Google Chrome
Google Chrome Security Releases - July 2026
google-chrome-2026-07 Jul 1, 2026 Source: Vendor
Google Chrome security advisories for July 2026: 374 CVEs, 24 credited researchers.
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
376 lines
Showing 101–150 of 376 matching , page 3 of 8 , clear filters
CVE-2026-17745
BR2026-0000-034804
Skia
unclaimed
Medium — Out of bounds read in Skia (reported 2026-04-07)
Credited as Google
CVE-2026-17746
BR2026-0000-034805
GPU
unclaimed
Medium — Use after free in GPU (reported 2026-04-07)
Credited as Google
CVE-2026-17747
BR2026-0000-034806
Payments
unclaimed
Medium — Insufficient validation of untrusted input in Payments (reported 2026-04-07)
Credited as Google
CVE-2026-17748
BR2026-0000-034807
Extensions
unclaimed
Medium — Inappropriate implementation in Extensions (reported 2026-04-08)
Credited as Google
CVE-2026-17749
BR2026-0000-034808
Extensions
unclaimed
Medium — Insufficient validation of untrusted input in Extensions (reported 2026-04-08)
Credited as Google
CVE-2026-17750
BR2026-0000-034809
ANGLE
unclaimed
Medium — Use after free in ANGLE (reported 2026-04-08)
Credited as Google
CVE-2026-17751
BR2026-0000-034810
AdFilter
unclaimed
Medium — Inappropriate implementation in AdFilter (reported 2026-04-11)
Credited as Google
CVE-2026-17752
BR2026-0000-034811
Views
unclaimed
Medium — Use after free in Views (reported 2026-04-11)
Credited as Google
CVE-2026-17753
BR2026-0000-034812
Autofill
unclaimed
Medium — Inappropriate implementation in Autofill (reported 2026-04-11)
Credited as Google
CVE-2026-17754
BR2026-0000-034813
Blink
unclaimed
Medium — Inappropriate implementation in Blink (reported 2026-04-11)
Credited as Google
CVE-2026-17755
BR2026-0000-034814
Extensions
unclaimed
Medium — Incorrect security UI in Extensions (reported 2026-04-12)
Credited as Google
CVE-2026-17756
BR2026-0000-034815
Presentation
unclaimed
Medium — Insufficient policy enforcement in Presentation (reported 2026-04-13)
Credited as Google
CVE-2026-17757
BR2026-0000-034816
Skia
unclaimed
Medium — Uninitialized Use in Skia (reported 2026-04-14)
Credited as Google
CVE-2026-17758
BR2026-0000-034817
Dawn
unclaimed
Medium — Heap buffer overflow in Dawn (reported 2026-04-18)
Credited as Hyeonjun Ahn (@_deayzl)
CVE-2026-17759
BR2026-0000-034818
Codecs
unclaimed
Medium — Uninitialized Use in Codecs (reported 2026-04-20)
Credited as Google
CVE-2026-17760
BR2026-0000-034819
NoStatePrefetch
unclaimed
Medium — Side-channel information leakage in NoStatePrefetch (reported 2026-04-25)
Credited as Google
CVE-2026-17761
BR2026-0000-034820
Chrome for iOS
unclaimed
Medium — Insufficient validation of untrusted input in Chrome for iOS (reported 2026-04-30)
Credited as Google
CVE-2026-17762
BR2026-0000-034821
Chrome for iOS
unclaimed
Medium — Inappropriate implementation in Chrome for iOS (reported 2026-04-30)
Credited as Google
CVE-2026-17763
BR2026-0000-034822
GPU
unclaimed
Medium — Inappropriate implementation in GPU (reported 2026-05-10)
Credited as Google
CVE-2026-17764
BR2026-0000-034823
FedCM
unclaimed
Medium — Inappropriate implementation in FedCM (reported 2026-05-10)
Credited as Google
CVE-2026-17765
BR2026-0000-034824
WebProtect
unclaimed
Medium — Inappropriate implementation in WebProtect (reported 2026-05-10)
Credited as Google
CVE-2026-17766
BR2026-0000-034825
Clipboard
unclaimed
Medium — Insufficient validation of untrusted input in Clipboard (reported 2026-05-10)
Credited as Google
CVE-2026-17767
BR2026-0000-034826
WebView
unclaimed
Medium — Insufficient validation of untrusted input in WebView (reported 2026-05-10)
Credited as Google
CVE-2026-17768
BR2026-0000-034827
WebSockets
unclaimed
Medium — Insufficient validation of untrusted input in WebSockets (reported 2026-05-13)
Credited as Google
CVE-2026-17769
BR2026-0000-034828
Cast
unclaimed
Medium — Insufficient validation of untrusted input in Cast (reported 2026-05-14)
Credited as Google
CVE-2026-17770
BR2026-0000-034829
Media
unclaimed
Medium — Out of bounds read in Media (reported 2026-05-14)
Credited as Google
CVE-2026-17771
BR2026-0000-034830
Skia
unclaimed
Medium — Uninitialized Use in Skia (reported 2026-05-14)
Credited as Google
CVE-2026-17772
BR2026-0000-034831
WebGL
unclaimed
Medium — Out of bounds read in WebGL (reported 2026-05-14)
Credited as Google
CVE-2026-17773
BR2026-0000-034832
Cast
unclaimed
Medium — Insufficient validation of untrusted input in Cast (reported 2026-05-14)
Credited as Google
CVE-2026-17774
BR2026-0000-034833
Variations
unclaimed
Medium — Insufficient validation of untrusted input in Variations (reported 2026-05-14)
Credited as Google
CVE-2026-17775
BR2026-0000-034834
PresentationAPI
unclaimed
Medium — Inappropriate implementation in PresentationAPI (reported 2026-05-15)
Credited as Google
CVE-2026-17776
BR2026-0000-034835
Receiver
unclaimed
Medium — Policy bypass in Receiver (reported 2026-05-15)
Credited as Google
CVE-2026-17777
BR2026-0000-034836
Autofill
unclaimed
Medium — Inappropriate implementation in Autofill (reported 2026-05-15)
Credited as Google
CVE-2026-17778
BR2026-0000-034837
Extensions
unclaimed
Medium — Use after free in Extensions (reported 2026-05-15)
Credited as Google
CVE-2026-17779
BR2026-0000-034838
Site Isolation
unclaimed
Medium — Inappropriate implementation in Site Isolation (reported 2026-05-15)
Credited as Google
CVE-2026-17780
BR2026-0000-034839
Isolated Web Apps
unclaimed
Medium — Inappropriate implementation in Isolated Web Apps (reported 2026-05-15)
Credited as Google
CVE-2026-17781
BR2026-0000-034840
Extensions
unclaimed
Medium — Inappropriate implementation in Extensions (reported 2026-05-15)
Credited as Google
CVE-2026-17782
BR2026-0000-034841
Chrome for iOS
unclaimed
Medium — Incorrect security UI in Chrome for iOS (reported 2026-05-15)
Credited as Google
CVE-2026-17783
BR2026-0000-034842
Loader
unclaimed
Medium — Inappropriate implementation in Loader (reported 2026-05-15)
Credited as Google
CVE-2026-17784
BR2026-0000-034843
Audio
unclaimed
Medium — Use after free in Audio (reported 2026-05-16)
Credited as Google
CVE-2026-17785
BR2026-0000-034844
ANGLE
unclaimed
Medium — Uninitialized Use in ANGLE (reported 2026-05-16)
Credited as Google
CVE-2026-17786
BR2026-0000-034845
DevTools
unclaimed
Medium — Insufficient validation of untrusted input in DevTools (reported 2026-05-16)
Credited as Google
CVE-2026-17787
BR2026-0000-034846
DevTools
unclaimed
Medium — Inappropriate implementation in DevTools (reported 2026-05-16)
Credited as Google
CVE-2026-17788
BR2026-0000-034847
Blink
unclaimed
Medium — Inappropriate implementation in Blink (reported 2026-05-16)
Credited as Google
CVE-2026-17789
BR2026-0000-034848
Chrome for iOS
unclaimed
Medium — Insufficient validation of untrusted input in Chrome for iOS (reported 2026-05-16)
Credited as Google
CVE-2026-17790
BR2026-0000-034849
ANGLE
unclaimed
Medium — Uninitialized Use in ANGLE (reported 2026-05-17)
Credited as Google
CVE-2026-17791
BR2026-0000-034850
Payments
unclaimed
Medium — Insufficient validation of untrusted input in Payments (reported 2026-05-17)
Credited as Google
CVE-2026-17792
BR2026-0000-034851
Credential Management
unclaimed
Medium — Inappropriate implementation in Credential Management (reported 2026-05-17)
Credited as Google
CVE-2026-17793
BR2026-0000-034852
Messages
unclaimed
Medium — Inappropriate implementation in Messages (reported 2026-05-17)
Credited as Google
CVE-2026-17794
BR2026-0000-034853
Mobile
unclaimed
Medium — Insufficient validation of untrusted input in Mobile (reported 2026-05-17)
Credited as Google