Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Low)

Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)

Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-19175 Use after free in Payments

Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Chromium: CVE-2026-78964 Use after free in Sync

Chromium: CVE-2026-78904 Type confusion in ANGLE

Chromium: CVE-2026-79026 Use after free in Extensions

Chromium: CVE-2026-79235 Use after free in WebGL

Chromium: CVE-2026-78989 Out of bounds read in ANGLE

Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-installed app. (Chromium security severity: Low)

Chromium: CVE-2026-79148 Off-by-one error in DevTools

Chromium: CVE-2026-15773 Use after free in Core

Chromium: CVE-2026-79111 Improper input validation in Dawn

Chromium: CVE-2026-17656 Use after free in Ozone

Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chromium: CVE-2026-17717 Integer overflow in ANGLE

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Chromium: CVE-2026-84353 Use after free in Shared Tab Groups

Chromium: CVE-2026-18002 Insufficient validation of untrusted input in Google Lens

Chromium: CVE-2026-16416 Integer overflow in Chromecast

Chromium: CVE-2026-17710 Inappropriate implementation in MHTML

Chromium: CVE-2026-17709 Race in Downloads

Chromium: CVE-2026-17987 Insufficient validation of untrusted input in Notifications

Chromium: CVE-2026-17652 Use after free in Views

Chromium: CVE-2026-17848 Insufficient validation of untrusted input in Codecs

Chromium: CVE-2026-11696 Uninitialized Use in Video