Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Google Chrome

Google Chrome Security Releases - July 2026

google-chrome-2026-07 Jul 1, 2026 Source: Vendor

Google Chrome security advisories for July 2026: 374 CVEs, 24 credited researchers.

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

376 lines
Showing 351–376 of 376 matching , page 8 of 8 , clear filters
CVE-2026-17995 BR2026-0000-035054 Dawn unclaimed
Low — Out of bounds read in Dawn (reported 2026-06-07)
Credited as ksw9722
CVE-2026-17995 BR2026-0000-035055 Dawn unclaimed
Low — Out of bounds read in Dawn (reported 2026-06-07)
Credited as sm1ee
CVE-2026-17996 BR2026-0000-035056 Browser unclaimed
Low — Inappropriate implementation in Browser (reported 2026-06-08)
Credited as Google
CVE-2026-17997 BR2026-0000-035057 Passwords unclaimed
Low — Inappropriate implementation in Passwords (reported 2026-06-08)
Credited as Google
CVE-2026-17998 BR2026-0000-035058 Extensions unclaimed
Low — Incorrect security UI in Extensions (reported 2026-06-09)
Credited as Google
CVE-2026-17999 BR2026-0000-035059 PictureInPicture unclaimed
Low — Incorrect security UI in PictureInPicture (reported 2026-06-09)
Credited as Google
CVE-2026-18000 BR2026-0000-035060 USB unclaimed
Low — Insufficient policy enforcement in USB (reported 2026-06-09)
Credited as Google
CVE-2026-18001 BR2026-0000-035061 WebGL unclaimed
Low — Inappropriate implementation in WebGL (reported 2026-06-09)
Credited as Google
CVE-2026-18002 BR2026-0000-035062 Google Lens unclaimed
Low — Insufficient validation of untrusted input in Google Lens (reported 2026-06-09)
Credited as Google
CVE-2026-18003 BR2026-0000-035063 Chrome for iOS unclaimed
Low — Inappropriate implementation in Chrome for iOS (reported 2026-06-09)
Credited as Google
CVE-2026-18004 BR2026-0000-035064 Speech unclaimed
Low — Insufficient policy enforcement in Speech (reported 2026-06-10)
Credited as Google
CVE-2026-18005 BR2026-0000-035065 WebXR unclaimed
Low — Inappropriate implementation in WebXR (reported 2026-06-10)
Credited as Google
CVE-2026-18006 BR2026-0000-035066 Google Lens unclaimed
Low — Inappropriate implementation in Google Lens (reported 2026-06-10)
Credited as Google
CVE-2026-18007 BR2026-0000-035067 Input unclaimed
Low — Inappropriate implementation in Input (reported 2026-06-10)
Credited as Google
CVE-2026-18008 BR2026-0000-035068 Settings unclaimed
Low — Inappropriate implementation in Settings (reported 2026-06-10)
Credited as Google
CVE-2026-18009 BR2026-0000-035069 Passwords unclaimed
Low — Insufficient validation of untrusted input in Passwords (reported 2026-06-10)
Credited as Google
CVE-2026-18010 BR2026-0000-035070 Passwords unclaimed
Low — Inappropriate implementation in Passwords (reported 2026-06-10)
Credited as Google
CVE-2026-18011 BR2026-0000-035071 Chrome for iOS unclaimed
Low — Inappropriate implementation in Chrome for iOS (reported 2026-06-11)
Credited as Google
CVE-2026-18012 BR2026-0000-035072 PDFium unclaimed
Low — Use after free in PDFium (reported 2026-06-11)
Credited as Google
CVE-2026-18013 BR2026-0000-035073 Chrome for iOS unclaimed
Low — Inappropriate implementation in Chrome for iOS (reported 2026-06-12)
Credited as Google
CVE-2026-18014 BR2026-0000-035074 DevTools unclaimed
Low — Insufficient validation of untrusted input in DevTools (reported 2026-06-12)
Credited as Google
CVE-2026-18015 BR2026-0000-035075 Tint unclaimed
Low — Inappropriate implementation in Tint (reported 2026-06-13)
Credited as Google
CVE-2026-18016 BR2026-0000-035076 Chrome for iOS unclaimed
Low — Insufficient policy enforcement in Chrome for iOS (reported 2026-06-13)
Credited as Google
CVE-2026-18017 BR2026-0000-035077 Dawn unclaimed
Low — Use after free in Dawn (reported 2026-06-14)
Credited as Google
CVE-2026-18018 BR2026-0000-035078 Updater unclaimed
Low — Inappropriate implementation in Updater (reported 2026-06-16)
Credited as Google
CVE-2026-18019 BR2026-0000-035079 Media unclaimed
Low — Side-channel information leakage in Media (reported 2026-06-19)
Credited as Google