Google Chrome
Google Chrome Security Releases - July 2026
google-chrome-2026-07 Jul 1, 2026 Source: Vendor
Google Chrome security advisories for July 2026: 374 CVEs, 24 credited researchers.
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
376 lines
Showing 51–100 of 376 matching , page 2 of 8 , clear filters
CVE-2026-17696
BR2026-0000-034754
Media
unclaimed
High — Side-channel information leakage in Media (reported 2026-05-28)
Credited as Google
CVE-2026-17697
BR2026-0000-034755
ANGLE
unclaimed
High — Type Confusion in ANGLE (reported 2026-05-28)
Credited as Google
CVE-2026-17698
BR2026-0000-034756
UI
unclaimed
High — Insufficient validation of untrusted input in UI (reported 2026-05-29)
Credited as Google
CVE-2026-17699
BR2026-0000-034757
Views
unclaimed
High — Use after free in Views (reported 2026-05-29)
Credited as Google
CVE-2026-17700
BR2026-0000-034758
Actor
unclaimed
High — Insufficient validation of untrusted input in Actor (reported 2026-05-29)
Credited as Google
CVE-2026-17701
BR2026-0000-034759
ANGLE
unclaimed
High — Out of bounds read in ANGLE (reported 2026-05-29)
Credited as Google
CVE-2026-17702
BR2026-0000-034760
Skia
unclaimed
High — Inappropriate implementation in Skia (reported 2026-05-29)
Credited as Google
CVE-2026-17703
BR2026-0000-034761
Chrome for iOS
unclaimed
High — Policy bypass in Chrome for iOS (reported 2026-05-30)
Credited as Google
CVE-2026-17704
BR2026-0000-034762
ANGLE
unclaimed
High — Use after free in ANGLE (reported 2026-06-02)
Credited as Google
CVE-2026-17705
BR2026-0000-034763
libxml
unclaimed
High — Integer overflow in libxml (reported 2026-06-04)
Credited as ebassi of Igalia
CVE-2026-17706
BR2026-0000-034764
Media
unclaimed
High — Insufficient validation of untrusted input in Media (reported 2026-06-03)
Credited as Google
CVE-2026-17707
BR2026-0000-034765
Media
unclaimed
High — Uninitialized Use in Media (reported 2026-06-03)
Credited as Google
CVE-2026-17708
BR2026-0000-034766
Audio
unclaimed
High — Use after free in Audio (reported 2026-06-04)
Credited as Google
CVE-2026-17709
BR2026-0000-034767
Downloads
unclaimed
High — Race in Downloads (reported 2026-06-04)
Credited as Google
CVE-2026-17710
BR2026-0000-034768
MHTML
unclaimed
High — Inappropriate implementation in MHTML (reported 2026-06-04)
Credited as Google
CVE-2026-17711
BR2026-0000-034769
Downloads
unclaimed
High — Race in Downloads (reported 2026-06-04)
Credited as Google
CVE-2026-17712
BR2026-0000-034770
Skia
unclaimed
High — Race in Skia (reported 2026-06-05)
Credited as Google
CVE-2026-17713
BR2026-0000-034771
Accessibility
unclaimed
High — Insufficient validation of untrusted input in Accessibility (reported 2026-06-06)
Credited as Google
CVE-2026-17714
BR2026-0000-034772
ANGLE
unclaimed
High — Uninitialized Use in ANGLE (reported 2026-06-08)
Credited as Google
CVE-2026-17715
BR2026-0000-034773
Passwords
unclaimed
High — Inappropriate implementation in Passwords (reported 2026-06-08)
Credited as Google
CVE-2026-17716
BR2026-0000-034774
Updater
unclaimed
High — Use after free in Updater (reported 2026-06-09)
Credited as Google
CVE-2026-17717
BR2026-0000-034775
ANGLE
unclaimed
High — Integer overflow in ANGLE (reported 2026-06-10)
Credited as Google
CVE-2026-17718
BR2026-0000-034776
ANGLE
unclaimed
High — Use after free in ANGLE (reported 2026-06-10)
Credited as Google
CVE-2026-17719
BR2026-0000-034777
Input
unclaimed
High — Use after free in Input (reported 2026-06-10)
Credited as Google
CVE-2026-17720
BR2026-0000-034778
Passwords
unclaimed
High — Insufficient policy enforcement in Passwords (reported 2026-06-11)
Credited as Google
CVE-2026-17721
BR2026-0000-034779
ANGLE
unclaimed
High — Out of bounds write in ANGLE (reported 2026-06-13)
Credited as Google
CVE-2026-17722
BR2026-0000-034780
WebView
unclaimed
High — Object lifecycle issue in WebView (reported 2026-06-13)
Credited as Google
CVE-2026-17723
BR2026-0000-034781
Media
unclaimed
High — Use after free in Media (reported 2026-06-14)
Credited as Google
CVE-2026-17724
BR2026-0000-034782
Chrome for iOS
unclaimed
High — Race in Chrome for iOS (reported 2026-06-14)
Credited as Google
CVE-2026-17725
BR2026-0000-034783
V8
unclaimed
High — Type Confusion in V8 (reported 2026-06-27)
Credited as nh.dev2022
CVE-2026-17726
BR2026-0000-034784
WebGL
unclaimed
High — Integer overflow in WebGL (reported 2026-06-30)
Credited as Google
CVE-2026-17727
BR2026-0000-034785
WebGL
unclaimed
High — Out of bounds write in WebGL (reported 2026-07-01)
Credited as Google
CVE-2026-17728
BR2026-0000-034786
Extensions
unclaimed
Medium — Inappropriate implementation in Extensions (reported 2025-11-16)
Credited as Suhas S P
CVE-2026-17729
BR2026-0000-034787
V8
unclaimed
Medium — Use after free in V8 (reported 2026-06-07)
Credited as wang1r
CVE-2026-17729
BR2026-0000-034788
V8
unclaimed
Medium — Use after free in V8 (reported 2026-06-07)
Credited as lhfff
CVE-2026-17730
BR2026-0000-034789
Autofill
unclaimed
Medium — Side-channel information leakage in Autofill (reported 2021-08-26)
Credited as Google
CVE-2026-17731
BR2026-0000-034790
Autofill
unclaimed
Medium — Inappropriate implementation in Autofill (reported 2025-11-25)
Credited as Manojkumar Jaganathan Aka TheWhiteEvil with HackerBro Technologies
CVE-2026-17732
BR2026-0000-034791
SVG
unclaimed
Medium — Inappropriate implementation in SVG (reported 2026-01-17)
Credited as Lyra Rebane (rebane2001)
CVE-2026-17733
BR2026-0000-034792
QUIC
unclaimed
Medium — Inappropriate implementation in QUIC (reported 2026-03-24)
Credited as Google
CVE-2026-17734
BR2026-0000-034793
Autofill
unclaimed
Medium — Inappropriate implementation in Autofill (reported 2026-03-25)
Credited as Google
CVE-2026-17735
BR2026-0000-034794
BFCache
unclaimed
Medium — Insufficient validation of untrusted input in BFCache (reported 2026-03-26)
Credited as Google
CVE-2026-17736
BR2026-0000-034795
WebView
unclaimed
Medium — Insufficient validation of untrusted input in WebView (reported 2026-03-27)
Credited as Google
CVE-2026-17737
BR2026-0000-034796
Bluetooth
unclaimed
Medium — Use after free in Bluetooth (reported 2026-03-31)
Credited as Google
CVE-2026-17738
BR2026-0000-034797
Payments
unclaimed
Medium — Insufficient validation of untrusted input in Payments (reported 2026-03-31)
Credited as Google
CVE-2026-17739
BR2026-0000-034798
Extensions
unclaimed
Medium — Insufficient policy enforcement in Extensions (reported 2026-03-31)
Credited as Google
CVE-2026-17740
BR2026-0000-034799
ANGLE
unclaimed
Medium — Uninitialized Use in ANGLE (reported 2026-04-02)
Credited as Google
CVE-2026-17741
BR2026-0000-034800
WebView
unclaimed
Medium — Insufficient validation of untrusted input in WebView (reported 2026-04-02)
Credited as Google
CVE-2026-17742
BR2026-0000-034801
Payments
unclaimed
Medium — Insufficient policy enforcement in Payments (reported 2026-04-02)
Credited as Google
CVE-2026-17743
BR2026-0000-034802
ControlledFrame
unclaimed
Medium — Insufficient policy enforcement in ControlledFrame (reported 2026-04-03)
Credited as Google
CVE-2026-17744
BR2026-0000-034803
File Input
unclaimed
Medium — Inappropriate implementation in File Input (reported 2026-04-07)
Credited as Google