Google Chrome
Google Chrome Security Releases - July 2026
google-chrome-2026-07 Jul 1, 2026 Source: Vendor
Google Chrome security advisories for July 2026: 374 CVEs, 24 credited researchers.
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
376 lines
Showing 1–50 of 376 , page 1 of 8
CVE-2026-16804
BR2026-0000-034704
Input
unclaimed
High — Use after free in Input (reported 2026-06-16)
Credited as Google
CVE-2026-16805
BR2026-0000-034705
Blink
unclaimed
High — Use after free in Blink (reported 2026-06-12)
Credited as Google
CVE-2026-16806
BR2026-0000-034706
WebMCP
unclaimed
High — Use after free in WebMCP (reported 2026-06-10)
Credited as Google
CVE-2026-16807
BR2026-0000-034707
Codecs
unclaimed
High — Out of bounds write in Codecs (reported 2026-05-30)
Credited as Google
CVE-2026-17650
BR2026-0000-034708
Compositing
unclaimed
Critical — Use after free in Compositing (reported 2026-05-18)
Credited as Google
CVE-2026-17651
BR2026-0000-034709
Dawn
unclaimed
Critical — Insufficient validation of untrusted input in Dawn (reported 2026-05-28)
Credited as Google
CVE-2026-17652
BR2026-0000-034710
Views
unclaimed
Critical — Use after free in Views (reported 2026-06-02)
Credited as Google
CVE-2026-17653
BR2026-0000-034711
Skia
unclaimed
Critical — Use after free in Skia (reported 2026-06-05)
Credited as Google
CVE-2026-17654
BR2026-0000-034712
Updater
unclaimed
Critical — Race in Updater (reported 2026-06-10)
Credited as Google
CVE-2026-17655
BR2026-0000-034713
ANGLE
unclaimed
Critical — Insufficient validation of untrusted input in ANGLE (reported 2026-06-11)
Credited as Google
CVE-2026-17656
BR2026-0000-034714
Ozone
unclaimed
Critical — Use after free in Ozone (reported 2026-06-14)
Credited as Google
CVE-2026-17657
BR2026-0000-034715
Navigation
unclaimed
High — Use after free in Navigation (reported 2026-04-14)
Credited as c6eed09fc8b174b0f3eebedcceb1e792
CVE-2026-17658
BR2026-0000-034716
V8
unclaimed
High — Use after free in V8 (reported 2026-06-12)
Credited as Duc Nguyen of Calif.io in collaboration with OpenAI Codex Security
CVE-2026-17659
BR2026-0000-034717
SiteIsolation
unclaimed
High — Inappropriate implementation in SiteIsolation (reported 2026-03-23)
Credited as Google
CVE-2026-17660
BR2026-0000-034718
Network
unclaimed
High — Insufficient validation of untrusted input in Network (reported 2026-03-29)
Credited as Google
CVE-2026-17661
BR2026-0000-034719
Loader
unclaimed
High — Use after free in Loader (reported 2026-03-29)
Credited as Google
CVE-2026-17662
BR2026-0000-034720
Prefetch
unclaimed
High — Insufficient policy enforcement in Prefetch (reported 2026-03-29)
Credited as Google
CVE-2026-17663
BR2026-0000-034721
GPU
unclaimed
High — Insufficient validation of untrusted input in GPU (reported 2026-04-07)
Credited as Google
CVE-2026-17664
BR2026-0000-034722
Loader
unclaimed
High — Insufficient validation of untrusted input in Loader (reported 2026-04-08)
Credited as Google
CVE-2026-17665
BR2026-0000-034723
V8
unclaimed
High — Use after free in V8 (reported 2026-05-08)
Credited as Google
CVE-2026-17666
BR2026-0000-034724
Enterprise
unclaimed
High — Cryptographic Flaw in Enterprise (reported 2026-05-10)
Credited as Google
CVE-2026-17667
BR2026-0000-034725
ANGLE
unclaimed
High — Uninitialized Use in ANGLE (reported 2026-05-14)
Credited as Google
CVE-2026-17668
BR2026-0000-034726
ANGLE
unclaimed
High — Uninitialized Use in ANGLE (reported 2026-05-14)
Credited as Google
CVE-2026-17669
BR2026-0000-034727
Chrome for iOS
unclaimed
High — Inappropriate implementation in Chrome for iOS (reported 2026-05-14)
Credited as Google
CVE-2026-17670
BR2026-0000-034728
Views
unclaimed
High — Use after free in Views (reported 2026-05-14)
Credited as Google
CVE-2026-17671
BR2026-0000-034729
ANGLE
unclaimed
High — Insufficient validation of untrusted input in ANGLE (reported 2026-05-14)
Credited as Google
CVE-2026-17672
BR2026-0000-034730
Chromecast
unclaimed
High — Insufficient validation of untrusted input in Chromecast (reported 2026-05-15)
Credited as Google
CVE-2026-17673
BR2026-0000-034731
QUIC
unclaimed
High — Integer overflow in QUIC (reported 2026-05-16)
Credited as Google
CVE-2026-17674
BR2026-0000-034732
HTML
unclaimed
High — Inappropriate implementation in HTML (reported 2026-05-16)
Credited as Google
CVE-2026-17675
BR2026-0000-034733
ANGLE
unclaimed
High — Out of bounds write in ANGLE (reported 2026-05-17)
Credited as Google
CVE-2026-17676
BR2026-0000-034734
ANGLE
unclaimed
High — Inappropriate implementation in ANGLE (reported 2026-05-17)
Credited as Google
CVE-2026-17677
BR2026-0000-034735
ANGLE
unclaimed
High — Inappropriate implementation in ANGLE (reported 2026-05-17)
Credited as Google
CVE-2026-17678
BR2026-0000-034736
ANGLE
unclaimed
High — Out of bounds read in ANGLE (reported 2026-05-21)
Credited as Google
CVE-2026-17679
BR2026-0000-034737
Print Preview
unclaimed
High — Insufficient validation of untrusted input in Print Preview (reported 2026-05-25)
Credited as Google
CVE-2026-17680
BR2026-0000-034738
Color
unclaimed
High — Heap buffer overflow in Color (reported 2026-05-25)
Credited as Google
CVE-2026-17681
BR2026-0000-034739
Web Authentication
unclaimed
High — Insufficient validation of untrusted input in Web Authentication (reported 2026-05-26)
Credited as Google
CVE-2026-17682
BR2026-0000-034740
ANGLE
unclaimed
High — Integer overflow in ANGLE (reported 2026-05-26)
Credited as Google
CVE-2026-17683
BR2026-0000-034741
ANGLE
unclaimed
High — Inappropriate implementation in ANGLE (reported 2026-05-26)
Credited as Google
CVE-2026-17684
BR2026-0000-034742
Chrome for iOS
unclaimed
High — Insufficient validation of untrusted input in Chrome for iOS (reported 2026-05-26)
Credited as Google
CVE-2026-17685
BR2026-0000-034743
Autofill
unclaimed
High — Use after free in Autofill (reported 2026-05-27)
Credited as Google
CVE-2026-17686
BR2026-0000-034744
Passwords
unclaimed
High — Insufficient validation of untrusted input in Passwords (reported 2026-05-27)
Credited as Google
CVE-2026-17687
BR2026-0000-034745
ANGLE
unclaimed
High — Type Confusion in ANGLE (reported 2026-05-27)
Credited as Google
CVE-2026-17688
BR2026-0000-034746
Input
unclaimed
High — Use after free in Input (reported 2026-05-27)
Credited as Google
CVE-2026-17689
BR2026-0000-034747
ANGLE
unclaimed
High — Uninitialized Use in ANGLE (reported 2026-05-27)
Credited as Google
CVE-2026-17690
BR2026-0000-034748
PDF
unclaimed
High — Insufficient validation of untrusted input in PDF (reported 2026-05-27)
Credited as Google
CVE-2026-17691
BR2026-0000-034749
ANGLE
unclaimed
High — Out of bounds write in ANGLE (reported 2026-05-28)
Credited as Google
CVE-2026-17692
BR2026-0000-034750
DataTransfer
unclaimed
High — Use after free in DataTransfer (reported 2026-05-28)
Credited as Google
CVE-2026-17693
BR2026-0000-034751
FileSystem
unclaimed
High — Inappropriate implementation in FileSystem (reported 2026-05-28)
Credited as Google
CVE-2026-17694
BR2026-0000-034752
DOM
unclaimed
High — Use after free in DOM (reported 2026-05-28)
Credited as Google
CVE-2026-17695
BR2026-0000-034753
ANGLE
unclaimed
High — Inappropriate implementation in ANGLE (reported 2026-05-28)
Credited as Google