BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Google Chrome

Google Chrome Security Releases - August 2026

google-chrome-2026-08 Aug 1, 2026 Source: Vendor

Google Chrome security advisories for August 2026: 389 CVEs, 54 credited researchers.

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

397 lines
All 397 CVEs 397 Additional recognition 0 Unclaimed only
Showing 1–50 of 397 , page 1 of 8
CVE-2026-19138 BR2026-0000-035080 CrashReporting unclaimed
High — Heap buffer overflow in CrashReporting (reported 2026-04-06)
Credited as Google
CVE-2026-19139 BR2026-0000-035081 CredentialProvider unclaimed
High — Race in CredentialProvider (reported 2026-05-10)
Credited as Google
CVE-2026-19140 BR2026-0000-035082 GPU unclaimed
High — Use after free in GPU (reported 2026-05-14)
Credited as Google
CVE-2026-19141 BR2026-0000-035083 Resources unclaimed
High — Use after free in Resources (reported 2026-05-15)
Credited as Google
CVE-2026-19142 BR2026-0000-035084 Views unclaimed
High — Use after free in Views (reported 2026-05-21)
Credited as Google
CVE-2026-19143 BR2026-0000-035085 WebAPKs unclaimed
High — Insufficient validation of untrusted input in WebAPKs (reported 2026-05-29)
Credited as Google
CVE-2026-19144 BR2026-0000-035086 HTML unclaimed
High — Use after free in HTML (reported 2026-06-05)
Credited as Google
CVE-2026-19145 BR2026-0000-035087 Translate unclaimed
High — Use after free in Translate (reported 2026-06-09)
Credited as Google
CVE-2026-19146 BR2026-0000-035088 GPU unclaimed
High — Uninitialized Use in GPU (reported 2026-06-14)
Credited as Google
CVE-2026-19147 BR2026-0000-035089 Aura unclaimed
High — Use after free in Aura (reported 2026-06-16)
Credited as Google
CVE-2026-19148 BR2026-0000-035090 GPU unclaimed
High — Out of bounds write in GPU (reported 2026-06-16)
Credited as Google
CVE-2026-19149 BR2026-0000-035091 Aura unclaimed
Critical — Use after free in Aura (reported 2026-06-17)
Credited as Google
CVE-2026-19150 BR2026-0000-035092 V8 unclaimed
High — Inappropriate implementation in V8 (reported 2026-06-22)
Credited as Google
CVE-2026-19151 BR2026-0000-035093 V8 unclaimed
High — Use after free in V8 (reported 2026-07-02)
Credited as Google
CVE-2026-19152 BR2026-0000-035094 Navigation unclaimed
High — Inappropriate implementation in Navigation (reported 2026-07-04)
Credited as Google
CVE-2026-19153 BR2026-0000-035095 Workers unclaimed
High — Insufficient validation of untrusted input in Workers (reported 2026-07-09)
Credited as Google
CVE-2026-19154 BR2026-0000-035096 Skia unclaimed
Critical — Use after free in Skia (reported 2026-07-09)
Credited as Google
CVE-2026-19155 BR2026-0000-035097 Payments unclaimed
High — Use after free in Payments (reported 2026-07-09)
Credited as Google
CVE-2026-19156 BR2026-0000-035098 Base unclaimed
High — Heap buffer overflow in Base (reported 2026-07-10)
Credited as Viktoria Zlatinova
CVE-2026-19157 BR2026-0000-035099 ANGLE unclaimed
Critical — Out of bounds write in ANGLE (reported 2026-07-14)
Credited as Google
CVE-2026-19158 BR2026-0000-035100 Views unclaimed
High — Use after free in Views (reported 2026-07-17)
Credited as Google
CVE-2026-19159 BR2026-0000-035101 Views unclaimed
High — Use after free in Views (reported 2026-07-17)
Credited as Google
CVE-2026-19160 BR2026-0000-035102 Skia unclaimed
High — Uninitialized Use in Skia (reported 2026-07-17)
Credited as Google
CVE-2026-19161 BR2026-0000-035103 Skia unclaimed
High — Uninitialized Use in Skia (reported 2026-07-18)
Credited as Google
CVE-2026-19162 BR2026-0000-035104 V8 unclaimed
High — Out of bounds write in V8 (reported 2026-07-19)
Credited as OpenAI Codex Security (amyb)
CVE-2026-19163 BR2026-0000-035105 Media unclaimed
High — Use after free in Media (reported 2026-07-19)
Credited as Google
CVE-2026-19164 BR2026-0000-035106 Codecs unclaimed
High — Insufficient validation of untrusted input in Codecs (reported 2026-07-19)
Credited as Google
CVE-2026-19165 BR2026-0000-035107 Extensions unclaimed
High — Use after free in Extensions (reported 2026-07-19)
Credited as @bean5oup
CVE-2026-19166 BR2026-0000-035108 Web Authentication unclaimed
High — Use after free in Web Authentication (reported 2026-07-20)
Credited as heesun
CVE-2026-19167 BR2026-0000-035109 GPU unclaimed
High — Integer overflow in GPU (reported 2026-07-20)
Credited as Google
CVE-2026-19168 BR2026-0000-035110 V8 unclaimed
High — Inappropriate implementation in V8 (reported 2026-07-20)
Credited as triaged by Andrés Luksenberg
CVE-2026-19168 BR2026-0000-035111 V8 unclaimed
High — Inappropriate implementation in V8 (reported 2026-07-20)
Credited as XBOW
CVE-2026-19169 BR2026-0000-035112 Contextual Tasks unclaimed
High — Insufficient validation of untrusted input in Contextual Tasks (reported 2026-07-21)
Credited as Sven Dysthe (@svn-dys)
CVE-2026-19170 BR2026-0000-035113 WebGL unclaimed
Critical — Use after free in WebGL (reported 2026-07-22)
Credited as Billy Jheng Bing Jhong of STAR Labs SG Pte. Ltd.
CVE-2026-19170 BR2026-0000-035114 WebGL unclaimed
Critical — Use after free in WebGL (reported 2026-07-22)
Credited as Pan ZhenPeng
CVE-2026-19170 BR2026-0000-035115 WebGL unclaimed
Critical — Use after free in WebGL (reported 2026-07-22)
Credited as Muhammad Alifa Ramdhan
CVE-2026-19171 BR2026-0000-035116 Media unclaimed
High — Use after free in Media (reported 2026-07-22)
Credited as Google
CVE-2026-19172 BR2026-0000-035117 Views unclaimed
Critical — Use after free in Views (reported 2026-07-22)
Credited as Google
CVE-2026-19173 BR2026-0000-035118 Skia unclaimed
High — Out of bounds write in Skia (reported 2026-07-24)
Credited as Vu Van Tien (@n0_Be3r)
CVE-2026-19174 BR2026-0000-035119 V8 unclaimed
High — Integer overflow in V8 (reported 2026-07-24)
Credited as Seunghyun Lee (@0x10n) of QED Audit (qedaudit.io)
CVE-2026-19175 BR2026-0000-035120 Payments unclaimed
High — Use after free in Payments (reported 2026-07-29)
Credited as Google
CVE-2026-19176 BR2026-0000-035121 Skia unclaimed
High — Use after free in Skia (reported 2026-07-29)
Credited as WinD39 - Huynh Dinh Vu
CVE-2026-19177 BR2026-0000-035122 UI unclaimed
High — Insufficient validation of untrusted input in UI (reported 2026-07-29)
Credited as Fabian Wahle (Hap Security)
CVE-2026-19556 BR2026-0000-035123 V8 unclaimed
High — Use after free in V8 (reported 2026-07-30)
Credited as Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern) on 2026-07-15[N/A][534867485] High CVE-2026-19557: Use after free in TabStrip. Reported by Google on 2026-07-14[N/A][536676756] High CVE-2026-19558
CVE-2026-76017 BR2026-0000-035124 Chromoting unclaimed
Critical: Use after free in Chromoting (reported 2026-06-11)
Credited as Google
CVE-2026-76018 BR2026-0000-035125 Import unclaimed
High: Privilege elevation in Import (reported 2026-05-16)
Credited as Google
CVE-2026-76020 BR2026-0000-035126 V8 unclaimed
High: Race condition in V8 (reported 2026-08-03)
Credited as Salvatore Gulizia (nickname: Serotav)
CVE-2026-76021 BR2026-0000-035127 DOM unclaimed
High: Use after free in DOM (reported 2026-08-02)
Credited as Google BigSleep@Grape
CVE-2026-76022 BR2026-0000-035128 Network unclaimed
High: Buffer overflow in Network (reported 2026-08-07)
Credited as 0xAlessandro
CVE-2026-76023 BR2026-0000-035129 Linux Toolkit Theming unclaimed
High: Improper resource control in Linux Toolkit Theming (reported 2026-08-11)
Credited as Keita Sode