BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Google Chrome

Stable Channel Update for Desktop

881706046432431947 Nov 3, 2026 Source: Vendor

Imported by the Chrome release catcher from https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html. 213 security entries listed. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

230 lines
All 230 CVEs 230 Additional recognition 0 Unclaimed only
Showing 151–200 of 230 , page 4 of 5
CVE-2026-121215 BR2026-0000-041992 Bluetooth unclaimed
Medium: UI misrepresentation in Bluetooth (reported 2026-09-24)
Credited as Google
CVE-2026-121212 BR2026-0000-041993 Core unclaimed
Medium: Incorrect authorization in Core (reported 2026-09-27)
Credited as Arni Hardarson (Neonix Security)
CVE-2026-121194 BR2026-0000-041994 SiteIsolation unclaimed
Medium: Missing authorization in SiteIsolation (reported 2026-09-27)
Credited as JonathanBouman
CVE-2026-121202 BR2026-0000-041995 Autofill unclaimed
Medium: Use after free in Autofill (reported 2026-09-28)
Credited as Siyang Wu (LeoWSY-hashblue)
CVE-2026-121048 BR2026-0000-041996 V8 unclaimed
Medium: Race condition in V8 (reported 2026-09-28)
Credited as OpenAI Codex Security (amyb)
CVE-2026-121070 BR2026-0000-041997 WTF unclaimed
Medium: Use after free in WTF (reported 2026-09-29)
Credited as Xinyang Ge (Anthropic)
CVE-2026-121070 BR2026-0000-041998 WTF unclaimed
Medium: Use after free in WTF (reported 2026-09-29)
Credited as assisted by Claude
CVE-2026-121257 BR2026-0000-041999 TabStrip unclaimed
Medium: Use after free in TabStrip (reported 2026-09-29)
Credited as Google
CVE-2026-121218 BR2026-0000-042000 V8 unclaimed
Medium: Type confusion in V8 (reported 2026-10-01)
Credited as Google
CVE-2026-121164 BR2026-0000-042001 Views unclaimed
Medium: Incorrect authorization in Views (reported 2026-10-03)
Credited as Google
CVE-2026-121223 BR2026-0000-042002 Media unclaimed
Medium: Observable discrepancy in Media (reported 2026-10-03)
Credited as Google
CVE-2026-121186 BR2026-0000-042003 Passwords unclaimed
Medium: UI misrepresentation in Passwords (reported 2026-10-03)
Credited as Google
CVE-2026-121176 BR2026-0000-042004 Media unclaimed
Medium: Uninitialized resource in Media (reported 2026-10-03)
Credited as Google
CVE-2026-121128 BR2026-0000-042005 Scheduling unclaimed
Medium: Use after free in Scheduling (reported 2026-10-03)
Credited as Google
CVE-2026-121216 BR2026-0000-042006 UI unclaimed
Medium: UI misrepresentation in UI (reported 2026-10-03)
Credited as Google
CVE-2026-121158 BR2026-0000-042007 Paint unclaimed
Medium: Information leak in Paint (reported 2026-10-03)
Credited as Google
CVE-2026-121110 BR2026-0000-042008 Shopping unclaimed
Medium: UI misrepresentation in Shopping (reported 2026-10-03)
Credited as Google
CVE-2026-121042 BR2026-0000-042009 Permissions unclaimed
Medium: Incorrect authorization in Permissions (reported 2026-10-03)
Credited as Google
CVE-2026-121238 BR2026-0000-042010 Source unclaimed
Medium: Use after free in Source (reported 2026-10-05)
Credited as Xinyang Ge
CVE-2026-121077 BR2026-0000-042011 Mobile unclaimed
Medium: Use after free in Mobile (reported 2026-10-05)
Credited as Google
CVE-2026-121245 BR2026-0000-042012 Autofill unclaimed
Medium: Race condition in Autofill (reported 2026-10-05)
Credited as Google
CVE-2026-121049 BR2026-0000-042013 V8 unclaimed
Medium: Out of bounds read in V8 (reported 2026-10-05)
Credited as Google
CVE-2026-121091 BR2026-0000-042014 Permissions unclaimed
Medium: Incorrect authorization in Permissions (reported 2026-10-07)
Credited as Edmilson Júnior (sierghart)
CVE-2026-121167 BR2026-0000-042015 Permissions unclaimed
Medium: Incorrect authorization in Permissions (reported 2026-10-09)
Credited as Keita Sode (SYZD Research)
CVE-2026-121135 BR2026-0000-042016 Platform unclaimed
Medium: Security issue in Platform (reported 2026-10-28)
Credited as Google
CVE-2026-121209 BR2026-0000-042017 Input unclaimed
Low: UI misrepresentation in Input (reported 2020-05-11)
Credited as Khalil Zhani
CVE-2026-121134 BR2026-0000-042018 BackgroundFetch unclaimed
Low: Information loss in BackgroundFetch (reported 2026-03-31)
Credited as Google
CVE-2026-121217 BR2026-0000-042019 Streaming unclaimed
Low: Use after free in Streaming (reported 2026-04-08)
Credited as Google
CVE-2026-121109 BR2026-0000-042020 SSL unclaimed
Low: Inadequate encryption strength in SSL (reported 2026-04-19)
Credited as Google
CVE-2026-121243 BR2026-0000-042021 Frames unclaimed
Low: Information leak in Frames (reported 2026-05-15)
Credited as Google
CVE-2026-121053 BR2026-0000-042022 Transactions Platform unclaimed
Low: UI misrepresentation in Transactions Platform (reported 2026-05-17)
Credited as Google
CVE-2026-121190 BR2026-0000-042023 Extensions unclaimed
Low: UI misrepresentation in Extensions (reported 2026-05-17)
Credited as Google
CVE-2026-121125 BR2026-0000-042024 ServiceWorker unclaimed
Low: Information leak in ServiceWorker (reported 2026-05-28)
Credited as Google
CVE-2026-121046 BR2026-0000-042025 WebAppInstalls unclaimed
Low: Incorrect authorization in WebAppInstalls (reported 2026-06-05)
Credited as Google
CVE-2026-121222 BR2026-0000-042026 Forms unclaimed
Low: Incorrect authorization in Forms (reported 2026-06-13)
Credited as Google
CVE-2026-121157 BR2026-0000-042027 Chromoting unclaimed
Low: Incorrect authorization in Chromoting (reported 2026-07-09)
Credited as Google
CVE-2026-121235 BR2026-0000-042028 Paint unclaimed
Low: Information leak in Paint (reported 2026-07-28)
Credited as Google
CVE-2026-121252 BR2026-0000-042029 Core unclaimed
Low: Incorrect authorization in Core (reported 2026-08-21)
Credited as Zabith Mohammed (@nmzabith)
CVE-2026-121168 BR2026-0000-042030 DevTools unclaimed
Low: Improper resource exposure in DevTools (reported 2026-08-26)
Credited as Google
CVE-2026-121043 BR2026-0000-042031 Payments unclaimed
Low: UI misrepresentation in Payments (reported 2026-08-27)
Credited as Google
CVE-2026-121111 BR2026-0000-042032 HID unclaimed
Low: Incorrect authorization in HID (reported 2026-08-27)
Credited as Google
CVE-2026-121138 BR2026-0000-042033 CORS unclaimed
Low: Observable discrepancy in CORS (reported 2026-08-27)
Credited as Google
CVE-2026-121055 BR2026-0000-042034 DevTools unclaimed
Low: Incomplete cleanup in DevTools (reported 2026-08-27)
Credited as Google
CVE-2026-121101 BR2026-0000-042035 DevTools unclaimed
Low: Missing authorization in DevTools (reported 2026-08-27)
Credited as Google
CVE-2026-121236 BR2026-0000-042036 Network unclaimed
Low: Improper input validation in Network (reported 2026-08-27)
Credited as Google
CVE-2026-121165 BR2026-0000-042037 Mobile unclaimed
Low: UI misrepresentation in Mobile (reported 2026-08-27)
Credited as Google
CVE-2026-121253 BR2026-0000-042038 DevTools unclaimed
Low: Missing authorization in DevTools (reported 2026-08-27)
Credited as Google
CVE-2026-121172 BR2026-0000-042039 Isolated unclaimed
Low: Incorrect authorization in Isolated (reported 2026-08-27)
Credited as Google
CVE-2026-121206 BR2026-0000-042040 Isolated unclaimed
Low: UI misrepresentation in Isolated (reported 2026-08-27)
Credited as Google
CVE-2026-121189 BR2026-0000-042041 Browser unclaimed
Low: Use after free in Browser (reported 2026-09-01)
Credited as TIENPA