BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Google Chrome

Google Chrome Security Releases - August 2026

google-chrome-2026-08 Aug 1, 2026 Source: Vendor

Google Chrome security advisories for August 2026: 389 CVEs, 54 credited researchers.

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

397 lines
All 397 CVEs 397 Additional recognition 0 Unclaimed only
Showing 51–100 of 397 , page 2 of 8
CVE-2026-76023 BR2026-0000-035130 Linux Toolkit Theming unclaimed
High: Improper resource control in Linux Toolkit Theming (reported 2026-08-11)
Credited as Daisuke Hatakeyama of SYZD Research
CVE-2026-76033 BR2026-0000-035131 CORS unclaimed
High: Inappropriate implementation in CORS (reported 2026-05-26)
Credited as Google
CVE-2026-76034 BR2026-0000-035132 WebGL unclaimed
Critical: Buffer overflow in WebGL (reported 2026-07-15)
Credited as Google
CVE-2026-76035 BR2026-0000-035133 Media unclaimed
High: Inappropriate implementation in Media (reported 2026-07-19)
Credited as Google
CVE-2026-76036 BR2026-0000-035134 Dawn unclaimed
Critical: Buffer overflow in Dawn (reported 2026-07-28)
Credited as Google
CVE-2026-76037 BR2026-0000-035135 CredentialProvider unclaimed
High: Link following in CredentialProvider (reported 2026-05-28)
Credited as Google
CVE-2026-76038 BR2026-0000-035136 V8 unclaimed
High: Type confusion in V8 (reported 2026-08-03)
Credited as GF
CVE-2026-76038 BR2026-0000-035137 V8 unclaimed
High: Type confusion in V8 (reported 2026-08-03)
Credited as un3xploitable
CVE-2026-76039 BR2026-0000-035138 Core unclaimed
High: Incorrect reference resolution in Core (reported 2026-06-18)
Credited as Google
CVE-2026-76040 BR2026-0000-035139 Browser unclaimed
High: Use after free in Browser (reported 2026-07-14)
Credited as Google
CVE-2026-76041 BR2026-0000-035140 Skia unclaimed
High: Information leak in Skia (reported 2026-07-28)
Credited as Google
CVE-2026-76042 BR2026-0000-035141 GPU unclaimed
High: Use of uninitialized resource in GPU (reported 2026-07-19)
Credited as Google
CVE-2026-76043 BR2026-0000-035142 V8 unclaimed
High: Incorrect calculation in V8 (reported 2026-07-27)
Credited as Raghav Maheshwari
CVE-2026-76044 BR2026-0000-035143 USB unclaimed
High: Race condition in USB (reported 2026-06-11)
Credited as Google
CVE-2026-76045 BR2026-0000-035144 WebGL unclaimed
High: Use after free in WebGL (reported 2026-08-05)
Credited as OpenAI Codex Security (amyb)
CVE-2026-76046 BR2026-0000-035145 ANGLE unclaimed
High: Buffer overflow in ANGLE (reported 2026-07-19)
Credited as Google
CVE-2026-76047 BR2026-0000-035146 V8 unclaimed
High: Type confusion in V8 (reported 2026-07-31)
Credited as ywatanabee
CVE-2026-78891 BR2026-0000-035147 WebRTC unclaimed
Medium: Buffer overflow in WebRTC (reported 2026-04-15)
Credited as ngrunbaum
CVE-2026-78892 BR2026-0000-035148 Chromoting unclaimed
Medium: Incorrect authorization in Chromoting (reported 2026-05-30)
Credited as Google
CVE-2026-78893 BR2026-0000-035149 QUIC unclaimed
Medium: Information leak in QUIC (reported 2026-03-25)
Credited as Google
CVE-2026-78894 BR2026-0000-035150 Payments unclaimed
Medium: Race condition in Payments (reported 2026-04-24)
Credited as Google
CVE-2026-78895 BR2026-0000-035151 Paint unclaimed
High: Information leak in Paint (reported 2026-07-09)
Credited as Google
CVE-2026-78896 BR2026-0000-035152 StorageAccessAPI unclaimed
Low: Information leak in StorageAccessAPI (reported 2026-06-02)
Credited as Google
CVE-2026-78897 BR2026-0000-035153 BrowserTag unclaimed
Low: Missing authorization in BrowserTag (reported 2026-05-15)
Credited as Google
CVE-2026-78898 BR2026-0000-035154 Downloads unclaimed
Medium: Incorrect authorization in Downloads (reported 2026-04-04)
Credited as Google
CVE-2026-78899 BR2026-0000-035155 V8 unclaimed
High: Use after free in V8 (reported 2026-07-29)
Credited as Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern)
CVE-2026-78900 BR2026-0000-035156 Media unclaimed
High: Improper input validation in Media (reported 2026-07-19)
Credited as Google
CVE-2026-78901 BR2026-0000-035157 V8 unclaimed
Medium: Race condition in V8 (reported 2026-06-19)
Credited as Google
CVE-2026-78903 BR2026-0000-035158 SiteIsolation unclaimed
Medium: Incomplete cleanup in SiteIsolation (reported 2026-05-30)
Credited as Google
CVE-2026-78904 BR2026-0000-035159 ANGLE unclaimed
High: Type confusion in ANGLE (reported 2026-07-22)
Credited as Google
CVE-2026-78905 BR2026-0000-035160 ANGLE unclaimed
Medium: Type confusion in ANGLE (reported 2026-05-27)
Credited as Google
CVE-2026-78906 BR2026-0000-035161 ANGLE unclaimed
Medium: Race condition in ANGLE (reported 2026-05-17)
Credited as Google
CVE-2026-78907 BR2026-0000-035162 WebProtect unclaimed
Medium: Incorrect authorization in WebProtect (reported 2026-04-17)
Credited as Google
CVE-2026-78908 BR2026-0000-035163 Canvas unclaimed
High: Information leak in Canvas (reported 2026-07-09)
Credited as Google
CVE-2026-78909 BR2026-0000-035164 Views unclaimed
Medium: Use after free in Views (reported 2026-04-11)
Credited as Google
CVE-2026-78910 BR2026-0000-035165 V8 unclaimed
Medium: Buffer overflow in V8 (reported 2026-05-08)
Credited as Google
CVE-2026-78911 BR2026-0000-035166 USB unclaimed
High: Incorrect authorization in USB (reported 2026-05-29)
Credited as Google
CVE-2026-78912 BR2026-0000-035167 Browser unclaimed
Medium: UI misrepresentation in Browser (reported 2026-05-17)
Credited as Google
CVE-2026-78913 BR2026-0000-035168 Chromoting unclaimed
Medium: Use after free in Chromoting (reported 2026-06-14)
Credited as Google
CVE-2026-78914 BR2026-0000-035169 Skia unclaimed
Low: Uninitialized resource in Skia (reported 2026-07-18)
Credited as Google
CVE-2026-78915 BR2026-0000-035170 Enterprise unclaimed
Low: Race condition in Enterprise (reported 2026-07-10)
Credited as Google
CVE-2026-78934 BR2026-0000-035171 ReadAloud unclaimed
High: Race condition in ReadAloud (reported 2026-05-28)
Credited as Google
CVE-2026-78935 BR2026-0000-035172 Mobile unclaimed
Critical: Use of uninitialized variable in Mobile (reported 2026-06-10)
Credited as Google
CVE-2026-78936 BR2026-0000-035173 CustomTabs unclaimed
Medium: Observable discrepancy in CustomTabs (reported 2026-05-27)
Credited as Google
CVE-2026-78937 BR2026-0000-035174 Search unclaimed
Medium: Use after free in Search (reported 2026-04-11)
Credited as Google
CVE-2026-78938 BR2026-0000-035175 V8 unclaimed
High: Type confusion in V8 (reported 2026-08-12)
Credited as Zhenpeng (Leo) Lin at depthfirst
CVE-2026-78939 BR2026-0000-035176 Chromecast unclaimed
High: Use after free in Chromecast (reported 2026-05-14)
Credited as Google
CVE-2026-78940 BR2026-0000-035177 Network unclaimed
Medium: Improper initialization in Network (reported 2026-05-10)
Credited as Google
CVE-2026-78941 BR2026-0000-035178 Core unclaimed
Medium: Information leak in Core (reported 2026-03-31)
Credited as Google
CVE-2026-78942 BR2026-0000-035179 Loader unclaimed
Medium: Incorrect reference resolution in Loader (reported 2026-04-13)
Credited as Google