BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Google Chrome

Stable Channel Update for Desktop

881706046432431947 Nov 3, 2026 Source: Vendor

Imported by the Chrome release catcher from https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html. 213 security entries listed. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop.html
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

230 lines
All 230 CVEs 230 Additional recognition 0 Unclaimed only
Showing 201–230 of 230 matching , page 5 of 5 , clear filters
CVE-2026-121121 BR2026-0000-042042 PageInfo unclaimed
Low: UI misrepresentation in PageInfo (reported 2026-09-02)
Credited as Google
CVE-2026-121130 BR2026-0000-042043 Forms unclaimed
Low: Observable discrepancy in Forms (reported 2026-09-02)
Credited as Google
CVE-2026-121251 BR2026-0000-042044 V8 unclaimed
Low: Missing authorization in V8 (reported 2026-09-15)
Credited as wang1r&&lhfff
CVE-2026-121085 BR2026-0000-042045 WebUI unclaimed
Low: Incorrect authorization in WebUI (reported 2026-09-16)
Credited as Google
CVE-2026-121159 BR2026-0000-042046 History unclaimed
Low: Incorrect authorization in History (reported 2026-09-17)
Credited as Google
CVE-2026-121204 BR2026-0000-042047 DevTools unclaimed
Low: Incomplete cleanup in DevTools (reported 2026-09-17)
Credited as Google
CVE-2026-121205 BR2026-0000-042048 CORS unclaimed
Low: Incorrect authorization in CORS (reported 2026-09-17)
Credited as Google
CVE-2026-121050 BR2026-0000-042049 Mobile unclaimed
Low: Race condition in Mobile (reported 2026-09-17)
Credited as Google
CVE-2026-121081 BR2026-0000-042050 Passwords unclaimed
Low: UI misrepresentation in Passwords (reported 2026-09-17)
Credited as Google
CVE-2026-121240 BR2026-0000-042051 Variations unclaimed
Low: Improper input validation in Variations (reported 2026-09-18)
Credited as Google
CVE-2026-121198 BR2026-0000-042052 WebUI unclaimed
Low: Confused deputy in WebUI (reported 2026-09-18)
Credited as Google
CVE-2026-121225 BR2026-0000-042053 Permissions unclaimed
Low: Incorrect authorization in Permissions (reported 2026-09-18)
Credited as Google
CVE-2026-121162 BR2026-0000-042054 Notifications unclaimed
Low: UI misrepresentation in Notifications (reported 2026-09-18)
Credited as Google
CVE-2026-121045 BR2026-0000-042055 Browser unclaimed
Low: UI misrepresentation in Browser (reported 2026-09-19)
Credited as ilman.dani11
CVE-2026-121029 BR2026-0000-042056 ORB unclaimed
Low: Incorrect authorization in ORB (reported 2026-09-20)
Credited as uky
CVE-2026-121054 BR2026-0000-042057 XML unclaimed
Low: Improper state validation in XML (reported 2026-09-23)
Credited as Arni Hardarson (Neonix Security)
CVE-2026-121175 BR2026-0000-042058 ORB unclaimed
Low: Improper resource exposure in ORB (reported 2026-09-24)
Credited as Souma Ohsawa
CVE-2026-121092 BR2026-0000-042059 SVG unclaimed
Low: Uncontrolled recursion in SVG (reported 2026-09-24)
Credited as OpenAI Codex Security (amyb)
CVE-2026-121073 BR2026-0000-042060 Network unclaimed
Low: Use after free in Network (reported 2026-09-24)
Credited as Xinyang Ge (Anthropic)
CVE-2026-121073 BR2026-0000-042061 Network unclaimed
Low: Use after free in Network (reported 2026-09-24)
Credited as assisted by Claude
CVE-2026-121230 BR2026-0000-042062 ANGLE unclaimed
Low: Race condition in ANGLE (reported 2026-09-27)
Credited as Hafiizh
CVE-2026-121093 BR2026-0000-042063 Animation unclaimed
Low: Out of bounds read in Animation (reported 2026-09-29)
Credited as C0rk1
CVE-2026-121041 BR2026-0000-042064 Input unclaimed
Low: Missing authorization in Input (reported 2026-09-30)
Credited as Siyang Wu (LeoWSY-hashblue)
CVE-2026-121232 BR2026-0000-042065 Core unclaimed
Low: Incorrect authorization in Core (reported 2026-09-30)
Credited as Anton Helin
CVE-2026-121142 BR2026-0000-042066 Network unclaimed
Low: Incorrect authorization in Network (reported 2026-09-30)
Credited as Yalguun Tumenkhuu ( fg0x0 )
CVE-2026-121069 BR2026-0000-042067 Track unclaimed
Low: Use after free in Track (reported 2026-10-01)
Credited as Hijun Kim
CVE-2026-121169 BR2026-0000-042068 DevTools unclaimed
Low: Missing authorization in DevTools (reported 2026-10-05)
Credited as Siyang Wu (LeoWSY-hashblue)
CVE-2026-121064 BR2026-0000-042069 Performance unclaimed
Low: Improper input validation in Performance (reported 2026-10-06)
Credited as Google
CVE-2026-121195 BR2026-0000-042070 TrustedTypes unclaimed
Low: Incorrect authorization in TrustedTypes (reported 2026-10-09)
Credited as Google
CVE-2026-121141 BR2026-0000-042071 Editing unclaimed
Low: Improper input validation in Editing (reported 2026-10-26)
Credited as Google