July 9Jul 9 Author The Stable channel has been updated to 150.0.7871.114/.115 for Windows and Mac and 150.0.7871.114 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the LogSecurity Fixes and RewardsNote: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.This update includes 27 security fixes. Please see the Chrome Security Page for more information.[N/A][518006275] Critical CVE-2026-15112: Use after free in Ozone. Reported by Google on 2026-05-29[N/A][524045160] Critical CVE-2026-15129: Use after free in Views. Reported by Google on 2026-06-15[$500][527385397] High CVE-2026-15132: Uninitialized Use in V8. Reported by Pierre Langlois from Arm on 2026-06-24[$500][527406824] High CVE-2026-15133: Use after free in InterestGroups. Reported by Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern) on 2026-06-24[N/A][515443146] High CVE-2026-15108: Integer overflow in Extensions API. Reported by Google on 2026-05-21[N/A][516899138] High CVE-2026-15109: Uninitialized Use in ANGLE. Reported by Google on 2026-05-26[N/A][516948486] High CVE-2026-15110: Use after free in Extensions. Reported by Google on 2026-05-27[N/A][517508651] High CVE-2026-15111: Use after free in Views. Reported by Google on 2026-05-28[N/A][520540744] High CVE-2026-15113: Use after free in Autofill. Reported by Google on 2026-06-05[N/A][520565945] High CVE-2026-15114: Out of bounds read and write in Codecs. Reported by Google on 2026-06-06[N/A][520576676] High CVE-2026-15115: Insufficient validation of untrusted input in WebAppInstalls. Reported by Google on 2026-06-06[N/A][522092013] High CVE-2026-15116: Use after free in Actor. Reported by Google on 2026-06-10[N/A][522568496] High CVE-2026-15117: Use after free in Payments. Reported by Google on 2026-06-11[N/A][523238265] High CVE-2026-15118: Use after free in Input. Reported by Google on 2026-06-12[N/A][523505418] High CVE-2026-15119: Inappropriate implementation in GetUserMedia. Reported by Google on 2026-06-13[N/A][523609602] High CVE-2026-15120: Use after free in Core. Reported by Google on 2026-06-13[N/A][523712556] High CVE-2026-15121: Use after free in WebRTC. Reported by Google on 2026-06-14[N/A][523717219] High CVE-2026-15122: Insufficient validation of untrusted input in Codecs. Reported by Google on 2026-06-14[N/A][523729553] High CVE-2026-15123: Insufficient data validation in DOM. Reported by Google on 2026-06-14[N/A][523735038] High CVE-2026-15124: Insufficient policy enforcement in Passwords. Reported by Google on 2026-06-14[N/A][523737685] High CVE-2026-15125: Inappropriate implementation in Forms. Reported by Google on 2026-06-14[N/A][523748081] High CVE-2026-15126: Use after free in Forms. Reported by Google on 2026-06-14[N/A][523752265] High CVE-2026-15127: Inappropriate implementation in WebGL. Reported by Google on 2026-06-14[N/A][523756329] High CVE-2026-15128: Inappropriate implementation in Forms. Reported by Google on 2026-06-14[N/A][526541544] High CVE-2026-15130: Insufficient policy enforcement in Navigation. Reported by Google on 2026-06-22[$2000][503553615] Medium CVE-2026-15107: Use after free in IndexedDB. Reported by zh1x1an1221 of Ant Group Tianqiong Security Lab on 2026-04-17[N/A][526542464] Medium CVE-2026-15131: Insufficient data validation in Navigation. Reported by Google on 2026-06-22We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.Many of our security bugs are detected using AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.Interested in switching release channels? Find out how here. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.Daniel YipGoogle Chrome
1 hour ago1 hr Author ChromeOS Vulnerability Rewards Program Reported Bug Fixes:N/AOther 3rd Party Security Fixes Included:High Fixes CVE-2026-46242 (Bad epoll) - Linux Local Privilege Escalation Medium Fixes CVE-2026-49746 [PSP-528][PP-173890][KMD] Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem High Fixes Potential UAF via Profile/Service Desync in shill ConfigureService Medium Fixes CWE-862: shill Manager.NotifyDHCPEvent reachable from chronos allows DHCP spoofing Medium Fixes CVE-2026-45204 [PSP-406][PowerVR] Out of bounds memory access and kernel NULL pointer dereference in DmaTransfer when pui64Address is a pointer to device memory High Fixes Stack OOB Read to Heap OOB Write in msm_ccmd_ioctl_simple via Guest-Controlled IOCSIZE High Fixes [LPE] Patchpanel ConnectNamespace PID Gate Bypass Allows CAP_NET_ADMIN Root Netns Operations Medium Fixes CVE-2026-49745 [PSP-598][PP-174017] Unvalidated sHWPerfCtlDMABuf GPU-VA, DMA-write into FW privdata via MMU ctx 0 High Fixes Heap OOB write in ANGLE D3D11 vertex streaming via WEBGL_draw_instanced_base_vertex_base_instance High Fixes Use-After-Free in CRAS LE-Audio via group removal race condition High Fixes Cross-client microphone audio exfiltration via missing CRAS stream ownership check High Fixes Use-After-Free in CRAS server via dangling active_fm->lea pointer Critical Fixes [LPE] Arbitrary file read as root in printscanmgr via FD leak and path traversal High Fixes Privilege escalation in CRAS via DlcStateChanged signal spoofing High Fixes missing untrusted input validation in chromeos-boot-alert leads to root pango-view processing attacker file High Fixes UAF and Control Flow Hijack in CRAS A2DP Profile Switching Medium Fixes Heap OOB Read in Floss A2DP via Ring Buffer Misalignment High Fixes Heap OOB write in CRAS mSBC SCO handling via dynamic packet size adjustment High Fixes UAF in CRAS server via dangling default_rmod->odev pointer after stream disconnect High Fixes Crosvm xHCI guest-to-host OOB write via unchecked DMA buffer size High Fixes Use-After-Free in CRAS HFP SLC due to leaked timer in AT+CMER handler High Fixes CRAS OOB write via integer overflow in cras_shm_buff_for_idx High Fixes OOB write in CRAS via unsigned underflow in cras_audio_area_copy High Fixes Use-After-Free in CRAS echo_ref_requests via concurrent list mutation High Fixes Unauthenticated CRAS Loopback Hijacking allows Cross-Client Audio Capture High Fixes Use-After-Free in CRAS loopback traversal due to data race High Fixes Out-of-bounds write in CRAS server via unvalidated client_shm_size Critical Fixes [LPE] Arbitrary tc Command Injection in shill Throttler via TetheringConfig High Fixes Potential Use-After-Free in vm_concierge ArcVm via base::Unretained in async D-Bus callback Medium Fixes TOCTOU in permission_broker allows chronos to open arbitrary device nodes Medium Fixes [PSP-490][PowerVR] Read UAF in GrowMipLevelArray() due to incorrect texture array iteration during image copy Medium Fixes [PSP-495][PowerVR] OOB read in CreateTextureMemory() due to memory mismanagement after texture format change Medium Fixes [PSP-516][PowerVR] Secondary mapping of the freelist PMR allows reading Freelist contents via GPU shader Medium Fixes [PSP-443][KMD][PowerVR] Read UAF of sync checkpoint in pvr_sync_finalise_fence() after update fence file descriptor is prematurely closed Medium Fixes CVE-2026-34196 [PSP-372][PowerVR] UAF read and/or write of arbitrary physical memory due to integer truncation in PMRDevPhysAddrOSMem Medium Fixes CVE-2026-7639 [PSP-452][KMD] Page UAF read in PMMETA_PROTECT heap memory Medium Fixes [PSP-415] [PROJ-ZERO] PowerVR: [crash-only bug] kernel crash due to faulting userspace memory access without fault handling Android Security fixes can be found hereChrome Browser Security Fixes:[$TBD] [524395469] High CVE-2026-13855 Use after free in Ozone on 2026-06-15 [$TBD] [524290062] Medium CVE-2026-14432 Use after free in V8 on 2026-06-15 [$TBD] [523884658] High CVE-2026-14431 Type Confusion in V8 Reported by [OpenAI Codex Security (amyb)] on 2026-06-14 [$TBD] [523690961] High CVE-2026-13854 Use after free in Ozone on 2026-06-13 [$TBD] [523224019] High CVE-2026-13853 Use after free in Journeys on 2026-06-12 [$TBD] [520571816] High CVE-2026-14429 Insufficient validation of untrusted input in Skia on 2026-06-05 [$TBD] [520113415] Critical CVE-2026-14427 Heap buffer overflow in Skia on 2026-06-04 [$TBD] [518247789] Low CVE-2026-14156 Policy bypass in StorageAccessAPI on 2026-05-30 [$TBD] [518246925] Low CVE-2026-14155 Insufficient policy enforcement in StorageAccessAPI on 2026-05-30 [$TBD] [518245882] Medium CVE-2026-14024 Use after free in Ozone on 2026-05-30 [$1000.0] [517981277] High CVE-2026-14426 Use after free in V8 Reported by [] on 2026-05-30 [$TBD] [518063436] Medium CVE-2026-14023 Insufficient validation of untrusted input in SanitizerAPI on 2026-05-29 [$TBD] [518007821] Critical CVE-2026-13786 Use after free in Ozone on 2026-05-29 [$TBD] [517935753] High CVE-2026-14425 Use after free in ANGLE on 2026-05-29 [$TBD] [517791835] Medium CVE-2026-14022 Insufficient validation of untrusted input in Network on 2026-05-29 [$TBD] [517741170] Low CVE-2026-14154 Inappropriate implementation in DevTools on 2026-05-28 [$TBD] [517731924] Medium CVE-2026-14021 Insufficient validation of untrusted input in StorageAccessAPI on 2026-05-28 [$TBD] [517684077] Low CVE-2026-14153 Inappropriate implementation in Glic on 2026-05-28 [$TBD] [517598518] Medium CVE-2026-14020 Insufficient validation of untrusted input in WebXR on 2026-05-28 [$TBD] [517534944] Low CVE-2026-14152 Out of bounds write in ANGLE on 2026-05-28 [$TBD] [517522769] High CVE-2026-14423 Type Confusion in Tint on 2026-05-28 [$TBD] [517455455] Medium CVE-2026-14019 Inappropriate implementation in Passwords on IP-literal pages on 2026-05-28 [$TBD] [517381770] Low CVE-2026-14151 Inappropriate implementation in AI on 2026-05-27 [$TBD] [517376041] Low CVE-2026-14150 Insufficient validation of untrusted input in Speech on 2026-05-27 [$TBD] [517345069] High CVE-2026-13848 Use after free in Forms on 2026-05-27 [$TBD] [517241992] Medium CVE-2026-14017 Inappropriate implementation in Navigation on 2026-05-27 [$TBD] [517234388] Medium CVE-2026-14016 Insufficient policy enforcement in SVG on 2026-05-27 [$TBD] [517155893] Medium CVE-2026-14014 Inappropriate implementation in Paint on 2026-05-27 [$TBD] [517114175] Medium CVE-2026-14013 Inappropriate implementation in SVG on 2026-05-27 [$TBD] [517110749] Medium CVE-2026-14012 Side-channel information leakage in CSS on 2026-05-27 [$TBD] [517033235] Medium CVE-2026-14421 Uninitialized Use in Dawn on ChromeOS-ARM due to disabled Mali multi-resolve workaround on 2026-05-27 [$TBD] [517031505] Critical CVE-2026-14420 Out of bounds read and write in Dawn on 2026-05-27 [$TBD] [516981393] Critical CVE-2026-14419 Use after free in Skia on Allocation Failure on 2026-05-26 [$TBD] [516962715] Critical CVE-2026-13784 Use after free in Views on 2026-05-26 [$TBD] [516962178] Critical CVE-2026-13783 Use after free in Views on 2026-05-26 [$TBD] [516944556] Medium CVE-2026-14011 Out of bounds read in SurfaceCapture on 2026-05-26 [$TBD] [516936863] High CVE-2026-13845 Use after free in DOM on 2026-05-26 [$3000.0] [516836297] High CVE-2026-13842 Incorrect security UI in Chrome for iOS Reported by [] on 2026-05-26 [$TBD] [516865345] High CVE-2026-14418 Uninitialized Use in ANGLE on 2026-05-26 [$TBD] [516819850] Medium CVE-2026-14009 Insufficient data validation in Passwords on 2026-05-26 [$TBD] [516781007] Medium CVE-2026-14008 Uninitialized Use in WebXR on 2026-05-26 [$TBD] [516683433] Critical CVE-2026-13782 Use after free in Browser on 2026-05-26 [$TBD] [516649133] Critical CVE-2026-14417 Use after free in Dawn on 2026-05-26 [$TBD] [516457532] Critical CVE-2026-13781 Insufficient validation of untrusted input in Skia on 2026-05-25 [$TBD] [516425999] Medium CVE-2026-14007 Insufficient policy enforcement in PermissionsPolicy on 2026-05-25 [$TBD] [515467789] High CVE-2026-13841 Integer overflow in Skia on 2026-05-21 [$TBD] [515428315] Low CVE-2026-14416 Out of bounds read in Dawn on 2026-05-21 [$TBD] [515426873] Low CVE-2026-14148 Type Confusion in CSS on 2026-05-21 [$TBD] [515427046] Low CVE-2026-14149 Use after free in Audio on 2026-05-21 [$TBD] [515423596] Medium CVE-2026-14006 Use after free in Navigation on 2026-05-21 [$TBD] [515086856] Low CVE-2026-14415 Inappropriate implementation in V8 on 2026-05-20 [$TBD] [514769383] Critical CVE-2026-13780 Insufficient validation of untrusted input in ANGLE on 2026-05-19 [$TBD] [514632767] Low CVE-2026-14147 Inappropriate implementation in CSS on 2026-05-19 [$TBD] [514609778] High CVE-2026-13840 Insufficient policy enforcement in Canvas on 2026-05-19 [$TBD] [514550047] Low CVE-2026-14146 Inappropriate implementation in CSS on 2026-05-19 [$TBD] [514538751] Medium CVE-2026-14004 Inappropriate implementation in CSS on 2026-05-18 [$TBD] [514503077] Medium CVE-2026-14003 Insufficient policy enforcement in Extensions on 2026-05-18 [$TBD] [514489361] Medium CVE-2026-14002 Inappropriate implementation in Geolocation on 2026-05-18 [$TBD] [514485825] Low CVE-2026-14145 Inappropriate implementation in CSS on 2026-05-18 [$TBD] [514481943] Medium CVE-2026-14001 Inappropriate implementation in Network on 2026-05-18 [$TBD] [514461552] Medium CVE-2026-14000 Inappropriate implementation in XML on 2026-05-18 [$TBD] [514449396] High CVE-2026-13839 Inappropriate implementation in CSS on 2026-05-18 [$TBD] [514445398] High CVE-2026-13838 Inappropriate implementation in CSS on 2026-05-18 [$TBD] [514429130] High CVE-2026-13837 Inappropriate implementation in CSS on 2026-05-18 [$TBD] [514420555] High CVE-2026-13836 Inappropriate implementation in CSS on 2026-05-18 [$TBD] [514338102] High CVE-2026-13835 Inappropriate implementation in XML on 2026-05-18 [$TBD] [514079793] Low CVE-2026-14144 Incorrect security UI in Views on Desktop on 2026-05-17 [$TBD] [514073460] Low CVE-2026-14142 Inappropriate implementation in Extensions on 2026-05-17 [$TBD] [514072495] Low CVE-2026-14139 Inappropriate implementation in TabStrip on 2026-05-17 [$TBD] [514071697] Medium CVE-2026-13999 Inappropriate implementation in Extensions on 2026-05-17 [$TBD] [514068972] Medium CVE-2026-13996 Incorrect security UI in Permissions on 2026-05-17 [$TBD] [514064139] Medium CVE-2026-13993 Incorrect security UI in WebAppInstalls on 2026-05-17 [$TBD] [514058566] Low CVE-2026-14135 Insufficient validation of untrusted input in Network on 2026-05-17 [$TBD] [514056221] Medium CVE-2026-13989 Insufficient policy enforcement in PageInfo on 2026-05-17 [$TBD] [514040614] Medium CVE-2026-13988 Inappropriate implementation in Paint on 2026-05-17 [$TBD] [514039947] Low CVE-2026-14133 Race in History Embeddings on 2026-05-17 [$TBD] [514039492] Low CVE-2026-14132 Inappropriate implementation in WebXR on 2026-05-17 [$TBD] [514020982] Low CVE-2026-14131 Insufficient validation of untrusted input in WebAppInstalls on 2026-05-17 [$TBD] [514020959] Medium CVE-2026-13986 Inappropriate implementation in Media UI on 2026-05-17 [$TBD] [514019522] Low CVE-2026-14130 Incorrect security UI in Omnibox on 2026-05-17 [$TBD] [514013849] Medium CVE-2026-13985 Inappropriate implementation in MediaCapture on 2026-05-17 [$TBD] [514009654] Low CVE-2026-14127 Inappropriate implementation in Printing on 2026-05-17 [$TBD] [514010404] Medium CVE-2026-13984 Incorrect security UI in TabStrip on 2026-05-17 [$TBD] [514006829] Medium CVE-2026-13982 Incorrect security UI in Passwords on 2026-05-17 [$TBD] [513988889] Medium CVE-2026-13979 Inappropriate implementation in Paint on 2026-05-17 [$TBD] [513948227] Medium CVE-2026-14414 Insufficient validation of untrusted input in Skia on 2026-05-16 [$TBD] [513925114] High CVE-2026-13834 Insufficient validation of untrusted input in ANGLE on 2026-05-16 [$TBD] [513922055] High CVE-2026-14413 Uninitialized Use in ANGLE on 2026-05-16 [$TBD] [513920834] High CVE-2026-14412 Insufficient validation of untrusted input in ANGLE on 2026-05-16 [$TBD] [513919827] High CVE-2026-14411 Insufficient validation of untrusted input in ANGLE on 2026-05-16 [$TBD] [513918431] Low CVE-2026-14125 Uninitialized Use in ANGLE on 2026-05-16 [$TBD] [513866949] Medium CVE-2026-13978 Insufficient policy enforcement in PageInfo on 2026-05-16 [$TBD] [513859894] Medium CVE-2026-13977 Inappropriate implementation in HTMLParser on context element on 2026-05-16 [$TBD] [513858286] Medium CVE-2026-13976 Heap buffer overflow in Storage on 2026-05-16 [$1000.0] [513631768] Medium CVE-2026-14408 Uninitialized Use in Dawn Reported by [Chrovus ] on 2026-05-16 [$TBD] [513836996] Low CVE-2026-14410 Inappropriate implementation in Skia on 2026-05-16 [$TBD] [513810921] Low CVE-2026-14409 Inappropriate implementation in V8 Reported by [] on 2026-05-16 [$TBD] [513832989] Medium CVE-2026-13973 Inappropriate implementation in UI on 2026-05-16 [$TBD] [513822378] High CVE-2026-13832 Use after free in Headless on 2026-05-16 [$TBD] [513792140] Medium CVE-2026-13972 Inappropriate implementation in Paint on 2026-05-16 [$TBD] [513789382] Low CVE-2026-14121 Use after free in Chromoting on Linux Wayland on 2026-05-16 [$TBD] [513781328] High CVE-2026-13831 Use after free in GPU on 2026-05-16 [$TBD] [513780208] Medium CVE-2026-13971 Uninitialized Use in Skia on 2026-05-16 [$TBD] [513779283] Medium CVE-2026-13970 Uninitialized Use in Media on 2026-05-16 [$TBD] [513777411] Low CVE-2026-14120 Inappropriate implementation in DevTools on 2026-05-16 [$TBD] [513772764] Low CVE-2026-14118 Insufficient data validation in DevTools on 2026-05-16 [$TBD] [513762145] Medium CVE-2026-13968 Insufficient validation of untrusted input in DevTools on 2026-05-16 [$TBD] [513751951] Medium CVE-2026-13967 Type Confusion in V8 on 2026-05-15 [$TBD] [513747800] Low CVE-2026-14116 Insufficient validation of untrusted input in DevTools on 2026-05-15 [$TBD] [513745699] Low CVE-2026-14115 Insufficient validation of untrusted input in Cast on 2026-05-15 [$TBD] [513741393] Medium CVE-2026-13966 Inappropriate implementation in History on 2026-05-15 [$TBD] [513737952] Medium CVE-2026-13965 Use after free in Oilpan on 2026-05-15 [$TBD] [513727626] Medium CVE-2026-13963 Inappropriate implementation in DevTools on 2026-05-15 [$TBD] [513727494] High CVE-2026-13830 Use after free in Chromoting on 2026-05-15 [$TBD] [513721370] Medium CVE-2026-13962 Insufficient data validation in PDF on 2026-05-15 [$TBD] [513714023] Medium CVE-2026-13960 Inappropriate implementation in Passwords on 2026-05-15 [$TBD] [513713946] Low CVE-2026-14112 Inappropriate implementation in Enterprise on 2026-05-15 [$TBD] [513710926] Low CVE-2026-14111 Use after free in WebProtect on 2026-05-15 [$TBD] [513698452] Low CVE-2026-14110 Inappropriate implementation in DarkMode on 2026-05-15 [$TBD] [513694957] Low CVE-2026-14109 Insufficient policy enforcement in Mojo on 2026-05-15 [$TBD] [513689974] Low CVE-2026-14108 Use after free in PDFium on 2026-05-15 [$TBD] [513609249] Medium CVE-2026-13959 Insufficient validation of untrusted input in Blink on 2026-05-15 [$TBD] [513586956] Medium CVE-2026-14407 Inappropriate implementation in V8 on ARM64 due to AAPCS64 ABI Mismatch on 2026-05-15 [$TBD] [513553557] Medium CVE-2026-13957 Incorrect security UI in Extensions on 2026-05-15 [$TBD] [513544566] Low CVE-2026-14107 Use after free in Scheduling on 2026-05-15 [$TBD] [513528117] Low CVE-2026-14105 Insufficient policy enforcement in Speech on 2026-05-15 [$TBD] [513515168] Medium CVE-2026-13956 Incorrect security UI in PageInfo on 2026-05-15 [$TBD] [513504934] Medium CVE-2026-13954 Insufficient policy enforcement in XML on 2026-05-15 [$TBD] [513484193] Low CVE-2026-14104 Insufficient validation of untrusted input in WebAppInstalls on 2026-05-15 [$TBD] [513465245] Low CVE-2026-14103 Use after free in SSL on ChromeOS on 2026-05-15 [$TBD] [513459192] Medium CVE-2026-13953 Inappropriate implementation in SplitView on 2026-05-15 [$TBD] [513455047] Low CVE-2026-14102 Use after free in Passwords on 2026-05-15 [$TBD] [513435594] Medium CVE-2026-14406 Out of bounds read in V8 on 2026-05-14 [$TBD] [513401808] Medium CVE-2026-13952 Inappropriate implementation in PerformanceAPIs on 2026-05-14 [$TBD] [513399832] High CVE-2026-13828 Inappropriate implementation in Enterprise on 2026-05-14 [$TBD] [513394321] Medium CVE-2026-13951 Policy bypass in USB on Linux-based Platforms on 2026-05-14 [$TBD] [513383891] Low CVE-2026-14100 Insufficient data validation in NetworkCache on 2026-05-14 [$TBD] [513375767] Low CVE-2026-14098 Inappropriate implementation in CSS on 2026-05-14 [$TBD] [513376037] Low CVE-2026-14405 Uninitialized Use in V8 on 2026-05-14 [$TBD] [513360781] Medium CVE-2026-13950 Uninitialized Use in GPU on 2026-05-14 [$TBD] [513337989] Medium CVE-2026-14404 Inappropriate implementation in PDFium on 2026-05-14 [$TBD] [513298483] Low CVE-2026-14403 Use after free in V8 on 2026-05-14 [$TBD] [513286820] Medium CVE-2026-13948 Insufficient policy enforcement in Extensions on 2026-05-14 [$TBD] [513271007] Low CVE-2026-14095 Insufficient validation of untrusted input in Browser on 2026-05-14 [$TBD] [513240099] Low CVE-2026-14093 Use after free in Cast on 2026-05-14 [$TBD] [513226551] Medium CVE-2026-13945 Insufficient policy enforcement in Extensions on Linux via XDG Global Shortcuts portal on 2026-05-14 [$TBD] [513222854] Critical CVE-2026-13779 Use after free in Chromoting on 2026-05-14 [$TBD] [513212892] Low CVE-2026-14092 Insufficient policy enforcement in Privacy on 2026-05-14 [$TBD] [513208773] Low CVE-2026-14091 Use after free in DevTools on 2026-05-14 [$TBD] [513194241] Low CVE-2026-14090 Out of bounds read in CameraCapture on 2026-05-14 [$TBD] [513188254] Low CVE-2026-14089 Insufficient validation of untrusted input in PopupBlocker on 2026-05-14 [$TBD] [513186670] Medium CVE-2026-13942 Insufficient validation of untrusted input in Video Capture on 2026-05-14 [$TBD] [513177497] High CVE-2026-13824 Insufficient validation of untrusted input in Extensions on 2026-05-14 [$TBD] [513169718] Low CVE-2026-14086 Insufficient policy enforcement in HID on 2026-05-14 [$TBD] [513163011] High CVE-2026-13823 Use after free in Glic on 2026-05-14 [$TBD] [513158425] Medium CVE-2026-13940 Uninitialized Use in Cast on 2026-05-14 [$TBD] [513155863] Low CVE-2026-14085 Side-channel information leakage in CSS on 2026-05-14 [$TBD] [513143921] Medium CVE-2026-13938 Integer overflow in Fonts on 2026-05-14 [$TBD] [513142445] High CVE-2026-13821 Use after free in Canvas on 2026-05-14 [$TBD] [513138148] Low CVE-2026-14084 Insufficient validation of untrusted input in Chromoting on 2026-05-14 [$TBD] [513128322] Low CVE-2026-14083 Insufficient validation of untrusted input in HTML on 2026-05-14 [$TBD] [513048822] High CVE-2026-14401 Insufficient validation of untrusted input in ANGLE on 2026-05-13 [$TBD] [513049578] Low CVE-2026-14082 Race in Storage on 2026-05-13 [$TBD] [513046494] Medium CVE-2026-13937 Insufficient policy enforcement in Passwords on 2026-05-13 [$TBD] [513030698] Low CVE-2026-14081 Insufficient policy enforcement in DevTools on 2026-05-13 [$TBD] [513012139] Critical CVE-2026-13776 Type Confusion in Dawn on 2026-05-13 [$TBD] [513009005] Medium CVE-2026-13935 Side-channel information leakage in ComputePressure on 2026-05-13 [$TBD] [513006636] Medium CVE-2026-13934 Insufficient validation of untrusted input in Dawn on Android leads to GPU process UB on 2026-05-13 [$TBD] [513006745] Medium CVE-2026-14399 Uninitialized Use in Dawn on 2026-05-13 [$TBD] [513002625] Medium CVE-2026-13933 Insufficient policy enforcement in Passwords on 2026-05-13 [$TBD] [512995785] Critical CVE-2026-14398 Use after free in ANGLE on 2026-05-13 [$TBD] [512986879] High CVE-2026-13820 Out of bounds read in Skia on 2026-05-13 [$TBD] [512971938] Low CVE-2026-14079 Policy bypass in Network on 2026-05-13 [$TBD] [512953564] Low CVE-2026-14078 Policy bypass in WebRTC on 2026-05-13 [$TBD] [512937764] Medium CVE-2026-13930 Insufficient policy enforcement in Actor on 2026-05-13 [$TBD] [512162479] Medium CVE-2026-13928 Insufficient validation of untrusted input in Enterprise on 2026-05-11 [$TBD] [511823182] High CVE-2026-13818 Inappropriate implementation in Passwords on 2026-05-10 [$TBD] [511815165] Low CVE-2026-14076 Policy bypass in Network on 2026-05-10 [$TBD] [511766407] Critical CVE-2026-13775 Use after free in GPU on 2026-05-10 [$TBD] [511748106] Medium CVE-2026-13922 Side-channel information leakage in Paint on 2026-05-10 [$TBD] [511739631] High CVE-2026-13817 Insufficient validation of untrusted input in Glic on 2026-05-10 [$TBD] [511738175] Medium CVE-2026-13921 Insufficient validation of untrusted input in DeviceBoundSessionCredentials on 2026-05-10 [$TBD] [511722207] High CVE-2026-13815 Use after free in Blink on 2026-05-10 [$TBD] [511712766] High CVE-2026-13814 Use after free in Views on 2026-05-10 [$TBD] [511290389] Low CVE-2026-14395 Out of bounds write in V8 on 2026-05-08 [$TBD] [511263221] Low CVE-2026-14394 Use after free in V8 on 2026-05-08 [$TBD] [511255112] Medium CVE-2026-14393 Use after free in V8 on 2026-05-08 [$TBD] [511249430] Medium CVE-2026-13919 Insufficient data validation in Extensions on 2026-05-08 [$3000.0] [510829679] High CVE-2026-13793 Insufficient policy enforcement in SVG on 2026-05-07 [$1000.0] [507263861] Low CVE-2026-14026 Misleading Directory Upload via Split View Context Confusion on 2026-04-28 [$0.0] [507099867] Low CVE-2026-14072 Incorrect security UI in SplitView Reported by [] on 2026-04-28 [$TBD] [507239830] Medium CVE-2026-13911 Insufficient data validation in Spellcheck on 2026-04-27 [$TBD] [507237563] Low CVE-2026-14073 Insufficient policy enforcement in WebXR on 2026-04-27 [$3000.0] [507090179] Medium CVE-2026-13858 Out of bounds read in FFmpeg on 2026-04-27 [$TBD] [506558270] Critical CVE-2026-13774 Use after free in Extensions on 2026-04-25 [$TBD] [506149253] High CVE-2026-13811 Use after free in IME on 2026-04-24 [$TBD] [506143724] Low CVE-2026-14071 Side-channel information leakage in WebAudio on 2026-04-24 [$TBD] [505933538] Medium CVE-2026-13909 Insufficient policy enforcement in DevTools on 2026-04-23 [$TBD] [505137978] Low CVE-2026-14070 Uninitialized Use in WebNN on 2026-04-21 [$TBD] [505136542] Low CVE-2026-14069 Integer overflow in WebNN on 2026-04-21 [$TBD] [504613867] Medium CVE-2026-13906 Out of bounds read in Codecs on 2026-04-20 [$1000.0] [504600482] Low CVE-2026-13810 Inappropriate implementation in Input on focus. This allows XSS to silently harvest saved passwords on page load without clicks, bypassing mandatory user gesture security checks. on 2026-04-20 [$TBD] [503912196] Medium CVE-2026-13903 Insufficient policy enforcement in Bluetooth on 2026-04-17 [$TBD] [503617508] Low CVE-2026-14065 Insufficient validation of untrusted input in PageInfo on 2026-04-17 [$TBD] [503585173] Medium CVE-2026-13901 Insufficient validation of untrusted input in Serial on 2026-04-16 [$TBD] [503333798] High CVE-2026-13806 Insufficient validation of untrusted input in Accessibility on 2026-04-16 [$TBD] [503054174] High CVE-2026-14390 Use after free in ANGLE on 2026-04-15 [$TBD] [502473563] Low CVE-2026-14063 Out of bounds memory access in Chromecast on 2026-04-14 [$TBD] [502448128] Low CVE-2026-14062 Inappropriate implementation in Views on ChromeOS on 2026-04-14 [$TBD] [502434484] Low CVE-2026-14061 Inappropriate implementation in Dawn on hardware with 1ns timestamp period on 2026-04-14 [$TBD] [502374993] Medium CVE-2026-13900 Insufficient validation of untrusted input in Chromecast on 2026-04-13 [$TBD] [502363986] Low CVE-2026-14059 Insufficient policy enforcement in Related-Website-Sets on RWS removal on 2026-04-13 [$TBD] [502354038] Low CVE-2026-14058 Policy bypass in Parser on 2026-04-13 [$TBD] [502212647] Low CVE-2026-14057 Insufficient policy enforcement in FedCM on 2026-04-13 [$TBD] [502109002] Medium CVE-2026-13899 Use after free in HTML on 2026-04-13 [$TBD] [501925480] Medium CVE-2026-13898 Use after free in Cast Receiver on 2026-04-12 [$TBD] [501888426] Low CVE-2026-14056 Insufficient validation of untrusted input in Media on 2026-04-12 [$TBD] [501877896] Medium CVE-2026-13897 Insufficient policy enforcement in Chromecast on 2026-04-12 [$TBD] [501873032] High CVE-2026-13804 Use after free in Chromecast on 2026-04-12 [$TBD] [501851312] Low CVE-2026-14054 Insufficient policy enforcement in Network on 2026-04-12 [$TBD] [501836539] Low CVE-2026-14053 Insufficient policy enforcement in Extensions on 2026-04-12 [$TBD] [501820076] Medium CVE-2026-13896 Insufficient policy enforcement in Glic on 2026-04-11 [$TBD] [501810874] Low CVE-2026-14052 Insufficient policy enforcement in FileSystem on 2026-04-11 [$TBD] [501770542] Medium CVE-2026-13895 Inappropriate implementation in Autofill on 2026-04-11 [$TBD] [501741117] Medium CVE-2026-13894 Insufficient policy enforcement in Network on 2026-04-11 [$TBD] [501729582] Medium CVE-2026-13893 Insufficient validation of untrusted input in WebUI on 2026-04-11 [$TBD] [501708647] Low CVE-2026-14050 Insufficient policy enforcement in Passwords on 2026-04-11 [$TBD] [501659888] Low CVE-2026-14049 Inappropriate implementation in GPU on 2026-04-11 [$TBD] [501631475] Medium CVE-2026-13891 Insufficient validation of untrusted input in Extensions on 2026-04-11 [$TBD] [501623322] High CVE-2026-13802 Use after free in Views on 2026-04-11 [$TBD] [500601345] Medium CVE-2026-13890 Out of bounds read in Chromecast on 2026-04-08 [$TBD] [500587568] High CVE-2026-13801 Integer overflow in Chromecast on 2026-04-08 [$TBD] [500566906] Medium CVE-2026-13888 Use after free in Extensions on 2026-04-07 [$TBD] [500505046] Medium CVE-2026-14389 Integer overflow in Skia on 2026-04-07 [$TBD] [500476886] Medium CVE-2026-14388 Out of bounds read in ANGLE on 2026-04-07 [$TBD] [500475136] Medium CVE-2026-13886 Policy bypass in Isolated Web Apps on 2026-04-07 [$TBD] [500305404] Medium CVE-2026-14387 Integer overflow in Skia on 2026-04-07 [$TBD] [500077014] Medium CVE-2026-13884 Heap buffer overflow in Chromecast on 2026-04-06 [$TBD] [500030250] Medium CVE-2026-13883 Type Confusion in ANGLE on 2026-04-06 [$TBD] [499252371] High CVE-2026-13799 Use after free in QUIC on 2026-04-03 [$TBD] [499189601] Low CVE-2026-14048 Use after free in Chromecast on 2026-04-03 [$TBD] [499162550] Medium CVE-2026-13882 Inappropriate implementation in USB on 2026-04-02 [$TBD] [499100491] Medium CVE-2026-13881 Insufficient data validation in WebAppInstalls on 2026-04-02 [$TBD] [499048914] High CVE-2026-13798 Heap buffer overflow in Chromecast on 2026-04-02 [$TBD] [499025645] High CVE-2026-13797 Insufficient validation of untrusted input in Chromecast on 2026-04-02 [$TBD] [499022239] Medium CVE-2026-13879 Use after free in Bluetooth on 2026-04-02 [$TBD] [498864176] Low CVE-2026-14047 Insufficient policy enforcement in Extensions on 2026-04-02 [$TBD] [498820206] Medium CVE-2026-13877 Insufficient validation of untrusted input in ANGLE on 2026-04-01 [$TBD] [498722200] Medium CVE-2026-13876 Inappropriate implementation in Network on 2026-04-01 [$TBD] [498411773] Medium CVE-2026-13874 Inappropriate implementation in DataTransfer on 2026-03-31 [$TBD] [498085466] Medium CVE-2026-13873 Out of bounds memory access in Layout on 2026-03-31 [$TBD] [497961376] Medium CVE-2026-13871 Insufficient data validation in GuestView on 2026-03-30 [$TBD] [497723649] Low CVE-2026-14045 Insufficient validation of untrusted input in Network on 2026-03-30 [$TBD] [497670996] Low CVE-2026-14044 Use after free in ANGLE on 2026-03-30 [$TBD] [497632232] Low CVE-2026-14043 Use after free in GetUserMedia on 2026-03-29 [$TBD] [497558336] Low CVE-2026-14042 Inappropriate implementation in Isolated Web Apps on 2026-03-29 [$TBD] [497544822] Low CVE-2026-14041 Insufficient policy enforcement in Serial on 2026-03-29 [$TBD] [497488593] Low CVE-2026-14040 Use after free in BrowserTag on 2026-03-29 [$TBD] [497358012] Low CVE-2026-14039 Insufficient policy enforcement in GetUserMedia on 2026-03-28 [$TBD] [497345177] Medium CVE-2026-13867 Inappropriate implementation in Geolocation on 2026-03-28 [$TBD] [497241148] Low CVE-2026-14038 Insufficient validation of untrusted input in New Tab Page on 2026-03-28 [$TBD] [497090912] Medium CVE-2026-13865 Insufficient validation of untrusted input in Enterprise on 2026-03-27 [$TBD] [496522611] Low CVE-2026-14037 Insufficient policy enforcement in GPU on 2026-03-26 [$TBD] [496411061] Low CVE-2026-14036 Insufficient policy enforcement in Bluetooth on 2026-03-25 [$TBD] [496399913] Medium CVE-2026-13864 Insufficient policy enforcement in WebHID on 2026-03-25 [$TBD] [496371586] Low CVE-2026-14035 Insufficient policy enforcement in Bluetooth on 2026-03-25 [$TBD] [495459838] Low CVE-2026-14031 Incorrect security UI in File Input on 2026-03-23 [$TBD] [495456765] Medium CVE-2026-13861 Use after free in Core on 2026-03-23 [$TBD] [492410546] Medium CVE-2026-14383 Inappropriate implementation in V8 on 2026-03-13 [$TBD] [491894115] High CVE-2026-13796 Integer overflow in Chromecast on 2026-03-11 [$1000.0] [488762971] Low CVE-2026-14030 Incorrect security UI in SplitView on 2026-03-01 [$5000.0] [479203484] Medium CVE-2026-13857 Inappropriate implementation in Geometry Reported by [Luan Herrera (@lbherrera_)] on 2026-01-27 [$10000.0] [457771782] High CVE-2026-13790 Side-channel information leakage in Scroll Reported by [] on 2025-11-04 [$1000.0] [417052041] Medium CVE-2026-13860 Incorrect security UI in Autofill on 2025-05-11 [$500.0] [527385397] High CVE-2026-15132 Uninitialized Use in V8 on 2026-06-24 [$500.0] [527406824] High CVE-2026-15133 Use after free in InterestGroups on 2026-06-24 [$TBD] [526542464] Medium CVE-2026-15131 Insufficient data validation in Navigation on 2026-06-22 [$TBD] [526541544] High CVE-2026-15130 Insufficient policy enforcement in Navigation on 2026-06-22 [$TBD] [524045160] Critical CVE-2026-15129 Use after free in Views on 2026-06-14 [$TBD] [523756329] High CVE-2026-15128 Inappropriate implementation in Forms on 2026-06-13 [$TBD] [523752265] High CVE-2026-15127 Inappropriate implementation in WebGL on 2026-06-13 [$TBD] [523748081] High CVE-2026-15126 Use after free in Forms on 2026-06-13 [$TBD] [523737685] High CVE-2026-15125 Inappropriate implementation in Forms on 2026-06-13 [$TBD] [523735038] High CVE-2026-15124 Insufficient policy enforcement in Passwords on 2026-06-13 [$TBD] [523729553] High CVE-2026-15123 Insufficient data validation in DOM on 2026-06-13 [$TBD] [523712556] High CVE-2026-15121 Use after free in WebRTC on 2026-06-13 [$TBD] [523505418] High CVE-2026-15119 Inappropriate implementation in GetUserMedia on 2026-06-12 [$TBD] [523238265] High CVE-2026-15118 Use after free in Input on 2026-06-12 [$TBD] [522568496] High CVE-2026-15117 Use after free in Payments on 2026-06-10 [$TBD] [522092013] High CVE-2026-15116 Use after free in Actor on 2026-06-09 [$TBD] [520565945] High CVE-2026-15114 Out of bounds read and write in Codecs on 2026-06-05 [$TBD] [518006275] Critical CVE-2026-15112 Use after free in Ozone on 2026-05-29 [$TBD] [517508651] High CVE-2026-15111 Use after free in Views on 2026-05-28 [$TBD] [516899138] High CVE-2026-15109 Uninitialized Use in ANGLE on 2026-05-26 [$TBD] [515443146] High CVE-2026-15108 Integer overflow in Extensions API on 2026-05-21 [$2000.0] [503553615] Medium CVE-2026-15107 Use after free in IndexedDB on 2026-04-17 [$TBD] [532929679] High CVE-2026-15777 Use after free in UI on 2026-07-09 [$TBD] [532595489] High CVE-2026-15776 Type Confusion in V8 on 2026-07-08 [$TBD] [531319201] High CVE-2026-15775 Insufficient policy enforcement in V8 on 2026-07-05 [$TBD] [530646115] High CVE-2026-15774 Use after free in Skia on 2026-07-03 [$TBD] [525317502] High CVE-2026-15772 Use after free in GPU on Android via GLTextureHolder::ReadbackToMemory on 2026-06-18 [$TBD] [524792614] High CVE-2026-15770 Uninitialized Use in V8 on 2026-06-17 [$TBD] [519731111] High CVE-2026-15769 Insufficient validation of untrusted input in Linux Toolkit Theming on 2026-06-03 [$TBD] [518007484] Critical CVE-2026-15765 Use after free in Ozone on 2026-05-29 [$TBD] [517931625] High CVE-2026-15768 Insufficient policy enforcement in HTML-in-Canvas on 2026-05-29 [$TBD] [517100492] Critical CVE-2026-15764 Use after free in Ozone on 2026-05-27 [$TBD] [514748734] High CVE-2026-15767 Heap buffer overflow in libyuv on 2026-05-19 [$TBD] [514010477] High CVE-2026-15766 Uninitialized Use in Skia on 2026-05-17 [$TBD] [513795122] Medium CVE-2026-15778 Insufficient validation of untrusted input in Navigation on 2026-05-16
_14e30a.png)
_8126ce.png)
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.