Google Chrome
Google Chrome Security Releases - July 2026
google-chrome-2026-07 Jul 1, 2026 Source: Vendor
Google Chrome security advisories for July 2026: 374 CVEs, 24 credited researchers.
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
376 lines
Showing 251–300 of 376 matching , page 6 of 8 , clear filters
CVE-2026-17895
BR2026-0000-034954
DataTransfer
unclaimed
Medium — Inappropriate implementation in DataTransfer (reported 2026-06-17)
Credited as hongan@calif.io
CVE-2026-17896
BR2026-0000-034955
DevTools
unclaimed
Medium — Use after free in DevTools (reported 2026-06-18)
Credited as Google
CVE-2026-17897
BR2026-0000-034956
ORB
unclaimed
Medium — Inappropriate implementation in ORB (reported 2026-06-25)
Credited as Sharkkcode
CVE-2026-17898
BR2026-0000-034957
DevTools
unclaimed
Low — Use after free in DevTools (reported 2026-04-24)
Credited as Syn4pse
CVE-2026-17899
BR2026-0000-034958
DevTools
unclaimed
Low — Insufficient policy enforcement in DevTools (reported 2024-10-28)
Credited as asnine
CVE-2026-17900
BR2026-0000-034959
Enterprise
unclaimed
Low — Inappropriate implementation in Enterprise (reported 2026-03-25)
Credited as Google
CVE-2026-17901
BR2026-0000-034960
Sharing
unclaimed
Low — Inappropriate implementation in Sharing (reported 2026-03-25)
Credited as Google
CVE-2026-17902
BR2026-0000-034961
Editing
unclaimed
Low — Inappropriate implementation in Editing (reported 2026-03-28)
Credited as Google
CVE-2026-17903
BR2026-0000-034962
Chromecast
unclaimed
Low — Insufficient policy enforcement in Chromecast (reported 2026-03-28)
Credited as Google
CVE-2026-17904
BR2026-0000-034963
NFC
unclaimed
Low — Insufficient policy enforcement in NFC (reported 2026-03-29)
Credited as Google
CVE-2026-17905
BR2026-0000-034964
SurfaceCapture
unclaimed
Low — Inappropriate implementation in SurfaceCapture (reported 2026-03-29)
Credited as Google
CVE-2026-17906
BR2026-0000-034965
Bluetooth
unclaimed
Low — Insufficient validation of untrusted input in Bluetooth (reported 2026-03-30)
Credited as Google
CVE-2026-17907
BR2026-0000-034966
Network
unclaimed
Low — Side-channel information leakage in Network (reported 2026-03-30)
Credited as Google
CVE-2026-17908
BR2026-0000-034967
Printing
unclaimed
Low — Insufficient validation of untrusted input in Printing (reported 2026-04-02)
Credited as Google
CVE-2026-17909
BR2026-0000-034968
Isolated Web Apps
unclaimed
Low — Insufficient validation of untrusted input in Isolated Web Apps (reported 2026-04-11)
Credited as Google
CVE-2026-17910
BR2026-0000-034969
NFC
unclaimed
Low — Insufficient policy enforcement in NFC (reported 2026-04-11)
Credited as Google
CVE-2026-17911
BR2026-0000-034970
SVG
unclaimed
Low — Insufficient policy enforcement in SVG (reported 2026-04-14)
Credited as Google
CVE-2026-17912
BR2026-0000-034971
Chrome for iOS
unclaimed
Low — Inappropriate implementation in Chrome for iOS (reported 2026-04-19)
Credited as Google
CVE-2026-17913
BR2026-0000-034972
Chrome for iOS
unclaimed
Low — Inappropriate implementation in Chrome for iOS (reported 2026-04-19)
Credited as Google
CVE-2026-17914
BR2026-0000-034973
Skia
unclaimed
Low — Side-channel information leakage in Skia (reported 2026-04-25)
Credited as Google
CVE-2026-17915
BR2026-0000-034974
WebView
unclaimed
Low — Inappropriate implementation in WebView (reported 2026-04-25)
Credited as Google
CVE-2026-17916
BR2026-0000-034975
Settings
unclaimed
Low — Insufficient policy enforcement in Settings (reported 2026-05-07)
Credited as Itzik Chimino
CVE-2026-17917
BR2026-0000-034976
Chrome for iOS
unclaimed
Low — Policy bypass in Chrome for iOS (reported 2026-05-10)
Credited as Google
CVE-2026-17918
BR2026-0000-034977
Sync
unclaimed
Low — Use after free in Sync (reported 2026-05-14)
Credited as Google
CVE-2026-17919
BR2026-0000-034978
Enterprise
unclaimed
Low — Insufficient policy enforcement in Enterprise (reported 2026-05-14)
Credited as Google
CVE-2026-17920
BR2026-0000-034979
V8
unclaimed
Low — Use after free in V8 (reported 2026-05-15)
Credited as Google
CVE-2026-17921
BR2026-0000-034980
Navigation
unclaimed
Low — Insufficient validation of untrusted input in Navigation (reported 2026-05-15)
Credited as Google
CVE-2026-17922
BR2026-0000-034981
Enterprise
unclaimed
Low — Inappropriate implementation in Enterprise (reported 2026-05-15)
Credited as Google
CVE-2026-17923
BR2026-0000-034982
Enterprise
unclaimed
Low — Policy bypass in Enterprise (reported 2026-05-15)
Credited as Google
CVE-2026-17924
BR2026-0000-034983
DNS
unclaimed
Low — Use after free in DNS (reported 2026-05-16)
Credited as Google
CVE-2026-17925
BR2026-0000-034984
Cast
unclaimed
Low — Inappropriate implementation in Cast (reported 2026-05-16)
Credited as Google
CVE-2026-17926
BR2026-0000-034985
DevTools
unclaimed
Low — Insufficient validation of untrusted input in DevTools (reported 2026-05-16)
Credited as Google
CVE-2026-17927
BR2026-0000-034986
DevTools
unclaimed
Low — Insufficient policy enforcement in DevTools (reported 2026-05-16)
Credited as Google
CVE-2026-17928
BR2026-0000-034987
DataTransfer
unclaimed
Low — Inappropriate implementation in DataTransfer (reported 2026-05-16)
Credited as Google
CVE-2026-17929
BR2026-0000-034988
DevTools
unclaimed
Low — Insufficient validation of untrusted input in DevTools (reported 2026-05-16)
Credited as Google
CVE-2026-17930
BR2026-0000-034989
Extensions
unclaimed
Low — Insufficient validation of untrusted input in Extensions (reported 2026-05-16)
Credited as Google
CVE-2026-17931
BR2026-0000-034990
DevTools
unclaimed
Low — Inappropriate implementation in DevTools (reported 2026-05-16)
Credited as Google
CVE-2026-17932
BR2026-0000-034991
DataTransfer
unclaimed
Low — Use after free in DataTransfer (reported 2026-05-16)
Credited as Google
CVE-2026-17933
BR2026-0000-034992
DOMStorage
unclaimed
Low — Inappropriate implementation in DOMStorage (reported 2026-05-16)
Credited as Google
CVE-2026-17934
BR2026-0000-034993
DevTools
unclaimed
Low — Insufficient validation of untrusted input in DevTools (reported 2026-05-16)
Credited as Google
CVE-2026-17935
BR2026-0000-034994
Codecs
unclaimed
Low — Heap buffer overflow in Codecs (reported 2026-05-16)
Credited as Google
CVE-2026-17936
BR2026-0000-034995
DevTools
unclaimed
Low — Inappropriate implementation in DevTools (reported 2026-05-16)
Credited as Google
CVE-2026-17937
BR2026-0000-034996
DevTools
unclaimed
Low — Inappropriate implementation in DevTools (reported 2026-05-16)
Credited as Google
CVE-2026-17938
BR2026-0000-034997
FullScreen
unclaimed
Low — Inappropriate implementation in FullScreen (reported 2026-05-17)
Credited as Google
CVE-2026-17939
BR2026-0000-034998
Passwords
unclaimed
Low — Inappropriate implementation in Passwords (reported 2026-05-17)
Credited as Google
CVE-2026-17940
BR2026-0000-034999
Picture-in-Picture
unclaimed
Low — Insufficient validation of untrusted input in Picture-in-Picture (reported 2026-05-17)
Credited as Google
CVE-2026-17941
BR2026-0000-035000
Chrome for iOS
unclaimed
Low — Inappropriate implementation in Chrome for iOS (reported 2026-05-18)
Credited as Google
CVE-2026-17942
BR2026-0000-035001
SVG
unclaimed
Low — Side-channel information leakage in SVG (reported 2026-05-18)
Credited as Google
CVE-2026-17943
BR2026-0000-035002
Parser
unclaimed
Low — Inappropriate implementation in Parser (reported 2026-05-18)
Credited as Google
CVE-2026-17944
BR2026-0000-035003
Chrome for iOS
unclaimed
Low — Inappropriate implementation in Chrome for iOS (reported 2026-05-19)
Credited as Google