Google Chrome
Google Chrome Security Releases - October 2026
google-chrome-2026-10 Oct 1, 2026 Source: Vendor
Google Chrome security advisories for October 2026: 714 CVEs, 105 credited researchers.
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
750 lines
Showing 151–200 of 750 , page 4 of 15
CVE-2026-106316
BR2026-0000-035817
Chromoting
unclaimed
Low: UI misrepresentation in Chromoting (reported 2026-08-29)
Credited as Google
CVE-2026-106317
BR2026-0000-035818
FullScreen
unclaimed
Low: UI misrepresentation in FullScreen (reported 2025-10-09)
Credited as Manojkumar Jaganathan (https://www.linkedin.com/in/manojkumar-j-7ba35b202/) Aka TheWhiteEvil (https://hackerone.com/the-white-evil) with HackerBro Technologies
CVE-2026-106318
BR2026-0000-035819
Media
unclaimed
High: Use after free in Media (reported 2026-09-25)
Credited as assisted by Claude
CVE-2026-106318
BR2026-0000-035820
Media
unclaimed
High: Use after free in Media (reported 2026-09-25)
Credited as Xinyang Ge (Anthropic)
CVE-2026-106320
BR2026-0000-035821
UI
unclaimed
Low: Use of released resource in UI (reported 2026-08-28)
Credited as Google
CVE-2026-106321
BR2026-0000-035822
Editing
unclaimed
Medium: Information leak in Editing (reported 2026-09-02)
Credited as Google
CVE-2026-106322
BR2026-0000-035823
AppManifest
unclaimed
Medium: Open redirect in AppManifest (reported 2026-05-27)
Credited as Google
CVE-2026-106323
BR2026-0000-035824
Chrome for iOS
unclaimed
High: Missing authorization in Chrome for iOS (reported 2026-08-26)
Credited as Google
CVE-2026-106324
BR2026-0000-035825
WebAppInstalls
unclaimed
Medium: Incorrect authorization in WebAppInstalls (reported 2026-04-09)
Credited as Narenda Singh (@_3P1C)
CVE-2026-106325
BR2026-0000-035826
Core
unclaimed
Low: Incorrect reference resolution in Core (reported 2026-09-02)
Credited as Google
CVE-2026-106326
BR2026-0000-035827
UI
unclaimed
Medium: Confused deputy in UI (reported 2026-05-10)
Credited as Google
CVE-2026-106327
BR2026-0000-035828
Core
unclaimed
High: Incorrect authorization in Core (reported 2026-08-23)
Credited as OGINOME Tomohito
CVE-2026-106328
BR2026-0000-035829
PDF
unclaimed
Medium: Incorrect authorization in PDF (reported 2026-05-30)
Credited as Google
CVE-2026-106329
BR2026-0000-035830
FileSystem
unclaimed
High: Incorrect authorization in FileSystem (reported 2026-09-15)
Credited as Google
CVE-2026-106330
BR2026-0000-035831
Paint
unclaimed
Medium: Information leak in Paint (reported 2026-08-26)
Credited as Google
CVE-2026-106331
BR2026-0000-035832
Extensions
unclaimed
Low: Improper input validation in Extensions (reported 2026-08-27)
Credited as Google
CVE-2026-106332
BR2026-0000-035833
Compositing
unclaimed
High: Integer overflow in Compositing (reported 2026-08-27)
Credited as Google
CVE-2026-106333
BR2026-0000-035834
Input
unclaimed
Medium: Incorrect authorization in Input (reported 2026-05-28)
Credited as Google
CVE-2026-106334
BR2026-0000-035835
Payments
unclaimed
Low: Information leak in Payments (reported 2026-09-02)
Credited as Google
CVE-2026-106335
BR2026-0000-035836
Media
unclaimed
Medium: Use after free in Media (reported 2026-04-13)
Credited as Google
CVE-2026-106336
BR2026-0000-035837
Paint
unclaimed
Medium: Observable discrepancy in Paint (reported 2026-06-11)
Credited as Google
CVE-2026-106337
BR2026-0000-035838
UI
unclaimed
Medium: UI misrepresentation in UI (reported 2026-08-26)
Credited as Google
CVE-2026-106338
BR2026-0000-035839
PictureInPicture
unclaimed
Low: UI misrepresentation in PictureInPicture (reported 2025-10-02)
Credited as Hafiizh
CVE-2026-106339
BR2026-0000-035840
Core
unclaimed
Low: Use of released resource in Core (reported 2026-08-28)
Credited as Google
CVE-2026-106340
BR2026-0000-035841
CredentialProvider
unclaimed
Low: Missing authorization in CredentialProvider (reported 2026-04-17)
Credited as Wooseok Sung
CVE-2026-106341
BR2026-0000-035842
V8
unclaimed
Medium: Type confusion in V8 (reported 2026-09-08)
Credited as Google
CVE-2026-106342
BR2026-0000-035843
Autofill
unclaimed
Medium: Information leak in Autofill (reported 2026-05-13)
Credited as Google
CVE-2026-106343
BR2026-0000-035844
Autofill AI
unclaimed
Low: Improper state validation in Autofill AI (reported 2026-08-27)
Credited as Google
CVE-2026-106344
BR2026-0000-035845
Permissions
unclaimed
Low: Missing authorization in Permissions (reported 2026-04-01)
Credited as Google
CVE-2026-106345
BR2026-0000-035846
Session
unclaimed
Low: Use of released resource in Session (reported 2026-09-02)
Credited as Google
CVE-2026-106346
BR2026-0000-035847
DevTools
unclaimed
High: Improper state validation in DevTools (reported 2026-09-26)
Credited as Google
CVE-2026-106347
BR2026-0000-035848
Track
unclaimed
Critical: Use after free in Track (reported 2026-09-30)
Credited as assisted by Claude
CVE-2026-106347
BR2026-0000-035849
Track
unclaimed
Critical: Use after free in Track (reported 2026-09-30)
Credited as Xinyang Ge (Anthropic)
CVE-2026-106348
BR2026-0000-035850
Animation
unclaimed
Medium: Information leak in Animation (reported 2026-07-21)
Credited as Google
CVE-2026-106349
BR2026-0000-035851
V8
unclaimed
High: Use after free in V8 (reported 2026-09-29)
Credited as assisted by Claude
CVE-2026-106349
BR2026-0000-035852
V8
unclaimed
High: Use after free in V8 (reported 2026-09-29)
Credited as Xinyang Ge (Anthropic)
CVE-2026-106350
BR2026-0000-035853
Browser
unclaimed
Low: Incorrect authorization in Browser (reported 2026-08-27)
Credited as Google
CVE-2026-106351
BR2026-0000-035854
Safebrowsing
unclaimed
Medium: Observable discrepancy in Safebrowsing (reported 2026-08-27)
Credited as Google
CVE-2026-106352
BR2026-0000-035855
WebProtect
unclaimed
Medium: Incorrect authorization in WebProtect (reported 2026-08-26)
Credited as Google
CVE-2026-106353
BR2026-0000-035856
Mobile
unclaimed
Low: Improper input validation in Mobile (reported 2026-04-13)
Credited as Google
CVE-2026-106354
BR2026-0000-035857
Extensions
unclaimed
Medium: Improper resource exposure in Extensions (reported 2026-05-10)
Credited as Google
CVE-2026-106355
BR2026-0000-035858
Media
unclaimed
Low: Missing authorization in Media (reported 2026-09-10)
Credited as Google
CVE-2026-106356
BR2026-0000-035859
EVP
unclaimed
Medium: Clickjacking in EVP (reported 2026-05-27)
Credited as Google
CVE-2026-106357
BR2026-0000-035860
WebRTC
unclaimed
High: Use after free in WebRTC (reported 2026-09-28)
Credited as assisted by Claude
CVE-2026-106357
BR2026-0000-035861
WebRTC
unclaimed
High: Use after free in WebRTC (reported 2026-09-28)
Credited as Xinyang Ge (Anthropic)
CVE-2026-106358
BR2026-0000-035862
Navigation
unclaimed
Critical: Use after free in Navigation (reported 2026-09-28)
Credited as assisted by Claude
CVE-2026-106358
BR2026-0000-035863
Navigation
unclaimed
Critical: Use after free in Navigation (reported 2026-09-28)
Credited as Xinyang Ge (Anthropic)
CVE-2026-106359
BR2026-0000-035864
DeviceBoundSessionCredentials
unclaimed
Low: Confused deputy in DeviceBoundSessionCredentials (reported 2026-04-08)
Credited as Google
CVE-2026-106360
BR2026-0000-035865
Payments
unclaimed
Medium: Information leak in Payments (reported 2026-07-17)
Credited as NH DEV
CVE-2026-106361
BR2026-0000-035866
Mobile
unclaimed
Medium: Incorrect provision of specified functionality in Mobile (reported 2026-05-16)
Credited as Google