Google Chrome
Google Chrome Security Releases - July 2026
google-chrome-2026-07 Jul 1, 2026 Source: Vendor
Google Chrome security advisories for July 2026: 374 CVEs, 24 credited researchers.
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
376 lines
Showing 301–350 of 376 matching , page 7 of 8 , clear filters
CVE-2026-17945
BR2026-0000-035004
Navigation
unclaimed
Low — Inappropriate implementation in Navigation (reported 2026-05-19)
Credited as Google
CVE-2026-17946
BR2026-0000-035005
Dawn
unclaimed
Low — Uninitialized Use in Dawn (reported 2026-05-21)
Credited as Google
CVE-2026-17947
BR2026-0000-035006
WebSockets
unclaimed
Low — Use after free in WebSockets (reported 2026-05-21)
Credited as Google
CVE-2026-17948
BR2026-0000-035007
V8
unclaimed
Low — Type Confusion in V8 (reported 2026-05-26)
Credited as Google
CVE-2026-17949
BR2026-0000-035008
GPU
unclaimed
Low — Uninitialized Use in GPU (reported 2026-05-27)
Credited as Google
CVE-2026-17950
BR2026-0000-035009
Safebrowsing
unclaimed
Low — Policy bypass in Safebrowsing (reported 2026-05-27)
Credited as Google
CVE-2026-17951
BR2026-0000-035010
WebRTC
unclaimed
Low — Heap buffer overflow in WebRTC (reported 2026-05-27)
Credited as Google
CVE-2026-17952
BR2026-0000-035011
V8
unclaimed
Low — Inappropriate implementation in V8 (reported 2026-05-28)
Credited as Google
CVE-2026-17953
BR2026-0000-035012
WebView
unclaimed
Low — Insufficient policy enforcement in WebView (reported 2026-05-28)
Credited as Google
CVE-2026-17954
BR2026-0000-035013
MHTML
unclaimed
Low — Policy bypass in MHTML (reported 2026-05-28)
Credited as Google
CVE-2026-17955
BR2026-0000-035014
Payments
unclaimed
Low — Insufficient validation of untrusted input in Payments (reported 2026-05-28)
Credited as Google
CVE-2026-17956
BR2026-0000-035015
Scheduling
unclaimed
Low — Inappropriate implementation in Scheduling (reported 2026-05-28)
Credited as Google
CVE-2026-17957
BR2026-0000-035016
CORS
unclaimed
Low — Inappropriate implementation in CORS (reported 2026-05-28)
Credited as Google
CVE-2026-17958
BR2026-0000-035017
Views
unclaimed
Low — Inappropriate implementation in Views (reported 2026-05-28)
Credited as Google
CVE-2026-17959
BR2026-0000-035018
Network
unclaimed
Low — Inappropriate implementation in Network (reported 2026-05-28)
Credited as Google
CVE-2026-17960
BR2026-0000-035019
Chrome for iOS
unclaimed
Low — Inappropriate implementation in Chrome for iOS (reported 2026-05-28)
Credited as Google
CVE-2026-17961
BR2026-0000-035020
Session
unclaimed
Low — Inappropriate implementation in Session (reported 2026-05-29)
Credited as Google
CVE-2026-17962
BR2026-0000-035021
Blink
unclaimed
Low — Inappropriate implementation in Blink (reported 2026-05-29)
Credited as Google
CVE-2026-17963
BR2026-0000-035022
SVG
unclaimed
Low — Inappropriate implementation in SVG (reported 2026-05-29)
Credited as Google
CVE-2026-17964
BR2026-0000-035023
UI
unclaimed
Low — Incorrect security UI in UI (reported 2026-05-29)
Credited as Google
CVE-2026-17965
BR2026-0000-035024
Chrome for iOS
unclaimed
Low — Incorrect security UI in Chrome for iOS (reported 2026-05-30)
Credited as Google
CVE-2026-17966
BR2026-0000-035025
Views
unclaimed
Low — Inappropriate implementation in Views (reported 2026-05-30)
Credited as Google
CVE-2026-17967
BR2026-0000-035026
Chrome for iOS
unclaimed
Low — Use after free in Chrome for iOS (reported 2026-05-30)
Credited as Google
CVE-2026-17968
BR2026-0000-035027
WebXR
unclaimed
Low — Uninitialized Use in WebXR (reported 2026-05-31)
Credited as Google
CVE-2026-17969
BR2026-0000-035028
Passwords
unclaimed
Low — Inappropriate implementation in Passwords (reported 2026-06-01)
Credited as Google
CVE-2026-17970
BR2026-0000-035029
Passwords
unclaimed
Low — Insufficient validation of untrusted input in Passwords (reported 2026-06-01)
Credited as Google
CVE-2026-17971
BR2026-0000-035030
Frame
unclaimed
Low — Inappropriate implementation in Frame (reported 2026-06-01)
Credited as Google
CVE-2026-17972
BR2026-0000-035031
Chrome for iOS
unclaimed
Low — Inappropriate implementation in Chrome for iOS (reported 2026-06-02)
Credited as Google
CVE-2026-17973
BR2026-0000-035032
Views
unclaimed
Low — Inappropriate implementation in Views (reported 2026-06-02)
Credited as Google
CVE-2026-17974
BR2026-0000-035033
DevTools
unclaimed
Low — Insufficient policy enforcement in DevTools (reported 2026-06-02)
Credited as Google
CVE-2026-17975
BR2026-0000-035034
IME
unclaimed
Low — Inappropriate implementation in IME (reported 2026-06-02)
Credited as Google
CVE-2026-17976
BR2026-0000-035035
Extensions
unclaimed
Low — Policy bypass in Extensions (reported 2026-06-03)
Credited as Google
CVE-2026-17977
BR2026-0000-035036
CSS
unclaimed
Low — Policy bypass in CSS (reported 2026-06-03)
Credited as Google
CVE-2026-17978
BR2026-0000-035037
WebCodecs
unclaimed
Low — Side-channel information leakage in WebCodecs (reported 2026-06-03)
Credited as Google
CVE-2026-17979
BR2026-0000-035038
V8
unclaimed
Low — Race in V8 (reported 2026-06-04)
Credited as Google
CVE-2026-17980
BR2026-0000-035039
UI
unclaimed
Low — Inappropriate implementation in UI (reported 2026-06-03)
Credited as Google
CVE-2026-17981
BR2026-0000-035040
Blink
unclaimed
Low — Inappropriate implementation in Blink (reported 2026-06-03)
Credited as Google
CVE-2026-17982
BR2026-0000-035041
Cast
unclaimed
Low — Insufficient validation of untrusted input in Cast (reported 2026-06-04)
Credited as Google
CVE-2026-17983
BR2026-0000-035042
Global Media Controls
unclaimed
Low — Incorrect security UI in Global Media Controls (reported 2026-06-04)
Credited as Google
CVE-2026-17984
BR2026-0000-035043
Browser
unclaimed
Low — Inappropriate implementation in Browser (reported 2026-06-04)
Credited as Google
CVE-2026-17985
BR2026-0000-035044
Speech
unclaimed
Low — Insufficient policy enforcement in Speech (reported 2026-06-04)
Credited as Google
CVE-2026-17986
BR2026-0000-035045
Bluetooth
unclaimed
Low — Insufficient policy enforcement in Bluetooth (reported 2026-06-04)
Credited as Google
CVE-2026-17987
BR2026-0000-035046
Notifications
unclaimed
Low — Insufficient validation of untrusted input in Notifications (reported 2026-06-04)
Credited as Google
CVE-2026-17988
BR2026-0000-035047
Navigation
unclaimed
Low — Insufficient validation of untrusted input in Navigation (reported 2026-06-04)
Credited as Google
CVE-2026-17989
BR2026-0000-035048
V8
unclaimed
Low — Type Confusion in V8 (reported 2026-06-04)
Credited as Google
CVE-2026-17990
BR2026-0000-035049
WebAuthn
unclaimed
Low — Insufficient validation of untrusted input in WebAuthn (reported 2026-06-04)
Credited as Google
CVE-2026-17991
BR2026-0000-035050
AI
unclaimed
Low — Insufficient validation of untrusted input in AI (reported 2026-06-04)
Credited as Google
CVE-2026-17992
BR2026-0000-035051
Skia
unclaimed
Low — Uninitialized Use in Skia (reported 2026-06-05)
Credited as Google
CVE-2026-17993
BR2026-0000-035052
Updater
unclaimed
Low — Race in Updater (reported 2026-06-05)
Credited as Google
CVE-2026-17994
BR2026-0000-035053
Media
unclaimed
Low — Inappropriate implementation in Media (reported 2026-06-06)
Credited as Google