Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Google Chrome

Google Chrome Security Releases - October 2026

google-chrome-2026-10 Oct 1, 2026 Source: Vendor

Google Chrome security advisories for October 2026: 714 CVEs, 105 credited researchers.

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

750 lines
Showing 301–350 of 750 , page 7 of 15
CVE-2026-110165 BR2026-0000-035967 Core unclaimed
Critical: Use after free in Core (reported 2026-10-02)
Credited as Google
CVE-2026-110166 BR2026-0000-035968 Animation unclaimed
High: Buffer overflow in Animation (reported 2026-09-26)
Credited as Syn4pse (@ret2happy)
CVE-2026-110167 BR2026-0000-035969 Media unclaimed
High: Use after free in Media (reported 2026-10-06)
Credited as Xinyang Ge
CVE-2026-110168 BR2026-0000-035970 V8 unclaimed
High: Use after free in V8 (reported 2026-10-01)
Credited as Google
CVE-2026-110169 BR2026-0000-035971 V8 unclaimed
High: Use after free in V8 (reported 2026-09-28)
Credited as assisted by Claude
CVE-2026-110169 BR2026-0000-035972 V8 unclaimed
High: Use after free in V8 (reported 2026-09-28)
Credited as Xinyang Ge (Anthropic)
CVE-2026-110170 BR2026-0000-035973 Bindings unclaimed
High: Use after free in Bindings (reported 2026-03-25)
Credited as Google
CVE-2026-110171 BR2026-0000-035974 Media unclaimed
High: Use after free in Media (reported 2026-10-06)
Credited as Xinyang Ge
CVE-2026-110172 BR2026-0000-035975 Media unclaimed
High: Use after free in Media (reported 2026-10-02)
Credited as Xinyang Ge
CVE-2026-110913 BR2026-0000-035976 DOM unclaimed
High: Memory corruption in DOM (reported 2026-09-29)
Credited as assisted by Claude
CVE-2026-110913 BR2026-0000-035977 DOM unclaimed
High: Memory corruption in DOM (reported 2026-09-29)
Credited as Xinyang Ge (Anthropic)
CVE-2026-110914 BR2026-0000-035978 Workers unclaimed
Medium: Memory corruption in Workers (reported 2026-09-18)
Credited as Google
CVE-2026-110915 BR2026-0000-035979 Compositing unclaimed
Medium: Use after free in Compositing (reported 2026-09-02)
Credited as Google
CVE-2026-110916 BR2026-0000-035980 Desktop unclaimed
Medium: Improper input validation in Desktop (reported 2026-04-12)
Credited as Google
CVE-2026-110917 BR2026-0000-035981 SVG unclaimed
High: Memory corruption in SVG (reported 2026-10-03)
Credited as C0rk1
CVE-2026-110918 BR2026-0000-035982 Core unclaimed
High: Memory corruption in Core (reported 2026-10-03)
Credited as Google
CVE-2026-110919 BR2026-0000-035983 V8 unclaimed
High: Use after free in V8 (reported 2026-10-02)
Credited as Xinyang Ge
CVE-2026-110920 BR2026-0000-035984 V8 unclaimed
High: Memory corruption in V8 (reported 2026-10-05)
Credited as Xinyang Ge
CVE-2026-110921 BR2026-0000-035985 V8 unclaimed
High: Use after free in V8 (reported 2026-10-05)
Credited as Xinyang Ge
CVE-2026-110922 BR2026-0000-035986 Prerender unclaimed
Critical: Use after free in Prerender (reported 2026-10-02)
Credited as Xinyang Ge
CVE-2026-112992 BR2026-0000-035987 Canvas unclaimed
Medium: Memory corruption in Canvas (reported 2026-05-18)
Credited as Google
CVE-2026-112993 BR2026-0000-035988 Input unclaimed
High: Use after free in Input (reported 2026-10-12)
Credited as Arni Hardarson (Neonix Security)
CVE-2026-112994 BR2026-0000-035989 Browser unclaimed
Low: Memory corruption in Browser (reported 2026-09-17)
Credited as Google
CVE-2026-112995 BR2026-0000-035990 Animation unclaimed
Medium: Use after free in Animation (reported 2026-05-18)
Credited as Google
CVE-2026-112996 BR2026-0000-035991 Loader unclaimed
Low: Memory corruption in Loader (reported 2026-09-17)
Credited as Google
CVE-2026-112997 BR2026-0000-035992 CSS unclaimed
Medium: Memory corruption in CSS (reported 2026-09-12)
Credited as caveeroo
CVE-2026-112998 BR2026-0000-035993 Views unclaimed
Low: Memory corruption in Views (reported 2026-08-26)
Credited as Google
CVE-2026-112999 BR2026-0000-035994 API unclaimed
Medium: Use after free in API (reported 2026-05-15)
Credited as Google
CVE-2026-113000 BR2026-0000-035995 Paint unclaimed
High: Memory corruption in Paint (reported 2026-10-12)
Credited as Arni Hardarson (Neonix Security)
CVE-2026-113001 BR2026-0000-035996 Workers unclaimed
Medium: Use after free in Workers (reported 2026-08-26)
Credited as Google
CVE-2026-113002 BR2026-0000-035997 Transactions Platform unclaimed
Medium: Memory corruption in Transactions Platform (reported 2026-09-16)
Credited as Google
CVE-2026-113003 BR2026-0000-035998 HID unclaimed
Medium: Memory corruption in HID (reported 2026-04-21)
Credited as Florian Pradines
CVE-2026-113004 BR2026-0000-035999 Sync unclaimed
Low: Memory corruption in Sync (reported 2026-05-15)
Credited as Google
CVE-2026-113005 BR2026-0000-036000 Bluetooth unclaimed
Medium: Memory corruption in Bluetooth (reported 2026-04-17)
Credited as Google
CVE-2026-113006 BR2026-0000-036001 Navigation unclaimed
Medium: Out of bounds read in Navigation (reported 2026-03-26)
Credited as Google
CVE-2026-113008 BR2026-0000-036002 Transactions Platform unclaimed
Medium: Memory corruption in Transactions Platform (reported 2026-09-18)
Credited as Google
CVE-2026-113009 BR2026-0000-036003 WindowControlsOverlay unclaimed
Medium: Use after free in WindowControlsOverlay (reported 2026-05-17)
Credited as Google
CVE-2026-113010 BR2026-0000-036004 Extensions unclaimed
Medium: Out of bounds read in Extensions (reported 2026-05-30)
Credited as Google
CVE-2026-113011 BR2026-0000-036005 CredentialProvider unclaimed
Medium: Use after free in CredentialProvider (reported 2026-04-02)
Credited as Google
CVE-2026-113012 BR2026-0000-036006 GPU unclaimed
High: Improper input validation in GPU (reported 2026-10-01)
Credited as Matthias Pleschinger (Popax21)
CVE-2026-113013 BR2026-0000-036007 DevTools unclaimed
Low: Memory corruption in DevTools (reported 2026-09-19)
Credited as Google
CVE-2026-113014 BR2026-0000-036008 PerformanceAPIs unclaimed
Medium: Use after free in PerformanceAPIs (reported 2026-04-13)
Credited as Google
CVE-2026-113015 BR2026-0000-036009 Workers unclaimed
Low: Use after free in Workers (reported 2026-03-29)
Credited as Google
CVE-2026-113016 BR2026-0000-036010 Extensions unclaimed
Medium: Improper input validation in Extensions (reported 2026-06-12)
Credited as Google
CVE-2026-113017 BR2026-0000-036011 Views unclaimed
Low: Use after free in Views (reported 2026-08-26)
Credited as Google
CVE-2026-113018 BR2026-0000-036012 IME unclaimed
Medium: Memory corruption in IME (reported 2026-03-28)
Credited as Google
CVE-2026-113019 BR2026-0000-036013 Turbolev unclaimed
High: Use after free in Turbolev (reported 2026-10-05)
Credited as Project WhatForLunch (@nebusecurity)
CVE-2026-113020 BR2026-0000-036014 Date unclaimed
High: Improper input validation in Date (reported 2026-09-24)
Credited as assisted by Claude
CVE-2026-113020 BR2026-0000-036015 Date unclaimed
High: Improper input validation in Date (reported 2026-09-24)
Credited as Xinyang Ge (Anthropic)
CVE-2026-113021 BR2026-0000-036016 WebAppInstalls unclaimed
Low: Use after free in WebAppInstalls (reported 2026-08-26)
Credited as Google