Chromium: CVE-2026-17676 Inappropriate implementation in ANGLE

Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Chromium: CVE-2026-13788 Use after free in Fullscreen

Chromium: CVE-2026-14064 Use after free in PageInfo

Chromium: CVE-2026-17968 Uninitialized Use in WebXR

Chromium: CVE-2026-84327 Incorrect authorization in Autofill

Chromium: CVE-2026-13929 Insufficient validation of untrusted input in DevTools

Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium security severity: Medium)

Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security severity: Medium)

Chromium: CVE-2026-17737 Use after free in Bluetooth

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)

Chromium: CVE-2026-17747 Insufficient validation of untrusted input in Payments