BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Google Chrome

Stable Channel Update for Desktop

881706046432431947 Nov 3, 2026 Source: Vendor

Imported by the Chrome release catcher from https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html. 213 security entries listed. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

230 lines
All 230 CVEs 230 Additional recognition 0 Unclaimed only
Showing 101–150 of 230 , page 3 of 5
CVE-2026-121105 BR2026-0000-041942 Network unclaimed
Medium: Information leak in Network (reported 2026-10-07)
Credited as a45hif
CVE-2026-121237 BR2026-0000-041943 FileSystem unclaimed
Medium: Improper state validation in FileSystem (reported 2026-04-16)
Credited as Dwij Mehta
CVE-2026-121102 BR2026-0000-041944 BackgroundFetch unclaimed
Medium: Missing authorization in BackgroundFetch (reported 2022-04-27)
Credited as Maurice Dauer
CVE-2026-121120 BR2026-0000-041945 Prerender unclaimed
Medium: Improper input validation in Prerender (reported 2026-03-12)
Credited as Tianyi Hu
CVE-2026-121161 BR2026-0000-041946 BackgroundFetch unclaimed
Medium: Information leak in BackgroundFetch (reported 2026-03-24)
Credited as Google
CVE-2026-121062 BR2026-0000-041947 API unclaimed
Medium: Incorrect authorization in API (reported 2026-03-25)
Credited as Google
CVE-2026-121031 BR2026-0000-041948 PDF unclaimed
Medium: Missing authorization in PDF (reported 2026-03-30)
Credited as Google
CVE-2026-121063 BR2026-0000-041949 CacheStorage unclaimed
Medium: Incorrect authorization in CacheStorage (reported 2026-04-03)
Credited as Google
CVE-2026-121108 BR2026-0000-041950 BackgroundFetch unclaimed
Medium: Confused deputy in BackgroundFetch (reported 2026-04-07)
Credited as Google
CVE-2026-121199 BR2026-0000-041951 Chromoting unclaimed
Medium: Missing authorization in Chromoting (reported 2026-04-13)
Credited as Google
CVE-2026-121099 BR2026-0000-041952 PrivateTokens unclaimed
Medium: Information leak in PrivateTokens (reported 2026-04-14)
Credited as Google
CVE-2026-121196 BR2026-0000-041953 Mobile unclaimed
Medium: Privilege elevation in Mobile (reported 2026-04-22)
Credited as Google
CVE-2026-121066 BR2026-0000-041954 Extensions unclaimed
Medium: Incorrect authorization in Extensions (reported 2026-04-28)
Credited as Google
CVE-2026-121256 BR2026-0000-041955 GPU unclaimed
Medium: Use of released resource in GPU (reported 2026-05-10)
Credited as Google
CVE-2026-121115 BR2026-0000-041956 Shopping unclaimed
Medium: Improper input validation in Shopping (reported 2026-05-15)
Credited as Google
CVE-2026-121234 BR2026-0000-041957 Contacts unclaimed
Medium: Privilege elevation in Contacts (reported 2026-05-16)
Credited as Google
CVE-2026-121177 BR2026-0000-041958 PageInfo unclaimed
Medium: UI misrepresentation in PageInfo (reported 2026-05-17)
Credited as Google
CVE-2026-121193 BR2026-0000-041959 Extensions unclaimed
Medium: Incorrect authorization in Extensions (reported 2026-05-19)
Credited as Google
CVE-2026-121248 BR2026-0000-041960 API unclaimed
Medium: Incorrect authorization in API (reported 2026-05-28)
Credited as Google
CVE-2026-121106 BR2026-0000-041961 Omnibox unclaimed
Medium: Information leak in Omnibox (reported 2026-05-28)
Credited as Google
CVE-2026-121200 BR2026-0000-041962 DevTools unclaimed
Medium: Incorrect reference resolution in DevTools (reported 2026-06-27)
Credited as Google
CVE-2026-121039 BR2026-0000-041963 Proxy Auth unclaimed
Medium: Incorrect authorization in Proxy Auth (reported 2026-07-10)
Credited as Google
CVE-2026-121122 BR2026-0000-041964 Prompts unclaimed
Medium: UI misrepresentation in Prompts (reported 2026-07-18)
Credited as Google
CVE-2026-121219 BR2026-0000-041965 GPU unclaimed
Medium: Integer overflow in GPU (reported 2026-07-19)
Credited as Google
CVE-2026-121255 BR2026-0000-041966 Autofill AI unclaimed
Medium: Incorrect authorization in Autofill AI (reported 2026-07-28)
Credited as Google
CVE-2026-121231 BR2026-0000-041967 DevTools unclaimed
Medium: Incorrect authorization in DevTools (reported 2026-08-19)
Credited as Google
CVE-2026-121183 BR2026-0000-041968 Extensions unclaimed
Medium: Incorrect authorization in Extensions (reported 2026-08-21)
Credited as a45hif
CVE-2026-121072 BR2026-0000-041969 Skia unclaimed
Medium: Uninitialized resource in Skia (reported 2026-08-26)
Credited as Google
CVE-2026-121103 BR2026-0000-041970 Extensions unclaimed
Medium: Incorrect authorization in Extensions (reported 2026-08-26)
Credited as Google
CVE-2026-121136 BR2026-0000-041971 DevTools unclaimed
Medium: Missing authorization in DevTools (reported 2026-08-26)
Credited as Google
CVE-2026-121040 BR2026-0000-041972 Core unclaimed
Medium: Incorrect authorization in Core (reported 2026-08-26)
Credited as Google
CVE-2026-121030 BR2026-0000-041973 DevTools unclaimed
Medium: Incorrect authorization in DevTools (reported 2026-08-26)
Credited as Google
CVE-2026-121075 BR2026-0000-041974 DevTools unclaimed
Medium: Missing authorization in DevTools (reported 2026-08-26)
Credited as Google
CVE-2026-121220 BR2026-0000-041975 Core unclaimed
Medium: Incorrect authorization in Core (reported 2026-08-26)
Credited as Google
CVE-2026-121170 BR2026-0000-041976 WebCodecs unclaimed
Medium: Improper resource control in WebCodecs (reported 2026-08-27)
Credited as @bean5oup
CVE-2026-121059 BR2026-0000-041977 Core unclaimed
Medium: Information leak in Core (reported 2026-08-27)
Credited as OGINOME Tomohito
CVE-2026-121163 BR2026-0000-041978 Browser unclaimed
Medium: Improper input validation in Browser (reported 2026-09-02)
Credited as Google
CVE-2026-121088 BR2026-0000-041979 PerformanceAPIs unclaimed
Medium: Missing authorization in PerformanceAPIs (reported 2026-09-15)
Credited as OGINOME Tomohito
CVE-2026-121033 BR2026-0000-041980 GPU unclaimed
Medium: Uninitialized resource in GPU (reported 2026-09-16)
Credited as Google
CVE-2026-121254 BR2026-0000-041981 Select unclaimed
Medium: Information leak in Select (reported 2026-09-16)
Credited as Google
CVE-2026-121065 BR2026-0000-041982 DevTools unclaimed
Medium: Incorrect authorization in DevTools (reported 2026-09-16)
Credited as Google
CVE-2026-121171 BR2026-0000-041983 DevTools unclaimed
Medium: Confused deputy in DevTools (reported 2026-09-16)
Credited as Google
CVE-2026-121116 BR2026-0000-041984 WebView unclaimed
Medium: Missing authorization in WebView (reported 2026-09-17)
Credited as Google
CVE-2026-121239 BR2026-0000-041985 Core unclaimed
Medium: Information leak in Core (reported 2026-09-18)
Credited as Google
CVE-2026-121187 BR2026-0000-041986 Paint unclaimed
Medium: Observable discrepancy in Paint (reported 2026-09-18)
Credited as Google
CVE-2026-121132 BR2026-0000-041987 V8 unclaimed
Medium: Information leak in V8 (reported 2026-09-21)
Credited as wang1r
CVE-2026-121132 BR2026-0000-041988 V8 unclaimed
Medium: Information leak in V8 (reported 2026-09-21)
Credited as lhfff
CVE-2026-121067 BR2026-0000-041989 PermissionElement unclaimed
Medium: UI misrepresentation in PermissionElement (reported 2026-09-23)
Credited as Google
CVE-2026-121096 BR2026-0000-041990 V8 unclaimed
Medium: Incomplete cleanup in V8 (reported 2026-09-24)
Credited as Google
CVE-2026-121184 BR2026-0000-041991 Media unclaimed
Medium: Out of bounds read in Media (reported 2026-09-24)
Credited as xinyang