Google Chrome
Google Chrome Security Releases - October 2026
google-chrome-2026-10 Oct 1, 2026 Source: Vendor
Google Chrome security advisories for October 2026: 714 CVEs, 105 credited researchers.
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
750 lines
Showing 251–300 of 750 , page 6 of 15
CVE-2026-106410
BR2026-0000-035917
Permissions
unclaimed
Medium: Missing authorization in Permissions (reported 2026-05-29)
Credited as Google
CVE-2026-106411
BR2026-0000-035918
Parser
unclaimed
High: Use after free in Parser (reported 2026-09-25)
Credited as assisted by Claude
CVE-2026-106411
BR2026-0000-035919
Parser
unclaimed
High: Use after free in Parser (reported 2026-09-25)
Credited as Xinyang Ge (Anthropic)
CVE-2026-106412
BR2026-0000-035920
Core
unclaimed
High: Race condition in Core (reported 2026-06-06)
Credited as Google
CVE-2026-106413
BR2026-0000-035921
Browser
unclaimed
Low: Race condition in Browser (reported 2026-08-27)
Credited as Google
CVE-2026-106414
BR2026-0000-035922
Mobile
unclaimed
Medium: Improper input validation in Mobile (reported 2026-04-19)
Credited as Google
CVE-2026-106415
BR2026-0000-035923
Enterprise
unclaimed
Medium: Information leak in Enterprise (reported 2026-04-13)
Credited as Google
CVE-2026-106416
BR2026-0000-035924
Extensions
unclaimed
Medium: Code injection in Extensions (reported 2026-05-17)
Credited as Google
CVE-2026-106417
BR2026-0000-035925
Media
unclaimed
Low: Integer overflow in Media (reported 2026-07-19)
Credited as Google
CVE-2026-106418
BR2026-0000-035926
Network
unclaimed
Low: Missing authorization in Network (reported 2026-08-27)
Credited as Google
CVE-2026-106419
BR2026-0000-035927
ANGLE
unclaimed
High: Use after free in ANGLE (reported 2026-08-21)
Credited as Shaked Reiner (Palo Alto Networks)
CVE-2026-106420
BR2026-0000-035928
API
unclaimed
Medium: Incorrect calculation in API (reported 2026-01-21)
Credited as Luan Herrera (@lbherrera_)
CVE-2026-106421
BR2026-0000-035929
PDF
unclaimed
High: Use after free in PDF (reported 2026-09-30)
Credited as assisted by Claude
CVE-2026-106421
BR2026-0000-035930
PDF
unclaimed
High: Use after free in PDF (reported 2026-09-30)
Credited as Xinyang Ge (Anthropic)
CVE-2026-106422
BR2026-0000-035931
API
unclaimed
Low: Incorrect authorization in API (reported 2026-06-03)
Credited as Google
CVE-2026-106423
BR2026-0000-035932
Media
unclaimed
High: Use after free in Media (reported 2026-09-26)
Credited as assisted by Claude
CVE-2026-106423
BR2026-0000-035933
Media
unclaimed
High: Use after free in Media (reported 2026-09-26)
Credited as Xinyang Ge (Anthropic)
CVE-2026-106424
BR2026-0000-035934
Audio
unclaimed
Medium: Information leak in Audio (reported 2026-05-15)
Credited as Google
CVE-2026-106425
BR2026-0000-035935
BrowserTag
unclaimed
Medium: Missing authorization in BrowserTag (reported 2026-04-12)
Credited as Google
CVE-2026-106426
BR2026-0000-035936
Fonts
unclaimed
High: Race condition in Fonts (reported 2026-08-17)
Credited as Emond Papegaaij
CVE-2026-106427
BR2026-0000-035937
Mobile
unclaimed
Low: Confused deputy in Mobile (reported 2026-05-15)
Credited as Google
CVE-2026-110136
BR2026-0000-035938
PDF
unclaimed
Critical: Use after free in PDF (reported 2026-10-02)
Credited as Xinyang Ge
CVE-2026-110137
BR2026-0000-035939
WebRTC
unclaimed
High: Use after free in WebRTC (reported 2026-09-15)
Credited as Google
CVE-2026-110138
BR2026-0000-035940
ShapeDetection
unclaimed
High: Use after free in ShapeDetection (reported 2026-10-02)
Credited as Google
CVE-2026-110139
BR2026-0000-035941
Media
unclaimed
High: Use after free in Media (reported 2026-09-30)
Credited as weihengqiuu
CVE-2026-110140
BR2026-0000-035942
V8
unclaimed
High: Type confusion in V8 (reported 2026-09-15)
Credited as Google
CVE-2026-110141
BR2026-0000-035943
Media
unclaimed
High: Observable discrepancy in Media (reported 2026-10-02)
Credited as Google
CVE-2026-110142
BR2026-0000-035944
FileSystem
unclaimed
Medium: Use after free in FileSystem (reported 2026-08-27)
Credited as Andrew Boni
CVE-2026-110143
BR2026-0000-035945
ThirdParty lmza_sdk
unclaimed
High: Use of uninitialized variable in ThirdParty lmza_sdk (reported 2026-08-29)
Credited as Google
CVE-2026-110144
BR2026-0000-035946
Mojo
unclaimed
High: Incorrect authorization in Mojo (reported 2026-09-23)
Credited as Souma Ohsawa
CVE-2026-110145
BR2026-0000-035947
Passwords
unclaimed
High: Use after free in Passwords (reported 2026-09-16)
Credited as Xinyang Ge
CVE-2026-110146
BR2026-0000-035948
Passwords
unclaimed
High: Information leak in Passwords (reported 2026-09-14)
Credited as Hoyong Jin
CVE-2026-110147
BR2026-0000-035949
PDF
unclaimed
High: Use after free in PDF (reported 2026-10-05)
Credited as Xinyang Ge
CVE-2026-110148
BR2026-0000-035950
SVG
unclaimed
Critical: Use after free in SVG (reported 2026-10-05)
Credited as Xinyang Ge
CVE-2026-110149
BR2026-0000-035951
Browser
unclaimed
Critical: Use after free in Browser (reported 2026-10-01)
Credited as Google
CVE-2026-110150
BR2026-0000-035952
Installer
unclaimed
High: Privilege elevation in Installer (reported 2026-09-14)
Credited as M. Fauzan Wijaya (Gh05t666nero)
CVE-2026-110151
BR2026-0000-035953
Media
unclaimed
Critical: Use after free in Media (reported 2026-10-06)
Credited as Xinyang Ge
CVE-2026-110152
BR2026-0000-035954
ANGLE
unclaimed
Critical: Buffer overflow in ANGLE (reported 2026-09-30)
Credited as Zhenpeng (Leo) Lin at depthfirst
CVE-2026-110153
BR2026-0000-035955
Media
unclaimed
High: Use after free in Media (reported 2026-09-24)
Credited as xinyang
CVE-2026-110154
BR2026-0000-035956
Canvas
unclaimed
High: Use after free in Canvas (reported 2026-10-05)
Credited as Xinyang Ge
CVE-2026-110155
BR2026-0000-035957
PDFium
unclaimed
High: Buffer overflow in PDFium (reported 2026-10-05)
Credited as Xinyang Ge
CVE-2026-110156
BR2026-0000-035958
Extensions
unclaimed
High: Incorrect reference resolution in Extensions (reported 2026-09-15)
Credited as Google
CVE-2026-110157
BR2026-0000-035959
SVG
unclaimed
High: Use after free in SVG (reported 2026-10-05)
Credited as Xinyang Ge
CVE-2026-110158
BR2026-0000-035960
Passwords
unclaimed
High: Use after free in Passwords (reported 2026-09-16)
Credited as Xinyang Ge
CVE-2026-110159
BR2026-0000-035961
Updater
unclaimed
High: Incorrect authorization in Updater (reported 2026-09-21)
Credited as Aria Akhavan - Haikhavan Security
CVE-2026-110160
BR2026-0000-035962
ReadingMode
unclaimed
High: Missing authorization in ReadingMode (reported 2026-08-25)
Credited as Google
CVE-2026-110161
BR2026-0000-035963
Network
unclaimed
Critical: Use after free in Network (reported 2026-10-02)
Credited as Google
CVE-2026-110162
BR2026-0000-035964
Desktop
unclaimed
High: Use after free in Desktop (reported 2026-07-29)
Credited as Findingz
CVE-2026-110163
BR2026-0000-035965
DOM
unclaimed
High: Use after free in DOM (reported 2026-10-02)
Credited as Xinyang Ge
CVE-2026-110164
BR2026-0000-035966
DOM
unclaimed
High: Use after free in DOM (reported 2026-10-02)
Credited as Xinyang Ge