BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Google Chrome

Google Chrome Security Releases - October 2026

google-chrome-2026-10 Oct 1, 2026 Source: Vendor

Google Chrome security advisories for October 2026: 714 CVEs, 105 credited researchers.

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

750 lines
All 750 CVEs 750 Additional recognition 0 Unclaimed only
Showing 51–100 of 750 , page 2 of 15
CVE-2026-106214 BR2026-0000-035717 Proxy unclaimed
High: Information leak in Proxy (reported 2026-07-10)
Credited as Google
CVE-2026-106215 BR2026-0000-035718 ANGLE unclaimed
High: Uninitialized resource in ANGLE (reported 2026-09-13)
Credited as JonathanBouman
CVE-2026-106216 BR2026-0000-035719 ReadingList unclaimed
Medium: Cross-site request forgery in ReadingList (reported 2026-05-30)
Credited as Google
CVE-2026-106217 BR2026-0000-035720 Google Lens unclaimed
Medium: Missing authorization in Google Lens (reported 2026-04-12)
Credited as Google
CVE-2026-106220 BR2026-0000-035721 Passwords unclaimed
Low: Information leak in Passwords (reported 2026-07-14)
Credited as Google
CVE-2026-106221 BR2026-0000-035722 WebAPKs unclaimed
Low: Confused deputy in WebAPKs (reported 2026-07-28)
Credited as Google
CVE-2026-106222 BR2026-0000-035723 Sync unclaimed
Medium: Incorrect authorization in Sync (reported 2026-03-26)
Credited as Google
CVE-2026-106223 BR2026-0000-035724 GPU unclaimed
Medium: Uninitialized resource in GPU (reported 2026-04-11)
Credited as Google
CVE-2026-106224 BR2026-0000-035725 Google Lens unclaimed
Medium: Missing authorization in Google Lens (reported 2026-04-13)
Credited as Google
CVE-2026-106225 BR2026-0000-035726 Autofill unclaimed
Medium: Missing authorization in Autofill (reported 2026-04-12)
Credited as Google
CVE-2026-106226 BR2026-0000-035727 Compositing unclaimed
Medium: Improper input validation in Compositing (reported 2026-06-06)
Credited as Google
CVE-2026-106227 BR2026-0000-035728 Core unclaimed
High: Use after free in Core (reported 2026-09-15)
Credited as Google
CVE-2026-106228 BR2026-0000-035729 Google Lens unclaimed
Medium: Confused deputy in Google Lens (reported 2026-05-29)
Credited as Google
CVE-2026-106229 BR2026-0000-035730 FileSystem unclaimed
Medium: UI misrepresentation in FileSystem (reported 2026-06-09)
Credited as Google
CVE-2026-106230 BR2026-0000-035731 Offline unclaimed
Medium: Incorrect reference resolution in Offline (reported 2026-06-05)
Credited as Google
CVE-2026-106231 BR2026-0000-035732 Dawn unclaimed
High: Uninitialized resource in Dawn (reported 2026-08-26)
Credited as Google
CVE-2026-106232 BR2026-0000-035733 Browser unclaimed
Medium: UI misrepresentation in Browser (reported 2026-06-10)
Credited as Google
CVE-2026-106233 BR2026-0000-035734 Metrics unclaimed
High: Use after free in Metrics (reported 2026-09-24)
Credited as assisted by Claude
CVE-2026-106233 BR2026-0000-035735 Metrics unclaimed
High: Use after free in Metrics (reported 2026-09-24)
Credited as Xinyang Ge (Anthropic)
CVE-2026-106234 BR2026-0000-035736 Network unclaimed
Low: Use after free in Network (reported 2026-09-20)
Credited as Findingz
CVE-2026-106235 BR2026-0000-035737 WebAudio unclaimed
High: Use after free in WebAudio (reported 2026-09-24)
Credited as Team Allied (Hyeongeun Ji, h4nk3r1n, h4vrut4, HunSec, nag0x)
CVE-2026-106236 BR2026-0000-035738 Chromoting unclaimed
Low: UI misrepresentation in Chromoting (reported 2026-09-02)
Credited as Google
CVE-2026-106237 BR2026-0000-035739 Permissions unclaimed
Low: Information leak in Permissions (reported 2026-08-27)
Credited as Google
CVE-2026-106238 BR2026-0000-035740 Fonts unclaimed
Medium: Race condition in Fonts (reported 2026-03-13)
Credited as c6eed09fc8b174b0f3eebedcceb1e792
CVE-2026-106239 BR2026-0000-035741 WebGL unclaimed
High: Integer overflow in WebGL (reported 2026-08-14)
Credited as Google
CVE-2026-106240 BR2026-0000-035742 V8 unclaimed
High: Type confusion in V8 (reported 2026-09-28)
Credited as OpenAI Codex Security (amyb)
CVE-2026-106241 BR2026-0000-035743 Search unclaimed
Medium: Incorrect authorization in Search (reported 2026-04-11)
Credited as Google
CVE-2026-106242 BR2026-0000-035744 Omnibox unclaimed
Medium: Information leak in Omnibox (reported 2026-04-11)
Credited as Google
CVE-2026-106243 BR2026-0000-035745 Proxy Auth unclaimed
High: Incomplete cleanup in Proxy Auth (reported 2026-07-10)
Credited as Google
CVE-2026-106244 BR2026-0000-035746 Permissions unclaimed
Medium: Incorrect authorization in Permissions (reported 2026-04-14)
Credited as Google
CVE-2026-106245 BR2026-0000-035747 ANGLE unclaimed
High: Uninitialized resource in ANGLE (reported 2026-08-21)
Credited as JonathanBouman
CVE-2026-106246 BR2026-0000-035748 Browser unclaimed
Medium: Incorrect authorization in Browser (reported 2026-05-17)
Credited as Google
CVE-2026-106247 BR2026-0000-035749 ANGLE unclaimed
Low: Buffer overflow in ANGLE (reported 2026-06-16)
Credited as Google
CVE-2026-106248 BR2026-0000-035750 Bindings unclaimed
High: Use after free in Bindings (reported 2026-09-19)
Credited as Alessandro Rizzo (0xAlessandro)
CVE-2026-106249 BR2026-0000-035751 Autofill unclaimed
Low: Incorrect authorization in Autofill (reported 2026-08-25)
Credited as mute1008
CVE-2026-106250 BR2026-0000-035752 Actor unclaimed
Low: Missing authorization in Actor (reported 2026-04-14)
Credited as Google
CVE-2026-106251 BR2026-0000-035753 Chromoting unclaimed
Low: UI misrepresentation in Chromoting (reported 2026-09-02)
Credited as Google
CVE-2026-106252 BR2026-0000-035754 Fonts unclaimed
Low: Incorrect comparison in Fonts (reported 2026-05-15)
Credited as Google
CVE-2026-106253 BR2026-0000-035755 Extensions unclaimed
Medium: Incorrect authorization in Extensions (reported 2026-05-16)
Credited as Google
CVE-2026-106255 BR2026-0000-035756 V8 unclaimed
High: Race condition in V8 (reported 2026-09-10)
Credited as Google
CVE-2026-106256 BR2026-0000-035757 Passwords unclaimed
Low: Information leak in Passwords (reported 2026-08-27)
Credited as Google
CVE-2026-106257 BR2026-0000-035758 HTML unclaimed
High: Use after free in HTML (reported 2026-09-24)
Credited as OpenAI Codex Security (amyb)
CVE-2026-106258 BR2026-0000-035759 ANGLE unclaimed
High: Uninitialized resource in ANGLE (reported 2026-08-28)
Credited as weihengqiuu
CVE-2026-106259 BR2026-0000-035760 PermissionElement unclaimed
Low: Incorrect authorization in PermissionElement (reported 2026-07-28)
Credited as Google
CVE-2026-106260 BR2026-0000-035761 DevTools unclaimed
Low: Incorrect authorization in DevTools (reported 2026-05-16)
Credited as Google
CVE-2026-106261 BR2026-0000-035762 Video unclaimed
Medium: Uninitialized resource in Video (reported 2026-04-20)
Credited as Google
CVE-2026-106262 BR2026-0000-035763 GetUserMedia unclaimed
Medium: Incomplete cleanup in GetUserMedia (reported 2026-07-09)
Credited as Google
CVE-2026-106263 BR2026-0000-035764 SignIn unclaimed
Medium: Improper input validation in SignIn (reported 2026-08-26)
Credited as Google
CVE-2026-106264 BR2026-0000-035765 Web Authentication (Passkeys & Security Keys) unclaimed
Low: Missing authorization in Web Authentication (Passkeys & Security Keys) (reported 2026-07-09)
Credited as Google
CVE-2026-106265 BR2026-0000-035766 File unclaimed
Medium: UI misrepresentation in File (reported 2024-11-25)
Credited as Umar Farooq