Google Chrome
Google Chrome Security Releases - October 2026
google-chrome-2026-10 Oct 1, 2026 Source: Vendor
Google Chrome security advisories for October 2026: 714 CVEs, 105 credited researchers.
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
750 lines
Showing 1–50 of 750 , page 1 of 15
CVE-2026-102304
BR2026-0000-035667
Passwords
unclaimed
High: Use after free in Passwords (reported 2026-09-11)
Credited as Xinyang Ge
CVE-2026-102316
BR2026-0000-035668
Views
unclaimed
High: Use after free in Views (reported 2026-09-11)
Credited as Xinyang Ge
CVE-2026-102322
BR2026-0000-035669
SiteIsolation
unclaimed
High: Incorrect Authorization in SiteIsolation (reported 2026-06-23)
Credited as Avadhut Mahamuni
CVE-2026-103621
BR2026-0000-035670
Compositing
unclaimed
High: Integer overflow in Compositing (reported 2026-09-02)
Credited as Google
CVE-2026-103622
BR2026-0000-035671
SVG
unclaimed
High: Use after free in SVG (reported 2026-09-24)
Credited as xinyang
CVE-2026-103623
BR2026-0000-035672
MediaStream
unclaimed
High: Use after free in MediaStream (reported 2026-09-24)
Credited as xinyang
CVE-2026-103624
BR2026-0000-035673
Contextual Tasks
unclaimed
High: Use after free in Contextual Tasks (reported 2026-09-15)
Credited as xuanocto1221
CVE-2026-103625
BR2026-0000-035674
V8
unclaimed
High: Type confusion in V8 (reported 2026-09-11)
Credited as Google
CVE-2026-103626
BR2026-0000-035675
FileSystem
unclaimed
High: Incorrect authorization in FileSystem (reported 2026-08-26)
Credited as Google
CVE-2026-103627
BR2026-0000-035676
SVG
unclaimed
Medium: Information leak in SVG (reported 2026-08-26)
Credited as Google
CVE-2026-103628
BR2026-0000-035677
WebGL
unclaimed
Critical: Out of bounds write in WebGL (reported 2026-08-21)
Credited as Google
CVE-2026-103629
BR2026-0000-035678
Skia
unclaimed
High: Integer overflow in Skia (reported 2026-09-15)
Credited as Google
CVE-2026-103630
BR2026-0000-035679
FedCM
unclaimed
High: Use after free in FedCM (reported 2026-09-04)
Credited as xinyang
CVE-2026-103631
BR2026-0000-035680
WebRTC
unclaimed
High: Buffer overflow in WebRTC (reported 2026-09-28)
Credited as assisted by Claude
CVE-2026-103631
BR2026-0000-035681
WebRTC
unclaimed
High: Buffer overflow in WebRTC (reported 2026-09-28)
Credited as Xinyang Ge (Anthropic)
CVE-2026-106179
BR2026-0000-035682
WebAppInstalls
unclaimed
Low: UI misrepresentation in WebAppInstalls (reported 2026-08-27)
Credited as Google
CVE-2026-106180
BR2026-0000-035683
Animation
unclaimed
Medium: Observable discrepancy in Animation (reported 2026-05-28)
Credited as Google
CVE-2026-106181
BR2026-0000-035684
DevTools
unclaimed
Medium: Incorrect reference resolution in DevTools (reported 2026-03-29)
Credited as Google
CVE-2026-106182
BR2026-0000-035685
Paint
unclaimed
Medium: UI misrepresentation in Paint (reported 2026-05-17)
Credited as Google
CVE-2026-106183
BR2026-0000-035686
Chromoting
unclaimed
Medium: Missing authorization in Chromoting (reported 2026-08-26)
Credited as Google
CVE-2026-106184
BR2026-0000-035687
Media
unclaimed
High: Uninitialized resource in Media (reported 2026-09-29)
Credited as James Burton (Offensive Security @ Meta)
CVE-2026-106185
BR2026-0000-035688
Viz
unclaimed
Medium: Improper input validation in Viz (reported 2026-04-14)
Credited as Google
CVE-2026-106186
BR2026-0000-035689
CredentialProvider
unclaimed
Low: Uncontrolled search path element in CredentialProvider (reported 2026-06-11)
Credited as Google
CVE-2026-106187
BR2026-0000-035690
Permissions
unclaimed
Low: Missing authorization in Permissions (reported 2026-05-10)
Credited as Google
CVE-2026-106188
BR2026-0000-035691
SignIn
unclaimed
Medium: Confused deputy in SignIn (reported 2026-05-21)
Credited as Google
CVE-2026-106189
BR2026-0000-035692
ReaderMode
unclaimed
Medium: Code injection in ReaderMode (reported 2026-04-13)
Credited as Google
CVE-2026-106190
BR2026-0000-035693
Media
unclaimed
High: Use after free in Media (reported 2026-09-27)
Credited as weihengqiuu
CVE-2026-106191
BR2026-0000-035694
Actor
unclaimed
Low: Missing authorization in Actor (reported 2026-04-13)
Credited as Google
CVE-2026-106192
BR2026-0000-035695
Mobile
unclaimed
Low: Information leak in Mobile (reported 2026-06-16)
Credited as Google
CVE-2026-106193
BR2026-0000-035696
Parser
unclaimed
High: Use after free in Parser (reported 2026-09-05)
Credited as Blockian Creator of Kritt and Open-Kritt
CVE-2026-106194
BR2026-0000-035697
WebAppInstalls
unclaimed
Medium: Missing authorization in WebAppInstalls (reported 2026-04-01)
Credited as Google
CVE-2026-106195
BR2026-0000-035698
Chromoting
unclaimed
Low: Incorrect authorization in Chromoting (reported 2026-08-28)
Credited as Google
CVE-2026-106196
BR2026-0000-035699
Navigation
unclaimed
Medium: Missing authorization in Navigation (reported 2026-04-19)
Credited as Google
CVE-2026-106197
BR2026-0000-035700
Browser
unclaimed
Critical: Use after free in Browser (reported 2026-09-11)
Credited as Xinyang Ge
CVE-2026-106198
BR2026-0000-035701
FileSystem
unclaimed
Medium: Missing authorization in FileSystem (reported 2026-05-07)
Credited as pakhunov.anton.n
CVE-2026-106199
BR2026-0000-035702
Actor
unclaimed
Low: Incorrect authorization in Actor (reported 2026-05-29)
Credited as Google
CVE-2026-106200
BR2026-0000-035703
Track
unclaimed
High: Use after free in Track (reported 2026-10-01)
Credited as Google
CVE-2026-106201
BR2026-0000-035704
V8
unclaimed
Medium: Race condition in V8 (reported 2026-05-28)
Credited as Google
CVE-2026-106202
BR2026-0000-035705
ANGLE
unclaimed
High: Uninitialized resource in ANGLE (reported 2026-08-26)
Credited as Google
CVE-2026-106204
BR2026-0000-035706
PDF
unclaimed
High: Use after free in PDF (reported 2026-09-30)
Credited as assisted by Claude
CVE-2026-106204
BR2026-0000-035707
PDF
unclaimed
High: Use after free in PDF (reported 2026-09-30)
Credited as Xinyang Ge (Anthropic)
CVE-2026-106205
BR2026-0000-035708
Passwords
unclaimed
Medium: Missing authorization in Passwords (reported 2026-06-03)
Credited as Google
CVE-2026-106206
BR2026-0000-035709
Mobile
unclaimed
Medium: Improper input validation in Mobile (reported 2026-05-28)
Credited as Google
CVE-2026-106207
BR2026-0000-035710
V8
unclaimed
Medium: Race condition in V8 (reported 2026-08-30)
Credited as flyyy
CVE-2026-106208
BR2026-0000-035711
API
unclaimed
Medium: Missing authorization in API (reported 2026-03-28)
Credited as Google
CVE-2026-106209
BR2026-0000-035712
Mobile
unclaimed
Medium: UI misrepresentation in Mobile (reported 2026-05-29)
Credited as Google
CVE-2026-106210
BR2026-0000-035713
Scroll
unclaimed
Medium: Observable discrepancy in Scroll (reported 2026-09-03)
Credited as Hafiizh
CVE-2026-106211
BR2026-0000-035714
TabStrip
unclaimed
High: Use after free in TabStrip (reported 2026-09-15)
Credited as Google
CVE-2026-106212
BR2026-0000-035715
Autofill
unclaimed
Medium: Incorrect authorization in Autofill (reported 2026-07-28)
Credited as Google
CVE-2026-106213
BR2026-0000-035716
WebAudio
unclaimed
Medium: Race condition in WebAudio (reported 2026-06-05)
Credited as Google