BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Google Chrome

Google Chrome Security Releases - October 2026

google-chrome-2026-10 Oct 1, 2026 Source: Vendor

Google Chrome security advisories for October 2026: 714 CVEs, 105 credited researchers.

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

750 lines
All 750 CVEs 750 Additional recognition 0 Unclaimed only
Showing 201–250 of 750 , page 5 of 15
CVE-2026-106362 BR2026-0000-035867 DevTools unclaimed
Low: Missing authorization in DevTools (reported 2026-05-19)
Credited as Google
CVE-2026-106363 BR2026-0000-035868 FullScreen unclaimed
Medium: Missing authorization in FullScreen (reported 2026-04-12)
Credited as Google
CVE-2026-106364 BR2026-0000-035869 Omnibox unclaimed
High: Incorrect authorization in Omnibox (reported 2026-07-28)
Credited as Google
CVE-2026-106365 BR2026-0000-035870 Animation unclaimed
Medium: Missing authorization in Animation (reported 2026-03-31)
Credited as Google
CVE-2026-106366 BR2026-0000-035871 CustomTabs unclaimed
High: Incomplete cleanup in CustomTabs (reported 2026-08-24)
Credited as Naoya Miyaguchi
CVE-2026-106367 BR2026-0000-035872 Mobile unclaimed
Medium: Missing authorization in Mobile (reported 2026-06-05)
Credited as Google
CVE-2026-106368 BR2026-0000-035873 UI unclaimed
Low: UI misrepresentation in UI (reported 2026-08-27)
Credited as Google
CVE-2026-106369 BR2026-0000-035874 Translate unclaimed
High: Missing authorization in Translate (reported 2026-07-26)
Credited as M. Fauzan Wijaya (Gh05t666nero)
CVE-2026-106370 BR2026-0000-035875 GPU unclaimed
Medium: Uninitialized resource in GPU (reported 2026-05-27)
Credited as Google
CVE-2026-106371 BR2026-0000-035876 Transactions Platform unclaimed
Low: Incorrect authorization in Transactions Platform (reported 2026-08-27)
Credited as Google
CVE-2026-106372 BR2026-0000-035877 UI unclaimed
Medium: Incorrect authorization in UI (reported 2026-09-05)
Credited as Quyen Son at VinFast (@zer0qs)
CVE-2026-106373 BR2026-0000-035878 Fonts unclaimed
Medium: Use after free in Fonts (reported 2026-06-13)
Credited as Google
CVE-2026-106374 BR2026-0000-035879 V8 unclaimed
Low: Type confusion in V8 (reported 2026-08-26)
Credited as Tencent KeenLab (CodeBuddy Security)
CVE-2026-106374 BR2026-0000-035880 V8 unclaimed
Low: Type confusion in V8 (reported 2026-08-26)
Credited as SecBuddyN
CVE-2026-106375 BR2026-0000-035881 Dawn unclaimed
Medium: Incomplete cleanup in Dawn (reported 2026-07-19)
Credited as Google
CVE-2026-106376 BR2026-0000-035882 ANGLE unclaimed
High: Uninitialized resource in ANGLE (reported 2026-08-28)
Credited as weihengqiuu
CVE-2026-106377 BR2026-0000-035883 Fonts unclaimed
High: Race condition in Fonts (reported 2026-06-05)
Credited as Google
CVE-2026-106378 BR2026-0000-035884 Sandbox unclaimed
Medium: Privilege elevation in Sandbox (reported 2026-04-29)
Credited as Paulos Yibelo Mesfin
CVE-2026-106379 BR2026-0000-035885 Skia unclaimed
High: Uninitialized resource in Skia (reported 2026-09-15)
Credited as Google
CVE-2026-106380 BR2026-0000-035886 UI unclaimed
Low: UI misrepresentation in UI (reported 2026-08-27)
Credited as Google
CVE-2026-106381 BR2026-0000-035887 Passwords unclaimed
Medium: Incorrect authorization in Passwords (reported 2026-04-11)
Credited as Google
CVE-2026-106382 BR2026-0000-035888 Chromecast unclaimed
Critical: Use after free in Chromecast (reported 2026-07-15)
Credited as Google
CVE-2026-106383 BR2026-0000-035889 Media unclaimed
High: Use after free in Media (reported 2026-09-29)
Credited as assisted by Claude
CVE-2026-106383 BR2026-0000-035890 Media unclaimed
High: Use after free in Media (reported 2026-09-29)
Credited as Xinyang Ge (Anthropic)
CVE-2026-106384 BR2026-0000-035891 SiteIsolation unclaimed
Medium: Missing authorization in SiteIsolation (reported 2026-08-29)
Credited as med.bassia
CVE-2026-106385 BR2026-0000-035892 Chromoting unclaimed
Low: Race condition in Chromoting (reported 2026-08-30)
Credited as Google
CVE-2026-106386 BR2026-0000-035893 WebAudio unclaimed
Medium: Uninitialized resource in WebAudio (reported 2026-08-26)
Credited as Google
CVE-2026-106387 BR2026-0000-035894 Mobile unclaimed
Medium: Missing authorization in Mobile (reported 2026-05-30)
Credited as Google
CVE-2026-106388 BR2026-0000-035895 DataTransfer unclaimed
Medium: Missing authorization in DataTransfer (reported 2026-08-21)
Credited as leolee
CVE-2026-106389 BR2026-0000-035896 USB unclaimed
Medium: Incorrect authorization in USB (reported 2026-04-17)
Credited as Google
CVE-2026-106390 BR2026-0000-035897 SanitizerAPI unclaimed
Low: Incorrect provision of specified functionality in SanitizerAPI (reported 2026-09-02)
Credited as Google
CVE-2026-106391 BR2026-0000-035898 WebShare unclaimed
Medium: Incorrect authorization in WebShare (reported 2026-06-10)
Credited as Google
CVE-2026-106392 BR2026-0000-035899 WebAudio unclaimed
Medium: Information leak in WebAudio (reported 2026-05-18)
Credited as Google
CVE-2026-106393 BR2026-0000-035900 Storage unclaimed
High: Use after free in Storage (reported 2026-09-10)
Credited as Xinyang Ge
CVE-2026-106394 BR2026-0000-035901 Glic unclaimed
Low: Incomplete cleanup in Glic (reported 2026-05-14)
Credited as Project Fortify
CVE-2026-106395 BR2026-0000-035902 Dawn unclaimed
Medium: Uninitialized resource in Dawn (reported 2026-08-26)
Credited as Google
CVE-2026-106396 BR2026-0000-035903 Omnibox unclaimed
High: Improper input validation in Omnibox (reported 2026-08-25)
Credited as Google
CVE-2026-106397 BR2026-0000-035904 Mobile unclaimed
Medium: Incorrect authorization in Mobile (reported 2026-04-17)
Credited as Google
CVE-2026-106398 BR2026-0000-035905 Media unclaimed
Medium: Incorrect authorization in Media (reported 2026-08-05)
Credited as caveeroo
CVE-2026-106399 BR2026-0000-035906 Skia unclaimed
Low: Out of bounds read in Skia (reported 2026-07-01)
Credited as Google
CVE-2026-106400 BR2026-0000-035907 Messages unclaimed
Medium: Clickjacking in Messages (reported 2026-05-30)
Credited as Google
CVE-2026-106401 BR2026-0000-035908 Media unclaimed
Medium: Out of bounds write in Media (reported 2026-08-26)
Credited as Google
CVE-2026-106402 BR2026-0000-035909 Extensions unclaimed
Medium: Incorrect authorization in Extensions (reported 2026-05-17)
Credited as Google
CVE-2026-106403 BR2026-0000-035910 Accessibility unclaimed
Medium: Incorrect authorization in Accessibility (reported 2026-06-13)
Credited as Google
CVE-2026-106404 BR2026-0000-035911 FontAccess unclaimed
Medium: Incorrect authorization in FontAccess (reported 2026-08-26)
Credited as Google
CVE-2026-106405 BR2026-0000-035912 CustomTabs unclaimed
Medium: Race condition in CustomTabs (reported 2026-05-27)
Credited as Google
CVE-2026-106406 BR2026-0000-035913 Mobile unclaimed
Medium: Missing authorization in Mobile (reported 2026-04-22)
Credited as Google
CVE-2026-106407 BR2026-0000-035914 GetUserMedia unclaimed
Medium: Incorrect authorization in GetUserMedia (reported 2026-04-14)
Credited as Google
CVE-2026-106408 BR2026-0000-035915 Mobile unclaimed
Medium: Protection mechanism failure in Mobile (reported 2026-04-19)
Credited as Google
CVE-2026-106409 BR2026-0000-035916 WebAppInstalls unclaimed
Medium: Incorrect reference resolution in WebAppInstalls (reported 2026-09-09)
Credited as Quyen Son at VinFast (@zer0qs)