary Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87444	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87440	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87433	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Race condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-87431	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 7.5	last month
Summary Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87430	chromium-bin	151.0.7922.34 – 153.0.8010.12	High: 8.8	last month
Summary Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Affected: 1.3.2	CVE-2026-85091	zlib	1.3.2	High	last month
Summary zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate Via gcc zlib Affected ranges 1.3.2 References Advisory: https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85091.json, https://nvd.nist.gov/vuln/detail/CVE-2026-85091, https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate Evidence: https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490 PACKAGE: https://github.com/madler/zlib ARTICLE: https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393
	Under investigation	GHSA-6fg3-hvw7-2fwq GHSA-8rgw-6xp9-2fg3 CVE-2025-9611	chromium-bin	151.0.7922.34 – 153.0.8010.12	High	9 months ago
Summary Microsoft Playwright MCP Server < 0.0.40 DNS Rebinding via Missing Origin Header Validation Affected ranges 151.0.7922.34 – 153.0.8010.12 References Advisory: https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/9xxx/CVE-2025-9611.json, https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-8rgw-6xp9-2fg3, https://nvd.nist.gov/vuln/detail/CVE-2025-9611, https://www.vulncheck.com/advisories/microsoft-playwright-mcp-server-dns-rebinding-via-missing-origin-header-validation Fix: https://github.com/microsoft/playwright/commit/1313fbd PACKAGE: https://github.com/microsoft/playwright
	Affected: 2.15.4	GHSA-pf6m-fxpq-fg8v CVE-2017-5029	libxml2	2.15.1 – 2.15.4	High: 8.8	9 years ago
Summary No summary published for this advisory. Via libxkbcommon libxml2 Affected ranges 2.15.1 – 2.15.4 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H References Advisory: http://rhn.redhat.com/errata/RHSA-2017-0499.html, http://www.debian.org/security/2017/dsa-3810 Web: https://crbug.com/676623, https://git.gnome.org/browse/libxslt/commit/?id=08ab2774b870de1c7b5a48693df75e8154addae5, http://www.securityfocus.com/bid/96767, http://www.securitytracker.com/id/1038157 ARTICLE: https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html
Medium (353)
	Status	IDs	Package	Version	Severity	Published
	Under investigation	CVE-2026-110170	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	3 days ago
Summary Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-110160	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	3 days ago
Summary Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially bypass site isolation via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-110150	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.5	3 days ago
Summary Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-110146	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	3 days ago
Summary Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-110143	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	3 days ago
Summary Use of uninitialized variable in ThirdParty lmza_sdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted file. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106427	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-106425	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	10 days ago
Summary Missing authorization in BrowserTag in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-106424	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.0	10 days ago
Summary Information leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-106422	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-106420	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106418	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106416	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106415	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Information leak in Enterprise in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106413	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	10 days ago
Summary Race condition in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106410	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	10 days ago
Summary Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106408	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106407	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106406	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106405	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.0	10 days ago
Summary Race condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass web origin policy via a co-installed app. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
	Under investigation	CVE-2026-106404	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106402	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.8	10 days ago
Summary Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106400	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Clickjacking in Messages in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106398	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106397	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.1	10 days ago
Summary Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
	Under investigation	CVE-2026-106396	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Improper input validation in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-106395	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	10 days ago
Summary Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-106394	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106392	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106391	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	10 days ago
Summary Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106390	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106389	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106388	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	10 days ago
Summary Missing authorization in DataTransfer in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106386	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106385	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	10 days ago
Summary Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106384	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Missing authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106381	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106380	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106379	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106376	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	10 days ago
Summary Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-106370	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	10 days ago
Summary Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-106369	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	10 days ago
Summary Missing authorization in Translate in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-106368	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106366	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-106365	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Missing authorization in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106364	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	10 days ago
Summary Incorrect authorization in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106362	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Missing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106361	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106360	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106359	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Confused deputy in DeviceBoundSessionCredentials in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-106356	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106355	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	10 days ago
Summary Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106354	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106353	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a co-installed app. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106351	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	10 days ago
Summary Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106348	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106345	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	10 days ago
Summary Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106344	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-106343	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Improper state validation in Autofill AI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106340	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.6	10 days ago
Summary Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106338	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106337	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106336	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106333	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Incorrect authorization in Input in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106332	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Integer overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106331	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Improper input validation in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privileged page via a crafted Chrome extension. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106330	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Information leak in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106328	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.9	10 days ago
Summary Incorrect authorization in PDF in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106327	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.1	10 days ago
Summary Incorrect authorization in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
	Under investigation	CVE-2026-106326	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.4	10 days ago
Summary Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-106325	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Incorrect reference resolution in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106324	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.1	10 days ago
Summary Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
	Under investigation	CVE-2026-106322	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.1	10 days ago
Summary Open redirect in AppManifest in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
	Under investigation	CVE-2026-106321	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Information leak in Editing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106320	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	10 days ago
Summary Use of released resource in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106317	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106316	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106313	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.1	10 days ago
Summary Incorrect authorization in Browser in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106312	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Missing authorization in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106311	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Clickjacking in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106310	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Use of released resource in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106307	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Incorrect authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106306	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-106305	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary UI misrepresentation in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106304	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	10 days ago
Summary Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-106303	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	10 days ago
Summary Observable discrepancy in Autofill AI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106302	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106300	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	10 days ago
Summary Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-106299	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Improper input validation in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-106297	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Incorrect authorization in Scheduling in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-106296	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-106295	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	10 days ago
Summary Incorrect authorization in Unbounded Element in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106290	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	10 days ago
Summary Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-106289	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106288	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Missing authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-106287	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-106286	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106285	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106284	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	10 days ago
Summary Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-106282	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106280	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106277	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106276	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary UI misrepresentation in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106275	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	10 days ago
Summary Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-106273	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	10 days ago
Summary Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-106272	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via crafted network traffic. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106270	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Incorrect authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106267	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106266	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106265	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106264	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Missing authorization in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106263	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106262	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	10 days ago
Summary Incomplete cleanup in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106261	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106260	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106259	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-106258	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	10 days ago
Summary Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-106254	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.1	10 days ago
Summary Information leak in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106253	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106251	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106250	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-106246	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106245	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106244	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Incorrect authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-106243	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	10 days ago
Summary Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106242	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Information leak in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106236	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106232	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106231	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	10 days ago
Summary Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-106230	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	10 days ago
Summary Incorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106229	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary UI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106226	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	10 days ago
Summary Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106223	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	10 days ago
Summary Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-106222	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.9	10 days ago
Summary Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106217	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106216	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary Cross-site request forgery in ReadingList in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-106215	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	10 days ago
Summary Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-106214	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	10 days ago
Summary Information leak in Proxy in Google Chrome on on Windows prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106213	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106209	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106208	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.1	10 days ago
Summary Missing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted Chrome extension. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
	Under investigation	CVE-2026-106206	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.9	10 days ago
Summary Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106202	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	10 days ago
Summary Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-106192	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.6	10 days ago
Summary Information leak in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106187	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	10 days ago
Summary Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106185	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	10 days ago
Summary Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-106184	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	10 days ago
Summary Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106183	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.9	10 days ago
Summary Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106182	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-106181	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	10 days ago
Summary Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-106179	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	10 days ago
Summary UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-103629	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	14 days ago
Summary Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-103627	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	14 days ago
Summary Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-103621	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	14 days ago
Summary Integer overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-102330	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	17 days ago
Summary Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-102329	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.1	17 days ago
Summary Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
	Under investigation	CVE-2026-102325	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	17 days ago
Summary Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-102320	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	17 days ago
Summary Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-102318	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	17 days ago
Summary Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-102314	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	17 days ago
Summary UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-102313	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	17 days ago
Summary Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-102312	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	17 days ago
Summary UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-102310	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	17 days ago
Summary Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-102307	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	17 days ago
Summary Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-102305	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	17 days ago
Summary UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-102303	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	17 days ago
Summary Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-95385	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	17 days ago
Summary Inappropriate implementation in PlatformIntegration in Google Chrome on on Windows prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-95384	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	17 days ago
Summary Race condition in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-95382	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	17 days ago
Summary Improper input validation in Auth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-95375	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.3	17 days ago
Summary Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
	Under investigation	CVE-2026-95374	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	17 days ago
Summary Incorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-95371	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	17 days ago
Summary Missing authorization in Views in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-95370	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	17 days ago
Summary Inappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-95368	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	17 days ago
Summary Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-95367	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	17 days ago
Summary Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-95366	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	17 days ago
Summary Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-95364	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	17 days ago
Summary Improper input validation in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-95363	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	17 days ago
Summary UI misrepresentation in FileSystem in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-95361	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	17 days ago
Summary Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-95360	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	17 days ago
Summary Race condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-95358	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.4	17 days ago
Summary Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-95352	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	17 days ago
Summary Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-95346	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.8	17 days ago
Summary UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-95342	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	17 days ago
Summary Missing authorization in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-95340	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	17 days ago
Summary Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-95337	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	17 days ago
Summary UI misrepresentation in Messages in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-95336	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	17 days ago
Summary Information leak in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-95332	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	17 days ago
Summary Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-95330	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	17 days ago
Summary Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-95328	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	17 days ago
Summary Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-95327	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	17 days ago
Summary Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-95323	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	17 days ago
Summary UI misrepresentation in Chromium in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-95321	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	17 days ago
Summary UI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-95320	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	17 days ago
Summary Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-95309	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	17 days ago
Summary UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-95307	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	17 days ago
Summary UI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-95305	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.8	17 days ago
Summary UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-95303	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	17 days ago
Summary Incomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-95300	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.8	17 days ago
Summary Missing authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-95297	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	17 days ago
Summary Missing authorization in Contextual Tasks in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-95296	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	17 days ago
Summary Missing authorization in Core in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-95295	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.6	17 days ago
Summary Information leak in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a local attacker to leak sensitive information via physical access. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-95294	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	17 days ago
Summary UI misrepresentation in Browser in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-95293	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	17 days ago
Summary Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-95292	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.8	17 days ago
Summary Incorrect authorization in Safebrowsing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-95291	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	17 days ago
Summary UI misrepresentation in SecurityIndicators in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-95290	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	17 days ago
Summary Missing authorization in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-95289	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	17 days ago
Summary Incorrect authorization in Scroll in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-95288	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	17 days ago
Summary UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-95287	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	17 days ago
Summary Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-95279	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	17 days ago
Summary UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-95275	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	17 days ago
Summary Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-93387	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	29 days ago
Summary Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-93386	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	29 days ago
Summary UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-93385	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	29 days ago
Summary Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-93383	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	29 days ago
Summary Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-93379	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	29 days ago
Summary Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-93376	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.3	29 days ago
Summary Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social engineering to read memory outside the sandbox via a local program. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
	Under investigation	CVE-2026-91746	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-91744	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	last month
Summary Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-91742	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.8	last month
Summary Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-91740	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-91739	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	last month
Summary Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-91726	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	last month
Summary Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-91725	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	last month
Summary Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-91720	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	last month
Summary Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-91717	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.1	last month
Summary Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-91714	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	last month
Summary Observable discrepancy in Fonts in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-91713	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	last month
Summary Missing authorization in Browser in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87658	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87656	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	last month
Summary Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-87655	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	last month
Summary Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87653	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	last month
Summary UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87651	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87649	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	last month
Summary UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-87645	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	last month
Summary Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-87642	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87641	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	last month
Summary Race condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-87640	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.1	last month
Summary Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
	Under investigation	CVE-2026-87635	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	last month
Summary UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87632	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87631	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87630	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Integer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87629	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87627	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Interpretation conflict in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted file. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87626	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87624	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	last month
Summary UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87623	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87622	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Missing authorization in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87620	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87619	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87615	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	last month
Summary Race condition in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87610	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Incorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87605	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	last month
Summary Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87603	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87602	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	last month
Summary Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-87600	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Improper input validation in Safebrowsing in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87599	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	last month
Summary Improper input validation in Interstitials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87598	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87597	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.8	last month
Summary UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87596	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87594	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	last month
Summary Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87593	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Information leak in Editing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87592	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Out of bounds read in Tint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87591	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87590	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.9	last month
Summary Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87589	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87586	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87584	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87583	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	last month
Summary UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87580	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Incorrect authorization in WebAppInstalls in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87577	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87575	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	last month
Summary Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-87574	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87573	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Improper input validation in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87571	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	last month
Summary Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
	Under investigation	CVE-2026-87568	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via crafted network traffic. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-87567	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted domain name. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-87566	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	last month
Summary Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87565	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Information leak in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87564	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87563	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87562	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-87561	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-87560	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-87559	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	last month
Summary UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87557	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Missing authorization in LocalNetworkAccess in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-87556	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-87555	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.7	last month
Summary Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-87552	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.5	last month
Summary Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87551	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-87550	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Improper encoding or escaping of output in CSS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87549	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87548	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Improper state validation in Installer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-87546	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-87545	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Information leak in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87543	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Missing authorization in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-87541	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Information leak in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87540	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	last month
Summary Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87538	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	last month
Summary Clickjacking in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87535	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87532	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87523	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	last month
Summary Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87522	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87519	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Incorrect authorization in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87518	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	last month
Summary Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87516	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87515	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Incorrect authorization in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87513	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Missing authorization in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87511	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87508	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87507	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	last month
Summary UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87503	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Inappropriate implementation in Downloads in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87502	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	last month
Summary Confused deputy in Fullscreen in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87501	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	last month
Summary UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87497	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Uninitialized resource in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87496	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	last month
Summary UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87495	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87493	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87490	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Information leak in Transactions Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87486	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.0	last month
Summary Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87484	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	last month
Summary UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87483	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87482	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.9	last month
Summary Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87478	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Observable discrepancy in Autofill in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87477	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87476	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87475	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Missing authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87473	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Incorrect authorization in FileHandling in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87472	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	last month
Summary Improper input validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87469	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Improper input validation in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via crafted network traffic. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-87468	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87466	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87465	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	last month
Summary Incorrect authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87463	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.8	last month
Summary Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially spoof address bar via crafted network traffic. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87462	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	last month
Summary UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87461	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted Chrome extension. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87459	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87458	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	last month
Summary UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87454	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Information leak in Enterprise in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87453	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	last month
Summary Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87449	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.3	last month
Summary Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87447	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87446	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87445	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.4	last month
Summary UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87443	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87441	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87439	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	last month
Summary Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87437	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87436	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	CVE-2026-87435	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 5.3	last month
Summary Information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-87432	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 4.2	last month
Summary Incorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
	Under investigation	CVE-2026-87429	chromium-bin	151.0.7922.34 – 153.0.8010.12	Medium: 6.5	last month
Summary Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
	Under investigation	GHSA-c4v6-gxrq-6g2x CVE-2026-40930	libpng	1.6.53 – 1.6.59	Medium: 5.4	4 months ago
Summary LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body Via cairo libpng Affected ranges 1.6.53 – 1.6.59 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L References Advisory: https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40930.json, https://github.com/pnggroup/libpng/security/advisories/GHSA-c4v6-gxrq-6g2x, https://nvd.nist.gov/vuln/detail/CVE-2026-40930 Fix: https://github.com/pnggroup/libpng/commit/faf06924688b62d7c1654b5ceddedbde66ffadb4 Web: http://www.openwall.com/lists/oss-security/2026/05/15/21
Low (44)
	Status	IDs	Package	Version	Severity	Published
	Under investigation	GHSA-8q78-mrwh-rm85	cups	2.4.18 – 2.4.20	Low: 2.5	2 days ago
Summary CUPS cupsd local authentication leaks the root certificate token, granting cupsd administrator privileges Via cups Affected ranges 2.4.18 – 2.4.20 CVSS vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N References Web: https://github.com/OpenPrinting/cups/security/advisories/GHSA-8q78-mrwh-rm85
	Affected: 2.4.20	GHSA-5cpc-rwrw-jp83	cups	2.4.20	Low: 2.0	2 days ago
Summary CUPS: SNMP marker-levels formatting overflows a stack buffer in backendSNMPSupplies() of the network backends (ANT-2026-JRXF4QFG) Via cups Affected ranges 2.4.20 CVSS vector CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L References Web: https://github.com/OpenPrinting/cups/security/advisories/GHSA-5cpc-rwrw-jp83
	Affected: 2.4.20	GHSA-56v5-mj3w-4f59	cups	2.4.20	Low: 3.3	2 days ago
Summary CUPS: Print-Job with many INT_MIN resolution values overflows the get_options() heap buffer in cupsd (ANT-2026-AS9CM0E9) Via cups Affected ranges 2.4.20 CVSS vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L References Web: https://github.com/OpenPrinting/cups/security/advisories/GHSA-56v5-mj3w-4f59
	Under investigation	CVE-2026-110141	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	3 days ago
Summary Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106399	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.3	10 days ago
Summary Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially read memory via a crafted file. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106339	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	10 days ago
Summary Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106224	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	10 days ago
Summary Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106210	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	10 days ago
Summary Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-106180	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	10 days ago
Summary Observable discrepancy in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-102319	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.4	17 days ago
Summary Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-102315	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.4	17 days ago
Summary Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-102311	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.4	17 days ago
Summary Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-95359	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.4	17 days ago
Summary Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-95324	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.4	17 days ago
Summary Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-95317	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	17 days ago
Summary Incorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-95316	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 2.9	17 days ago
Summary Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a local program. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-95312	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	17 days ago
Summary Information leak in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-95308	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.4	17 days ago
Summary Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-95302	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 2.9	17 days ago
Summary Incorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-93384	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.7	29 days ago
Summary Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-93380	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	29 days ago
Summary Race condition in FileSystem in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-93378	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	29 days ago
Summary Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-91747	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	last month
Summary Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-91730	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	last month
Summary Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-91723	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	last month
Summary Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
	Under investigation	CVE-2026-91708	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	last month
Summary Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87657	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	last month
Summary Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87652	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	last month
Summary Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87647	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.4	last month
Summary Uninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-87614	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	last month
Summary Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87611	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	last month
Summary Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87576	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.4	last month
Summary Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-87539	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	last month
Summary Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87531	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	last month
Summary Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87525	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 2.7	last month
Summary Out of bounds read in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to read memory outside the sandbox via a local program. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-87521	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	last month
Summary Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87517	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	last month
Summary Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87498	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	last month
Summary Missing authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: High) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87485	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	last month
Summary Incorrect authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87456	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.4	last month
Summary Uninitialized resource in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
	Under investigation	CVE-2026-87452	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	last month
Summary Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87451	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	last month
Summary Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87442	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	last month
Summary Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
	Under investigation	CVE-2026-87434	chromium-bin	151.0.7922.34 – 153.0.8010.12	Low: 3.1	last month
Summary Missing authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 151.0.7922.34 – 153.0.8010.12 CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Unknown (0)
	Status	IDs	Package	Version	Severity	Published

Build provenance

For the signed record of what the build used, see the Provenance tab.

99 components

Software Bill of Materials — every package this build depends on
Packages	Version	Repository	License
chromium-binROOT	153.0.8010.12	github.com/microsoft/playwright	BSD-3-Clause
acl	2.4.0	https://storage.googleapis.com/minimal-staging-archives/acl-2.4.0.tar.xzMIRROR	(GPL-2.0-only AND LGPL-2.1-only)
alsa-lib	1.2.16.1	https://storage.googleapis.com/minimal-staging-archives/alsa-lib-1.2.16.1.tar.bz2MIRROR	LGPL-2.1-only
at-spi2-core	2.60.6	https://storage.googleapis.com/minimal-staging-archives/at-spi2-core-2.60.6.tar.xzMIRROR	LGPL-2.1-only
atk	2.38.0	https://storage.googleapis.com/minimal-staging-archives/atk-2.38.0.tar.xzMIRROR	LGPL-2.0-only
attr	2.6.0	https://storage.googleapis.com/minimal-staging-archives/attr-2.6.0.tar.gzMIRROR	(GPL-2.0-only AND LGPL-2.1-only)
autoconf	2.73	www.gnu.org/software/autoconf	GPL-3.0-or-later WITH Autoconf-exception-3.0
automake	1.18.1	www.gnu.org/software/automake	GPL-2.0-only
bash	5.3	www.gnu.org/software/bash	GPL-3.0-only
bash-bootstrap	5.3	www.gnu.org/software/bash	GPL-3.0-only
binutils	2.47	www.gnu.org/software/binutils	(GPL-2.0-only AND GPL-3.0-only AND LGPL-2.0-only)
bison	3.8.2	www.gnu.org/software/bison	GPL-3.0-only
bzip2	1.0.8	github.com/libarchive/bzip2	bzip2-1.0.6
cairo	1.18.4	https://storage.googleapis.com/minimal-staging-archives/cairo-1.18.4.tar.xzMIRROR	LGPL-2.1-only OR MPL-1.1
cmake	4.4.2	github.com/Kitware/CMake	BSD-3-Clause
coreutils	9.12	www.gnu.org/software/coreutils	GPL-3.0-only
cups	2.4.20	github.com/OpenPrinting/cups	Apache-2.0
curl	8.22.0	github.com/curl/curl	curl
dbus	1.16.2	https://storage.googleapis.com/minimal-staging-archives/dbus-1.16.2.tar.xzMIRROR	(AFL-2.1 OR GPL-2.0-or-later) AND GPL-2.0-or-later
diffutils	3.12	www.gnu.org/software/diffutils	GPL-3.0-only
eudev	3.2.14	github.com/eudev-project/eudev	LGPL-2.1-or-later
expat	2.9.0	github.com/libexpat/libexpat	MIT
file	5.48	https://storage.googleapis.com/minimal-staging-archives/file-5.48.tar.gzMIRROR	BSD-2-Clause-Darwin
findutils	4.11.0	www.gnu.org/software/findutils	GPL-3.0-only
flex	2.6.4	github.com/westes/flex	BSD-3-Clause-flex
fontconfig	2.18.3	https://storage.googleapis.com/minimal-staging-archives/fontconfig-2.18.3.tar.xzMIRROR	HPND-sell-variant
freetype	2.14.3	https://storage.googleapis.com/minimal-staging-archives/freetype-2.14.3.tar.xzMIRROR	FTL OR GPL-2.0-or-later
fribidi	1.0.16	github.com/fribidi/fribidi	LGPL-2.1-or-later
gawk	5.4.1	www.gnu.org/software/gawk	GPL-3.0-only
gawk-bootstrap	5.4.1	www.gnu.org/software/gawk	GPL-3.0-only
gcc	15.2.0	www.gnu.org/software/gcc	(GPL-2.0-only AND GPL-3.0-only AND LGPL-2.1-only)
gdbm	1.26	www.gnu.org/software/gdbm	GPL-3.0-only
glib	2.88.3	https://storage.googleapis.com/minimal-staging-archives/glib-2.88.3.tar.xzMIRROR	LGPL-2.1-or-later
glibc	2.44	www.gnu.org/software/glibc	(GPL-2.0-only AND LGPL-2.1-only)
gmp	6.3.0	www.gnu.org/software/gmp	LGPL-3.0-or-later OR GPL-2.0-or-later
gperf	3.3	www.gnu.org/software/gperf	GPL-3.0-only
grep	3.12	www.gnu.org/software/grep	GPL-3.0-only
gzip	1.15	www.gnu.org/software/gzip	GPL-3.0-only
harfbuzz	14.5.0	github.com/harfbuzz/harfbuzz	MIT-Modern-Variant
icu	78.3	github.com/unicode-org/icu	Unicode-3.0
libcap	2.78	https://storage.googleapis.com/minimal-staging-archives/libcap-2.78.tar.xzMIRROR	BSD-3-Clause OR GPL-2.0-only
libdrm	2.4.134	https://storage.googleapis.com/minimal-staging-archives/libdrm-2.4.134.tar.xzMIRROR	MIT
liberation-fonts	2.1.5	github.com/liberationfonts/liberation-fonts	OFL-1.1
libffi	3.8.0	github.com/libffi/libffi	MIT
libidn2	2.3.8	www.gnu.org/software/libidn2	GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later)
libpng	1.6.59	github.com/pnggroup/libpng	libpng-2.0
libpsl	0.23.3	github.com/rockdaboot/libpsl	MIT
libtool	2.6.2	www.gnu.org/software/libtool	GPL-2.0-only
libunistring	1.4.2	www.gnu.org/software/libunistring	GPL-3.0-only
libuv	1.52.1	github.com/libuv/libuv	MIT
libx11	1.8.13	https://storage.googleapis.com/minimal-staging-archives/libX11-1.8.13.tar.xzMIRROR	MIT
libxau	1.0.12	https://storage.googleapis.com/minimal-staging-archives/libXau-1.0.12.tar.xzMIRROR	MIT-open-group
libxcb	1.17.0	https://storage.googleapis.com/minimal-staging-archives/libxcb-1.17.0.tar.xzMIRROR	X11-swapped
libxcomposite	0.4.7	https://storage.googleapis.com/minimal-staging-archives/libXcomposite-0.4.7.tar.xzMIRROR	MIT
libxdamage	1.1.7	https://storage.googleapis.com/minimal-staging-archives/libXdamage-1.1.7.tar.xzMIRROR	HPND-sell-variant
libxdmcp	1.1.5	https://storage.googleapis.com/minimal-staging-archives/libXdmcp-1.1.5.tar.xzMIRROR	MIT-open-group
libxext	1.3.7	https://storage.googleapis.com/minimal-staging-archives/libXext-1.3.7.tar.xzMIRROR	MIT
libxfixes	6.0.2	https://storage.googleapis.com/minimal-staging-archives/libXfixes-6.0.2.tar.xzMIRROR	MIT
libxi	1.8.3	https://storage.googleapis.com/minimal-staging-archives/libXi-1.8.3.tar.xzMIRROR	MIT
libxkbcommon	1.13.2	github.com/xkbcommon/libxkbcommon	MIT
libxml2	2.15.4	github.com/GNOME/libxml2	MIT
libxrandr	1.5.5	https://storage.googleapis.com/minimal-staging-archives/libXrandr-1.5.5.tar.xzMIRROR	MIT
libxrender	0.9.12	https://storage.googleapis.com/minimal-staging-archives/libXrender-0.9.12.tar.xzMIRROR	MIT
libxshmfence	1.3.3	https://storage.googleapis.com/minimal-staging-archives/libxshmfence-1.3.3.tar.xzMIRROR	HPND-sell-variant
libxtst	1.2.5	https://storage.googleapis.com/minimal-staging-archives/libXtst-1.2.5.tar.xzMIRROR	MIT
linux_headers	6.12.43	github.com/torvalds/linux	GPL-2.0-only WITH Linux-syscall-note
lz4	1.10.0	github.com/lz4/lz4	BSD-2-Clause AND GPL-2.0-or-later
m4	1.4.21	www.gnu.org/software/m4	GPL-3.0-only
make	4.4.1	www.gnu.org/software/make	GPL-3.0-only
mesa	26.2.0	https://storage.googleapis.com/minimal-staging-archives/mesa-26.2.0.tar.xzMIRROR	MIT AND SGI-B-2.0
meson	1.12.0	github.com/mesonbuild/meson	Apache-2.0
mpc	1.4.1	www.gnu.org/software/mpc	LGPL-3.0-or-later
mpfr	4.2.2	www.gnu.org/software/mpfr	GPL-3.0-only
ncurses	6.6	www.gnu.org/software/ncurses	X11-distribute-modifications-variant
ninja	1.13.2	github.com/ninja-build/ninja	Apache-2.0
nspr	4.40	https://storage.googleapis.com/minimal-staging-archives/nspr-4.40.tar.gzMIRROR	MPL-2.0
nss	3.126.1	https://storage.googleapis.com/minimal-staging-archives/nss-3.126.1.tar.gzMIRROR	MPL-2.0
openssl	3.6.5	github.com/openssl/openssl	Apache-2.0
pango	1.58.2	https://storage.googleapis.com/minimal-staging-archives/pango-1.58.2.tar.xzMIRROR	LGPL-2.0-only
patch	2.8	www.gnu.org/software/patch	GPL-3.0-only
pcre2	10.49	github.com/PCRE2Project/pcre2	BSD-3-Clause WITH PCRE2-exception
perl	5.44.0	github.com/Perl/perl5	Artistic-1.0-Perl OR GPL-1.0-or-later
pixman	0.46.4	https://storage.googleapis.com/minimal-staging-archives/pixman-0.46.4.tar.gzMIRROR	MIT
pkgconf	3.0.5	github.com/pkgconf/pkgconf	ISC
python	3.14.8	github.com/python/cpython	Python-2.0.1
readline	8.3	www.gnu.org/software/readline	GPL-3.0-only
sed	4.10	www.gnu.org/software/sed	GPL-3.0-only
setuptools	84.0.0	github.com/pypa/setuptools	MIT
sqlite	3.54.0	github.com/sqlite/sqlite	blessing
tar	1.35	www.gnu.org/software/tar	GPL-3.0-only
tzdata	2026e	github.com/eggert/tz	LicenseRef-Public-Domain
unzip	6.0	http://http.debian.net/debian/pool/main/u/unzip/unzip_6.0.orig.tar.gz	Info-ZIP
util-linux	2.42.4	github.com/util-linux/util-linux	GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause
xcb-proto	1.17.0	https://storage.googleapis.com/minimal-staging-archives/xcb-proto-1.17.0.tar.xzMIRROR	X11-swapped
xorgproto	2025.1	https://storage.googleapis.com/minimal-staging-archives/xorgproto-2025.1.tar.xzMIRROR	BSD-2-Clause AND HPND AND HPND-sell-variant AND ICU AND MIT AND MIT-open-group AND SGI-B-2.0 AND SMLNJ AND X11 AND X11-distribute-modifications-variant
xtrans	1.6.0	https://storage.googleapis.com/minimal-staging-archives/xtrans-1.6.0.tar.xzMIRROR	X11
xz	5.8.4	github.com/tukaani-project/xz	(0BSD AND GPL-2.0-only AND GPL-3.0-only AND LGPL-2.1-only)
zlib	1.3.2	github.com/madler/zlib	Zlib
zstd	1.5.7	github.com/facebook/zstd	BSD-3-Clause OR GPL-2.0-only

chromium-bin

Install package

OpenSSF Score

What is "chromium-bin"?

How to use this package

Quick install

Declare as a task dependency in minimal.toml

Build-time vs runtime

Dependencies (35)

Dependency changes

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary