Google Chrome
Google Chrome Security Releases - October 2026
google-chrome-2026-10 Oct 1, 2026 Source: Vendor
Google Chrome security advisories for October 2026: 714 CVEs, 105 credited researchers.
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
750 lines
Showing 101–150 of 750 matching , page 3 of 15 , clear filters
CVE-2026-106266
BR2026-0000-035767
Contextual Tasks
unclaimed
Medium: Confused deputy in Contextual Tasks (reported 2026-04-12)
Credited as Google
CVE-2026-106267
BR2026-0000-035768
Network
unclaimed
Medium: Missing authorization in Network (reported 2026-04-01)
Credited as Google
CVE-2026-106268
BR2026-0000-035769
WebRTC
unclaimed
High: Use after free in WebRTC (reported 2026-09-24)
Credited as xinyang
CVE-2026-106269
BR2026-0000-035770
CSS
unclaimed
Low: Use after free in CSS (reported 2026-09-24)
Credited as xinyang
CVE-2026-106270
BR2026-0000-035771
WebAppInstalls
unclaimed
Low: Incorrect authorization in WebAppInstalls (reported 2026-08-27)
Credited as Google
CVE-2026-106271
BR2026-0000-035772
Workers
unclaimed
Medium: Missing authorization in Workers (reported 2026-08-26)
Credited as Google
CVE-2026-106272
BR2026-0000-035773
Chromoting
unclaimed
Low: UI misrepresentation in Chromoting (reported 2026-09-02)
Credited as Google
CVE-2026-106273
BR2026-0000-035774
Video
unclaimed
High: Uninitialized resource in Video (reported 2026-08-26)
Credited as Google
CVE-2026-106274
BR2026-0000-035775
Browser
unclaimed
Medium: Incorrect reference resolution in Browser (reported 2026-03-30)
Credited as Google
CVE-2026-106275
BR2026-0000-035776
GPU
unclaimed
Low: Uninitialized resource in GPU (reported 2026-05-19)
Credited as Google
CVE-2026-106276
BR2026-0000-035777
Payments
unclaimed
Low: UI misrepresentation in Payments (reported 2025-05-14)
Credited as Khalil Zhani
CVE-2026-106277
BR2026-0000-035778
Animation
unclaimed
Medium: Information leak in Animation (reported 2026-05-29)
Credited as Google
CVE-2026-106278
BR2026-0000-035779
Select
unclaimed
High: Use after free in Select (reported 2026-09-24)
Credited as assisted by Claude
CVE-2026-106278
BR2026-0000-035780
Select
unclaimed
High: Use after free in Select (reported 2026-09-24)
Credited as Xinyang Ge (Anthropic)
CVE-2026-106279
BR2026-0000-035781
Passwords
unclaimed
Medium: Incorrect reference resolution in Passwords (reported 2026-05-16)
Credited as Google
CVE-2026-106280
BR2026-0000-035782
PermissionElement
unclaimed
Medium: Incorrect authorization in PermissionElement (reported 2026-05-28)
Credited as Google
CVE-2026-106281
BR2026-0000-035783
Tint
unclaimed
High: Use after free in Tint (reported 2026-08-31)
Credited as 0599jiangyc
CVE-2026-106282
BR2026-0000-035784
WebOTP
unclaimed
Medium: UI misrepresentation in WebOTP (reported 2026-05-18)
Credited as Google
CVE-2026-106283
BR2026-0000-035785
Streaming
unclaimed
Medium: Use after free in Streaming (reported 2026-04-04)
Credited as Google
CVE-2026-106284
BR2026-0000-035786
Printing
unclaimed
Medium: Out of bounds read in Printing (reported 2026-05-29)
Credited as Google
CVE-2026-106285
BR2026-0000-035787
WebAppInstalls
unclaimed
Low: UI misrepresentation in WebAppInstalls (reported 2026-07-09)
Credited as Google
CVE-2026-106286
BR2026-0000-035788
Omnibox
unclaimed
Medium: Confused deputy in Omnibox (reported 2026-03-28)
Credited as Google
CVE-2026-106287
BR2026-0000-035789
CORS
unclaimed
Low: Information loss in CORS (reported 2026-05-15)
Credited as Google
CVE-2026-106288
BR2026-0000-035790
Browser
unclaimed
Low: Missing authorization in Browser (reported 2026-08-27)
Credited as Google
CVE-2026-106289
BR2026-0000-035791
FedCM
unclaimed
Medium: Missing authorization in FedCM (reported 2026-05-29)
Credited as Google
CVE-2026-106290
BR2026-0000-035792
GPU
unclaimed
Medium: Uninitialized resource in GPU (reported 2026-04-28)
Credited as Google
CVE-2026-106291
BR2026-0000-035793
GarbageCollection
unclaimed
Medium: Use after free in GarbageCollection (reported 2026-04-04)
Credited as Google
CVE-2026-106292
BR2026-0000-035794
Fonts
unclaimed
Medium: Buffer overflow in Fonts (reported 2026-06-16)
Credited as Google
CVE-2026-106293
BR2026-0000-035795
ANGLE
unclaimed
High: Type confusion in ANGLE (reported 2026-08-16)
Credited as Jinpyo Lee
CVE-2026-106294
BR2026-0000-035796
Chromoting
unclaimed
Low: Incomplete cleanup in Chromoting (reported 2026-09-02)
Credited as Google
CVE-2026-106295
BR2026-0000-035797
Unbounded Element
unclaimed
Medium: Incorrect authorization in Unbounded Element (reported 2026-08-26)
Credited as Google
CVE-2026-106296
BR2026-0000-035798
UI
unclaimed
Low: Improper privilege management in UI (reported 2026-07-28)
Credited as Google
CVE-2026-106297
BR2026-0000-035799
Scheduling
unclaimed
Low: Incorrect authorization in Scheduling (reported 2026-05-16)
Credited as Google
CVE-2026-106298
BR2026-0000-035800
Chrome Tabs
unclaimed
High: Use after free in Chrome Tabs (reported 2026-09-02)
Credited as TIENPA
CVE-2026-106299
BR2026-0000-035801
WebAudio
unclaimed
Low: Improper input validation in WebAudio (reported 2026-06-02)
Credited as Google
CVE-2026-106300
BR2026-0000-035802
CacheStorage
unclaimed
Medium: Race condition in CacheStorage (reported 2026-04-06)
Credited as Google
CVE-2026-106301
BR2026-0000-035803
Contextual Tasks
unclaimed
Medium: Confused deputy in Contextual Tasks (reported 2026-06-14)
Credited as Google
CVE-2026-106302
BR2026-0000-035804
PermissionElement
unclaimed
Medium: UI misrepresentation in PermissionElement (reported 2026-05-17)
Credited as Google
CVE-2026-106303
BR2026-0000-035805
Autofill AI
unclaimed
Medium: Observable discrepancy in Autofill AI (reported 2026-05-28)
Credited as Google
CVE-2026-106304
BR2026-0000-035806
ANGLE
unclaimed
Medium: Out of bounds read in ANGLE (reported 2026-08-26)
Credited as Google
CVE-2026-106305
BR2026-0000-035807
Mobile
unclaimed
Low: UI misrepresentation in Mobile (reported 2026-08-27)
Credited as Google
CVE-2026-106306
BR2026-0000-035808
DevTools
unclaimed
Low: Incorrect authorization in DevTools (reported 2026-05-15)
Credited as Google
CVE-2026-106307
BR2026-0000-035809
Network
unclaimed
Medium: Incorrect authorization in Network (reported 2026-07-22)
Credited as Google
CVE-2026-106309
BR2026-0000-035810
Selection
unclaimed
Low: Incorrect authorization in Selection (reported 2026-04-17)
Credited as Putra Mahardika | Instagram @mhrdkaa._
CVE-2026-106310
BR2026-0000-035811
FontAccess
unclaimed
Low: Use of released resource in FontAccess (reported 2026-09-02)
Credited as Google
CVE-2026-106311
BR2026-0000-035812
PermissionElement
unclaimed
Medium: Clickjacking in PermissionElement (reported 2026-05-17)
Credited as Google
CVE-2026-106312
BR2026-0000-035813
SignIn
unclaimed
Low: Missing authorization in SignIn (reported 2026-04-13)
Credited as Google
CVE-2026-106313
BR2026-0000-035814
Browser
unclaimed
Medium: Incorrect authorization in Browser (reported 2026-04-02)
Credited as Google
CVE-2026-106314
BR2026-0000-035815
Bluetooth
unclaimed
Medium: Incorrect authorization in Bluetooth (reported 2026-04-10)
Credited as Google
CVE-2026-106315
BR2026-0000-035816
Modularization
unclaimed
Medium: Use after free in Modularization (reported 2026-03-30)
Credited as Google