BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Google Chrome

Google Chrome Security Releases - September 2026

google-chrome-2026-09 Sep 1, 2026 Source: Vendor

Google Chrome security advisories for September 2026: 176 CVEs, 54 credited researchers.

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

190 lines
All 190 CVEs 190 Additional recognition 0 Unclaimed only
Showing 151–190 of 190 matching , page 4 of 4 , clear filters
CVE-2026-95344 BR2026-0000-035627 DevTools unclaimed
Medium: Race condition in DevTools (reported 2026-08-18)
Credited as @bean5oup
CVE-2026-95345 BR2026-0000-035628 Actor unclaimed
Medium: Use after free in Actor (reported 2026-05-25)
Credited as Google
CVE-2026-95346 BR2026-0000-035629 Chromoting unclaimed
Medium: UI misrepresentation in Chromoting (reported 2026-05-17)
Credited as Google
CVE-2026-95347 BR2026-0000-035630 Updater unclaimed
Medium: Use after free in Updater (reported 2026-08-21)
Credited as a45hif
CVE-2026-95348 BR2026-0000-035631 Bluetooth unclaimed
High: Use after free in Bluetooth (reported 2026-08-29)
Credited as Google
CVE-2026-95349 BR2026-0000-035632 WebGL unclaimed
Critical: Buffer overflow in WebGL (reported 2026-08-27)
Credited as Google
CVE-2026-95350 BR2026-0000-035633 ANGLE unclaimed
Critical: Buffer overflow in ANGLE (reported 2026-08-24)
Credited as Pan Zhenpeng of STAR Labs SG Pte. LTd.
CVE-2026-95350 BR2026-0000-035634 ANGLE unclaimed
Critical: Buffer overflow in ANGLE (reported 2026-08-24)
Credited as Muhammad Alifa Ramdhan
CVE-2026-95350 BR2026-0000-035635 ANGLE unclaimed
Critical: Buffer overflow in ANGLE (reported 2026-08-24)
Credited as Billy Jheng Bing Jhong
CVE-2026-95351 BR2026-0000-035636 Views unclaimed
High: Use after free in Views (reported 2026-09-16)
Credited as Xinyang Ge
CVE-2026-95352 BR2026-0000-035637 DevTools unclaimed
Low: Incorrect authorization in DevTools (reported 2026-05-16)
Credited as Google
CVE-2026-95353 BR2026-0000-035638 Bindings unclaimed
Medium: Use after free in Bindings (reported 2026-06-10)
Credited as Google
CVE-2026-95354 BR2026-0000-035639 Verifier unclaimed
Medium: Use after free in Verifier (reported 2026-06-16)
Credited as Google
CVE-2026-95355 BR2026-0000-035640 Navigation unclaimed
High: Incorrect authorization in Navigation (reported 2026-05-01)
Credited as Google
CVE-2026-95356 BR2026-0000-035641 WindowDialog unclaimed
Critical: Use after free in WindowDialog (reported 2026-09-12)
Credited as Xinyang Ge
CVE-2026-95357 BR2026-0000-035642 GPU unclaimed
Critical: Out of bounds write in GPU (reported 2026-07-01)
Credited as Anymous
CVE-2026-95358 BR2026-0000-035643 Mobile unclaimed
Medium: Incorrect authorization in Mobile (reported 2026-08-26)
Credited as Google
CVE-2026-95359 BR2026-0000-035644 GPU unclaimed
Medium: Uninitialized resource in GPU (reported 2026-05-14)
Credited as Google
CVE-2026-95360 BR2026-0000-035645 Editing unclaimed
Medium: Race condition in Editing (reported 2026-05-28)
Credited as Google
CVE-2026-95361 BR2026-0000-035646 DevTools unclaimed
Low: Confused deputy in DevTools (reported 2026-07-09)
Credited as Google
CVE-2026-95362 BR2026-0000-035647 DevTools unclaimed
Medium: Cross-site request forgery in DevTools (reported 2026-05-10)
Credited as Google
CVE-2026-95363 BR2026-0000-035648 FileSystem unclaimed
Medium: UI misrepresentation in FileSystem (reported 2026-06-10)
Credited as Google
CVE-2026-95364 BR2026-0000-035649 Passwords unclaimed
Low: Improper input validation in Passwords (reported 2026-08-27)
Credited as Google
CVE-2026-95365 BR2026-0000-035650 IndexedDB unclaimed
High: Type confusion in IndexedDB (reported 2026-09-08)
Credited as HoneyBee
CVE-2026-95366 BR2026-0000-035651 Core unclaimed
Medium: Use of released resource in Core (reported 2026-03-28)
Credited as Google
CVE-2026-95367 BR2026-0000-035652 DataTransfer unclaimed
Low: Information leak in DataTransfer (reported 2026-05-19)
Credited as Google
CVE-2026-95368 BR2026-0000-035653 DevTools unclaimed
Low: Incorrect authorization in DevTools (reported 2026-06-10)
Credited as Google
CVE-2026-95369 BR2026-0000-035654 XML unclaimed
Medium: Inappropriate implementation in XML (reported 2026-05-14)
Credited as Google
CVE-2026-95370 BR2026-0000-035655 NFC unclaimed
Medium: Inappropriate implementation in NFC (reported 2026-05-28)
Credited as Google
CVE-2026-95371 BR2026-0000-035656 Views unclaimed
Medium: Missing authorization in Views (reported 2026-06-05)
Credited as Google
CVE-2026-95372 BR2026-0000-035657 Chromecast unclaimed
High: Use after free in Chromecast (reported 2026-07-15)
Credited as Google
CVE-2026-95373 BR2026-0000-035658 DevTools unclaimed
High: Use after free in DevTools (reported 2026-08-26)
Credited as Google
CVE-2026-95374 BR2026-0000-035659 Network unclaimed
Medium: Incorrect authorization in Network (reported 2026-08-07)
Credited as NH DEV
CVE-2026-95375 BR2026-0000-035660 BrowserTag unclaimed
Medium: Incorrect authorization in BrowserTag (reported 2026-04-13)
Credited as Google
CVE-2026-95376 BR2026-0000-035661 DevTools unclaimed
Medium: Externally controlled reference in DevTools (reported 2026-05-14)
Credited as Google
CVE-2026-95380 BR2026-0000-035662 V8 unclaimed
Low: Type confusion in V8 (reported 2026-07-14)
Credited as Google
CVE-2026-95381 BR2026-0000-035663 Printing unclaimed
Medium: Improper input validation in Printing (reported 2026-03-30)
Credited as Google
CVE-2026-95382 BR2026-0000-035664 Auth unclaimed
Medium: Improper input validation in Auth (reported 2026-03-28)
Credited as Google
CVE-2026-95384 BR2026-0000-035665 Transactions Platform unclaimed
Medium: Race condition in Transactions Platform (reported 2026-06-22)
Credited as Google
CVE-2026-95385 BR2026-0000-035666 PlatformIntegration unclaimed
Low: Inappropriate implementation in PlatformIntegration (reported 2026-05-27)
Credited as Google