BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Google Chrome

Google Chrome Security Releases - September 2026

google-chrome-2026-09 Sep 1, 2026 Source: Vendor

Google Chrome security advisories for September 2026: 176 CVEs, 54 credited researchers.

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

190 lines
All 190 CVEs 190 Additional recognition 0 Unclaimed only
Showing 101–150 of 190 , page 3 of 4
CVE-2026-95300 BR2026-0000-035577 DevTools unclaimed
Medium: Missing authorization in DevTools (reported 2026-08-12)
Credited as Google
CVE-2026-95301 BR2026-0000-035578 Extensions unclaimed
High: Missing authorization in Extensions (reported 2026-07-29)
Credited as OGINOME Tomohito
CVE-2026-95302 BR2026-0000-035579 WebAPKs unclaimed
Medium: Incorrect authorization in WebAPKs (reported 2026-04-13)
Credited as Google
CVE-2026-95303 BR2026-0000-035580 SmartCard unclaimed
Medium: Incomplete cleanup in SmartCard (reported 2026-05-28)
Credited as Google
CVE-2026-95304 BR2026-0000-035581 V8 unclaimed
High: Out of bounds write in V8 (reported 2026-09-12)
Credited as OpenAI Codex Security (amyb)
CVE-2026-95305 BR2026-0000-035582 Chromoting unclaimed
Low: UI misrepresentation in Chromoting (reported 2026-08-28)
Credited as Google
CVE-2026-95306 BR2026-0000-035583 V8 unclaimed
High: Type confusion in V8 (reported 2026-09-12)
Credited as OpenAI Codex Security (amyb)
CVE-2026-95307 BR2026-0000-035584 ExtensionsMenu unclaimed
Low: UI misrepresentation in ExtensionsMenu (reported 2025-06-11)
Credited as Hafiizh
CVE-2026-95308 BR2026-0000-035585 Metrics unclaimed
Low: Integer overflow in Metrics (reported 2026-05-16)
Credited as Google
CVE-2026-95309 BR2026-0000-035586 Mobile unclaimed
Low: UI misrepresentation in Mobile (reported 2026-07-09)
Credited as Google
CVE-2026-95310 BR2026-0000-035587 AdFilter unclaimed
Critical: Use after free in AdFilter (reported 2026-09-16)
Credited as Xinyang Ge
CVE-2026-95311 BR2026-0000-035588 Fonts unclaimed
Medium: Free of non-heap memory in Fonts (reported 2026-08-26)
Credited as Google
CVE-2026-95312 BR2026-0000-035589 Passwords unclaimed
Medium: Information leak in Passwords (reported 2026-08-17)
Credited as Google
CVE-2026-95313 BR2026-0000-035590 Fullscreen unclaimed
Critical: Use after free in Fullscreen (reported 2026-08-26)
Credited as WinD39 - Huynh Dinh Vu
CVE-2026-95314 BR2026-0000-035591 HID unclaimed
Medium: Incorrect authorization in HID (reported 2026-05-29)
Credited as Google
CVE-2026-95315 BR2026-0000-035592 Aura unclaimed
High: Use after free in Aura (reported 2026-05-29)
Credited as Google
CVE-2026-95316 BR2026-0000-035593 Performance unclaimed
Low: Unchecked return value in Performance (reported 2026-08-24)
Credited as Google
CVE-2026-95317 BR2026-0000-035594 MediaCapture unclaimed
Medium: Incorrect authorization in MediaCapture (reported 2026-05-19)
Credited as Google
CVE-2026-95318 BR2026-0000-035595 Video unclaimed
High: Buffer overflow in Video (reported 2026-09-03)
Credited as alex.laboirie
CVE-2026-95319 BR2026-0000-035596 Printing unclaimed
Low: Use after free in Printing (reported 2026-06-14)
Credited as Google
CVE-2026-95320 BR2026-0000-035597 Navigation unclaimed
Medium: Missing authorization in Navigation (reported 2026-05-17)
Credited as Google
CVE-2026-95321 BR2026-0000-035598 Payments unclaimed
Medium: UI misrepresentation in Payments (reported 2026-08-13)
Credited as jodyritonga
CVE-2026-95322 BR2026-0000-035599 GPU unclaimed
Critical: Out of bounds write in GPU (reported 2026-09-03)
Credited as David Sievers (@loknop)
CVE-2026-95323 BR2026-0000-035600 Chromium unclaimed
Medium: UI misrepresentation in Chromium (reported 2026-08-14)
Credited as Wihdatu Nuuro Ahmadi
CVE-2026-95324 BR2026-0000-035601 GPU unclaimed
High: Uninitialized resource in GPU (reported 2026-07-22)
Credited as Google
CVE-2026-95325 BR2026-0000-035602 ANGLE unclaimed
Medium: Use after free in ANGLE (reported 2026-07-19)
Credited as Google
CVE-2026-95326 BR2026-0000-035603 Bluetooth unclaimed
Low: Incomplete cleanup in Bluetooth (reported 2026-07-09)
Credited as Google
CVE-2026-95327 BR2026-0000-035604 Networking unclaimed
Low: Information leak in Networking (reported 2026-04-13)
Credited as Google
CVE-2026-95328 BR2026-0000-035605 Mobile unclaimed
Low: Confused deputy in Mobile (reported 2026-08-26)
Credited as Google
CVE-2026-95329 BR2026-0000-035606 WebGL unclaimed
Critical: Out of bounds write in WebGL (reported 2026-09-09)
Credited as Google
CVE-2026-95330 BR2026-0000-035607 Downloads unclaimed
Medium: Improper state validation in Downloads (reported 2026-05-27)
Credited as Google
CVE-2026-95331 BR2026-0000-035608 ANGLE unclaimed
Medium: Out of bounds write in ANGLE (reported 2026-04-06)
Credited as Google
CVE-2026-95332 BR2026-0000-035609 Tint unclaimed
Medium: Use of uninitialized variable in Tint (reported 2026-08-14)
Credited as Google
CVE-2026-95333 BR2026-0000-035610 Metrics unclaimed
Medium: Use after free in Metrics (reported 2026-09-10)
Credited as sean geofrey
CVE-2026-95334 BR2026-0000-035611 WebProtect unclaimed
Low: Incorrect reference resolution in WebProtect (reported 2026-05-15)
Credited as Google
CVE-2026-95335 BR2026-0000-035612 HID unclaimed
High: Use after free in HID (reported 2026-09-01)
Credited as WinD39 - Huynh Dinh Vu
CVE-2026-95336 BR2026-0000-035613 Transactions Platform unclaimed
Medium: Information leak in Transactions Platform (reported 2026-07-09)
Credited as Google
CVE-2026-95337 BR2026-0000-035614 Messages unclaimed
Medium: UI misrepresentation in Messages (reported 2026-05-17)
Credited as Google
CVE-2026-95338 BR2026-0000-035615 PDFium unclaimed
High: Use after free in PDFium (reported 2026-09-03)
Credited as Siung kim (@ksw9722)
CVE-2026-95338 BR2026-0000-035616 PDFium unclaimed
High: Use after free in PDFium (reported 2026-09-03)
Credited as SeungMyung Lee (@sm1ee)
CVE-2026-95339 BR2026-0000-035617 ServiceWorker unclaimed
Critical: Use after free in ServiceWorker (reported 2026-08-18)
Credited as Andrew Boni
CVE-2026-95340 BR2026-0000-035618 PictureInPicture unclaimed
Low: Incorrect authorization in PictureInPicture (reported 2026-08-27)
Credited as Google
CVE-2026-95341 BR2026-0000-035619 Desktop unclaimed
Medium: Improper input validation in Desktop (reported 2026-06-14)
Credited as Google
CVE-2026-95342 BR2026-0000-035620 V8 unclaimed
Low: Missing authorization in V8 (reported 2026-08-16)
Credited as and Wenbo Guo
CVE-2026-95342 BR2026-0000-035621 V8 unclaimed
Low: Missing authorization in V8 (reported 2026-08-16)
Credited as Saastha Vasan
CVE-2026-95342 BR2026-0000-035622 V8 unclaimed
Low: Missing authorization in V8 (reported 2026-08-16)
Credited as Junmin Zhu
CVE-2026-95342 BR2026-0000-035623 V8 unclaimed
Low: Missing authorization in V8 (reported 2026-08-16)
Credited as Ziyue Pan
CVE-2026-95342 BR2026-0000-035624 V8 unclaimed
Low: Missing authorization in V8 (reported 2026-08-16)
Credited as Zhun Wang
CVE-2026-95342 BR2026-0000-035625 V8 unclaimed
Low: Missing authorization in V8 (reported 2026-08-16)
Credited as Hongwei Li
CVE-2026-95343 BR2026-0000-035626 WebAudio unclaimed
High: Use after free in WebAudio (reported 2026-09-11)
Credited as HoneyBee