Google Chrome Releases

Chrome for Android Update

2026-06-30T14:18:27.175-07:00

Hi, everyone! We've just released Chrome 150 (150.0.7871.63) for Android. It'll become available on Google Play over the next few days.

This release includes stability and performance improvements. You can see a full list of the changes in the Git log. If you find a new issue, please let us know by filing a bug.

Android releases contain the same security fixes as their corresponding Desktop releases (Windows & Mac: 150.0.7871.46/47, Linux: 150.0.7871.46) unless otherwise noted.

Krishna Govind

Google Chrome

Stable Channel Update for Desktop

2026-06-30T13:41:56.746-07:00

The Chrome team is delighted to announce the promotion of Chrome 151 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks.

Chrome 150.0.7871.46 (Linux) 150.0.7871.46/.47 Windows/Mac contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new features and big efforts delivered in 151.

Security Fixes and Rewards
Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.
This update includes 382 security fixes. Please see the Chrome Security Page for more information.
[N/A][506558270] Critical CVE-2026-13774: Use after free in Extensions. Reported by Google on 2026-04-26
[N/A][511766407] Critical CVE-2026-13775: Use after free in GPU. Reported by Google on 2026-05-10
[N/A][513012139] Critical CVE-2026-13776: Type Confusion in Dawn. Reported by Google on 2026-05-14
[N/A][513128566] Critical CVE-2026-13777: Insufficient validation of untrusted input in iOSWeb. Reported by Google on 2026-05-14
[N/A][513167952] Critical CVE-2026-13778: Use after free in WebUSB. Reported by Google on 2026-05-14
[N/A][513222854] Critical CVE-2026-13779: Use after free in Chromoting. Reported by Google on 2026-05-14
[N/A][514769383] Critical CVE-2026-13780: Insufficient validation of untrusted input in ANGLE. Reported by Google on 2026-05-19
[N/A][516457532] Critical CVE-2026-13781: Insufficient validation of untrusted input in Skia. Reported by Google on 2026-05-25
[N/A][516683433] Critical CVE-2026-13782: Use after free in Browser. Reported by Google on 2026-05-26
[N/A][516962178] Critical CVE-2026-13783: Use after free in Views. Reported by Google on 2026-05-27
[N/A][516962715] Critical CVE-2026-13784: Use after free in Views. Reported by Google on 2026-05-27
[N/A][517021684] Critical CVE-2026-13785: Use after free in Bluetooth. Reported by Google on 2026-05-27
[N/A][518007821] Critical CVE-2026-13786: Use after free in Ozone. Reported by Google on 2026-05-29
[N/A][522919313] Critical CVE-2026-13787: Use after free in Chromoting. Reported by Google on 2026-06-11
[N/A][523119897] Critical CVE-2026-13788: Use after free in Fullscreen. Reported by Google on 2026-06-12
[$36000][493847920] High CVE-2026-13789: Use after free in GPU. Reported by 86ac1f1587b71893ed2ad792cd7dde32 on 2026-03-18
[$10000][457771782] High CVE-2026-13790: Side-channel information leakage in Scroll. Reported by Vsevolod Kokorin (Slonser) of Solidlab and Jorian Woltjer on 2025-11-04
[$10000][503850012] High CVE-2026-13791: Insufficient validation of untrusted input in Downloads. Reported by Ron Masas (Imperva) on 2026-04-17
[$4000][496012368] High CVE-2026-13792: Use after free in Touchbar. Reported by Weipeng Jiang (@Krace) of VRI on 2026-03-25
[$3000][510829679] High CVE-2026-13793: Insufficient policy enforcement in SVG. Reported by pakhunov.anton.n@gmail.com on 2026-05-07
[$2500][513893425] High CVE-2026-13794: Insufficient validation of untrusted input in WebAppInstalls. Reported by Daniel Rodríguez on 2026-05-16
[$2000][476591032] High CVE-2026-13795: Insufficient policy enforcement in Chrome for iOS. Reported by maitai on 2026-01-17
[N/A][491894115] High CVE-2026-13796: Integer overflow in Chromecast. Reported by Google on 2026-03-11
[N/A][499025645] High CVE-2026-13797: Insufficient validation of untrusted input in Chromecast. Reported by Google on 2026-04-02
[N/A][499048914] High CVE-2026-13798: Heap buffer overflow in Chromecast. Reported by Google on 2026-04-02
[N/A][499252371] High CVE-2026-13799: Use after free in QUIC. Reported by Google on 2026-04-03
[N/A][500108770] High CVE-2026-13800: Inappropriate implementation in Updater. Reported by Google on 2026-04-06

[N/A][500587568] High CVE-2026-13801: Integer overflow in Chromecast. Reported by Google on 2026-04-08

[N/A][501623322] High CVE-2026-13802: Use after free in Views. Reported by Google on 2026-04-11
[N/A][501669642] High CVE-2026-13803: Type Confusion in Chrome Tabs. Reported by Google on 2026-04-11
[N/A][501873032] High CVE-2026-13804: Use after free in Chromecast. Reported by Google on 2026-04-12
[N/A][502282040] High CVE-2026-13805: Use after free in GFX. Reported by Google on 2026-04-13
[N/A][503333798] High CVE-2026-13806: Insufficient validation of untrusted input in Accessibility. Reported by Google on 2026-04-16
[N/A][504194494] High CVE-2026-13807: Use after free in Import. Reported by Google on 2026-04-19
[N/A][504221510] High CVE-2026-13808: Insufficient data validation in Chrome for iOS. Reported by Google on 2026-04-19
[N/A][504222227] High CVE-2026-13809: Side-channel information leakage in Safe Browsing. eported by Google on 2026-04-19
[TBD][504600482] High CVE-2026-13810: Inappropriate implementation in Input. Reported by dilipsc03@gmail.com on 2026-04-20
[N/A][506149253] High CVE-2026-13811: Use after free in IME. Reported by Google on 2026-04-24
[N/A][508293203] High CVE-2026-13812: Insufficient validation of untrusted input in Chrome for iOS. Reported by Google on 2026-04-30
[N/A][508462149] High CVE-2026-13813: Insufficient validation of untrusted input in Chrome for iOS. Reported by Google on 2026-05-01
[N/A][511712766] High CVE-2026-13814: Use after free in Views. Reported by Google on 2026-05-10
[N/A][511722207] High CVE-2026-13815: Use after free in Blink. Reported by Google on 2026-05-10
[N/A][511735715] High CVE-2026-13816: Insufficient validation of untrusted input in File Input. Reported by Google on 2026-05-10
[N/A][511739631] High CVE-2026-13817: Insufficient validation of untrusted input in Glic. Reported by Google on 2026-05-10
[N/A][511823182] High CVE-2026-13818: Inappropriate implementation in Passwords. Reported by Google on 2026-05-10
[N/A][512962749] High CVE-2026-13819: Out of bounds read in ANGLE. Reported by Google on 2026-05-13
[N/A][512986879] High CVE-2026-13820: Out of bounds read in Skia. Reported by Google on 2026-05-13
[N/A][513142445] High CVE-2026-13821: Use after free in Canvas. Reported by Google on 2026-05-14
[N/A][513148038] High CVE-2026-13822: Inappropriate implementation in Extensions. Reported by Google on 2026-05-14
[N/A][513163011] High CVE-2026-13823: Use after free in Glic. Reported by Google on 2026-05-14
[N/A][513177497] High CVE-2026-13824: Insufficient validation of untrusted input in Extensions. Reported by Google on 2026-05-14
[N/A][513209610] High CVE-2026-13825: Uninitialized Use in Dawn. Reported by Google on 2026-05-14
[N/A][513237800] High CVE-2026-13826: Inappropriate implementation in Autofill. Reported by Google on 2026-05-14
[N/A][513371963] High CVE-2026-13827: Use after free in Updater. Reported by Google on 2026-05-15
[N/A][513399832] High CVE-2026-13828: Inappropriate implementation in Enterprise. Reported by Google on 2026-05-15
[N/A][513490996] High CVE-2026-13829: Insufficient validation of untrusted input in Settings. Reported by Google on 2026-05-15
[N/A][513727494] High CVE-2026-13830: Use after free in Chromoting. Reported by Google on 2026-05-16
[N/A][513781328] High CVE-2026-13831: Use after free in GPU. Reported by Google on 2026-05-16
[N/A][513822378] High CVE-2026-13832: Use after free in Headless. Reported by Google on 2026-05-16
[N/A][513920082] High CVE-2026-13833: Uninitialized Use in ANGLE. Reported by Google on 2026-05-17
[N/A][513925114] High CVE-2026-13834: Insufficient validation of untrusted input in ANGLE. Reported by Google on 2026-05-17
[N/A][514338102] High CVE-2026-13835: Inappropriate implementation in XML. Reported by Google on 2026-05-18
[N/A][514420555] High CVE-2026-13836: Inappropriate implementation in CSS. Reported by Google on 2026-05-18
[N/A][514429130] High CVE-2026-13837: Inappropriate implementation in CSS. Reported by Google on 2026-05-18
[N/A][514445398] High CVE-2026-13838: Inappropriate implementation in CSS. Reported by Google on 2026-05-18
[N/A][514449396] High CVE-2026-13839: Inappropriate implementation in CSS. Reported by Google on 2026-05-18
[TBD][514609778] High CVE-2026-13840: Insufficient policy enforcement in Canvas. Reported by Binglin Song on 2026-05-19
[N/A][515467789] High CVE-2026-13841: Integer overflow in Skia. Reported by Google on 2026-05-21
[TBD][516836297] High CVE-2026-13842: Incorrect security UI in Chrome for iOS. Reported by Azza Tegar Naufal Ataullah on 2026-05-26
[N/A][516869032] High CVE-2026-13843: Insufficient validation of untrusted input in Chrome for iOS. Reported by Google on 2026-05-26
[N/A][516926115] High CVE-2026-13844: Use after free in Updater. Reported by Google on 2026-05-27
[N/A][516936863] High CVE-2026-13845: Use after free in DOM. Reported by Google on 2026-05-27
[N/A][516999424] High CVE-2026-13846: Use after free in USB. Reported by Google on 2026-05-27
[N/A][517073397] High CVE-2026-13847: Insufficient validation of untrusted input in Chrome for iOS. Reported by Google on 2026-05-27
[N/A][517345069] High CVE-2026-13848: Use after free in Forms. Reported by Google on 2026-05-28
[N/A][517351411] High CVE-2026-13849: Insufficient validation of untrusted input in Chromoting. Reported by Google on 2026-05-28
[N/A][517610676] High CVE-2026-13850: Insufficient validation of untrusted input in Chrome for iOS. Reported by Google on 2026-05-28
[N/A][519692255] High CVE-2026-13851: Insufficient validation of untrusted input in WebAppInstalls. Reported by Google on 2026-06-03
[N/A][522560124] High CVE-2026-13852: Insufficient validation of untrusted input in WebAppInstalls. Reported by Google on 2026-06-11
[N/A][523224019] High CVE-2026-13853: Use after free in Journeys. Reported by Google on 2026-06-12
[N/A][523690961] High CVE-2026-13854: Use after free in Ozone. Reported by Google on 2026-06-13
[N/A][524395469] High CVE-2026-13855: Use after free in Ozone. Reported by Google on 2026-06-16
[$8000][508092634] Medium CVE-2026-13856: Insufficient validation of untrusted input in Speech. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-04-30
[$5000][479203484] Medium CVE-2026-13857: Inappropriate implementation in Geometry. Reported by Luan Herrera (@lbherrera_) on 2026-01-27
[$3000][507090179] Medium CVE-2026-13858: Out of bounds read in FFmpeg. Reported by Wongi Lee (@_qwerty_po) of Theori with Xint Code, Jungwoo Lee (@physicube) on 2026-04-27
[$2000][484756087] Medium CVE-2026-13859: Inappropriate implementation in ANGLE. Reported by Jason Villaluna on 2026-02-15
[$1000][417052041] Medium CVE-2026-13860: Incorrect security UI in Autofill. Reported by Khalil Zhani on 2025-05-12
[N/A][495456765] Medium CVE-2026-13861: Use after free in Core. Reported by Google on 2026-03-23
[N/A][495897416] Medium CVE-2026-13862: Insufficient policy enforcement in Web Authentication (Passkeys & Security Keys). Reported by Google on 2026-03-24
[N/A][496012495] Medium CVE-2026-13863: Insufficient validation of untrusted input in CustomTabs. Reported by Google on 2026-03-25
[N/A][496399913] Medium CVE-2026-13864: Insufficient policy enforcement in WebHID. Reported by Google on 2026-03-26
[N/A][497090912] Medium CVE-2026-13865: Insufficient validation of untrusted input in Enterprise. Reported by Google on 2026-03-28
[N/A][497207698] Medium CVE-2026-13866: Insufficient validation of untrusted input in Input. Reported by Google on 2026-03-28
[N/A][497345177] Medium CVE-2026-13867: Inappropriate implementation in Geolocation. Reported by Google on 2026-03-29
[N/A][497453475] Medium CVE-2026-13868: Inappropriate implementation in Network. Reported by Google on 2026-03-29
[N/A][497610642] Medium CVE-2026-13869: Use after free in Device. Reported by Google on 2026-03-30
[N/A][497634837] Medium CVE-2026-13870: Use after free in WebView. Reported by Google on 2026-03-30
[N/A][497961376] Medium CVE-2026-13871: Insufficient data validation in GuestView. Reported by Google on 2026-03-30
[N/A][497977983] Medium CVE-2026-13872: Insufficient validation of untrusted input in WebAppInstalls. Reported by Google on 2026-03-31
[N/A][498085466] Medium CVE-2026-13873: Out of bounds memory access in Layout. Reported by Google on 2026-03-31
[N/A][498411773] Medium CVE-2026-13874: Inappropriate implementation in DataTransfer. Reported by Google on 2026-04-01
[N/A][498721671] Medium CVE-2026-13875: Insufficient validation of untrusted input in GPU. Reported by Google on 2026-04-01
[N/A][498722200] Medium CVE-2026-13876: Inappropriate implementation in Network. Reported by Google on 2026-04-01
[N/A][498820206] Medium CVE-2026-13877: Insufficient validation of untrusted input in ANGLE. Reported by Google on 2026-04-02
[N/A][499007266] Medium CVE-2026-13878: Use after free in Bluetooth. Reported by Google on 2026-04-02
[N/A][499022239] Medium CVE-2026-13879: Use after free in Bluetooth. Reported by Google on 2026-04-02
[N/A][499025880] Medium CVE-2026-13880: Use after free in USB. Reported by Google on 2026-04-02
[N/A][499100491] Medium CVE-2026-13881: Insufficient data validation in WebAppInstalls. Reported by Google on 2026-04-03
[N/A][499162550] Medium CVE-2026-13882: Inappropriate implementation in USB. Reported by Google on 2026-04-03
[N/A][500030250] Medium CVE-2026-13883: Type Confusion in ANGLE. Reported by Google on 2026-04-06
[N/A][500077014] Medium CVE-2026-13884: Heap buffer overflow in Chromecast. Reported by Google on 2026-04-06
[N/A][500474409] Medium CVE-2026-13885: Use after free in Skia. Reported by Google on 2026-04-07
[N/A][500475136] Medium CVE-2026-13886: Policy bypass in Isolated Web Apps. Reported by Google on 2026-04-07
[N/A][500508524] Medium CVE-2026-13887: Insufficient policy enforcement in NFC. Reported by Google on 2026-04-08
[N/A][500566906] Medium CVE-2026-13888: Use after free in Extensions. Reported by Google on 2026-04-08
[N/A][500588580] Medium CVE-2026-13889: Insufficient validation of untrusted input in WebAuthentication. Reported by Google on 2026-04-08
[N/A][500601345] Medium CVE-2026-13890: Out of bounds read in Chromecast. Reported by Google on 2026-04-08
[N/A][501631475] Medium CVE-2026-13891: Insufficient validation of untrusted input in Extensions. Reported by Google on 2026-04-11
[N/A][501674841] Medium CVE-2026-13892: Inappropriate implementation in Chrome for iOS. Reported by Google on 2026-04-11
[N/A][501729582] Medium CVE-2026-13893: Insufficient validation of untrusted input in WebUI. Reported by Google on 2026-04-11
[N/A][501741117] Medium CVE-2026-13894: Insufficient policy enforcement in Network. Reported by Google on 2026-04-11
[N/A][501770542] Medium CVE-2026-13895: Inappropriate implementation in Autofill. Reported by Google on 2026-04-12
[N/A][501820076] Medium CVE-2026-13896: Insufficient policy enforcement in Glic. Reported by Google on 2026-04-12
[N/A][501877896] Medium CVE-2026-13897: Insufficient policy enforcement in Chromecast. Reported by Google on 2026-04-12
[N/A][501925480] Medium CVE-2026-13898: Use after free in Cast Receiver. Reported by Google on 2026-04-12
[N/A][502109002] Medium CVE-2026-13899: Use after free in HTML. Reported by Google on 2026-04-13
[N/A][502374993] Medium CVE-2026-13900: Insufficient validation of untrusted input in Chromecast. Reported by Google on 2026-04-14
[N/A][503585173] Medium CVE-2026-13901: Insufficient validation of untrusted input in Serial. Reported by Google on 2026-04-17
[N/A][503725717] Medium CVE-2026-13902: Inappropriate implementation in Chrome for iOS. Reported by Google on 2026-04-17
[N/A][503912196] Medium CVE-2026-13903: Insufficient policy enforcement in Bluetooth. Reported by Google on 2026-04-18
[N/A][504185807] Medium CVE-2026-13904: Incorrect security UI in Safe Browsing. Reported by Google on 2026-04-19
[N/A][504192688] Medium CVE-2026-13905: Incorrect security UI in Chrome for iOS. Reported by Google on 2026-04-19
[N/A][504613867] Medium CVE-2026-13906: Out of bounds read in Codecs. Reported by Google on 2026-04-20
[N/A][505156685] Medium CVE-2026-13907: Inappropriate implementation in iOSWeb. Reported by Google on 2026-04-22
[N/A][505242189] Medium CVE-2026-13908: Insufficient validation of untrusted input in Omnibox. Reported by Google on 2026-04-22
[N/A][505933538] Medium CVE-2026-13909: Insufficient policy enforcement in DevTools. Reported by Google on 2026-04-24
[N/A][507231605] Medium CVE-2026-13910: Insufficient policy enforcement in WebXR. Reported by Google on 2026-04-28
[N/A][507239830] Medium CVE-2026-13911: Insufficient data validation in Spellcheck. Reported by Google on 2026-04-28
[N/A][508259433] Medium CVE-2026-13912: Incorrect security UI in Safe Browsing. Reported by Google on 2026-04-30
[N/A][508260619] Medium CVE-2026-13913: Insufficient policy enforcement in Autofill. Reported by Google on 2026-04-30
[N/A][508273690] Medium CVE-2026-13914: Inappropriate implementation in Passwords. Reported by Google on 2026-04-30
[N/A][508275293] Medium CVE-2026-13915: Use after free in Chrome for iOS. Reported by Google on 2026-04-30
[N/A][508283108] Medium CVE-2026-13916: Inappropriate implementation in Chrome for iOS. Reported by Google on 2026-04-30
[N/A][508286935] Medium CVE-2026-13917: Insufficient validation of untrusted input in Chrome for iOS. Reported by Google on 2026-04-30
[N/A][509712284] Medium CVE-2026-13918: Use after free in Chrome for iOS. Reported by Google on 2026-05-05
[N/A][511249430] Medium CVE-2026-13919: Insufficient data validation in Extensions. Reported by Google on 2026-05-08
[N/A][511722559] Medium CVE-2026-13920: Insufficient validation of untrusted input in Media. Reported by Google on 2026-05-10
[N/A][511738175] Medium CVE-2026-13921: Insufficient validation of untrusted input in DeviceBoundSessionCredentials. Reported by Google on 2026-05-10
[N/A][511748106] Medium CVE-2026-13922: Side-channel information leakage in Paint. Reported by Google on 2026-05-10
[N/A][511772034] Medium CVE-2026-13923: Uninitialized Use in GPU. Reported by Google on 2026-05-10
[N/A][511784747] Medium CVE-2026-13924: Insufficient validation of untrusted input in WebView. Reported by Google on 2026-05-10
[N/A][511802911] Medium CVE-2026-13925: Inappropriate implementation in Downloads. Reported by Google on 2026-05-10
[N/A][511814550] Medium CVE-2026-13926: Insufficient validation of untrusted input in Network. Reported by Google on 2026-05-10
[N/A][511826446] Medium CVE-2026-13927: Insufficient validation of untrusted input in UI. Reported by Google on 2026-05-10
[N/A][512162479] Medium CVE-2026-13928: Insufficient validation of untrusted input in Enterprise. Reported by Google on 2026-05-11
[TBD][512249559] Medium CVE-2026-13929: Insufficient validation of untrusted input in DevTools. Reported by LegioSec on 2026-05-12
[N/A][512937764] Medium CVE-2026-13930: Insufficient policy enforcement in Actor. Reported by Google on 2026-05-13
[N/A][512997441] Medium CVE-2026-13931: Inappropriate implementation in Media. Reported by Google on 2026-05-13
[N/A][513001690] Medium CVE-2026-13932: Inappropriate implementation in Sharing. Reported by Google on 2026-05-14
[N/A][513002625] Medium CVE-2026-13933: Insufficient policy enforcement in Passwords. Reported by Google on 2026-05-14
[N/A][513006636] Medium CVE-2026-13934: Insufficient validation of untrusted input in Dawn. Reported by Google on 2026-05-14
[N/A][513009005] Medium CVE-2026-13935: Side-channel information leakage in ComputePressure. Reported by Google on 2026-05-14
[N/A][513044658] Medium CVE-2026-13936: Inappropriate implementation in Passwords. Reported by Google on 2026-05-14
[N/A][513046494] Medium CVE-2026-13937: Insufficient policy enforcement in Passwords. Reported by Google on 2026-05-14
[N/A][513143921] Medium CVE-2026-13938: Integer overflow in Fonts. Reported by Google on 2026-05-14
[N/A][513149760] Medium CVE-2026-13939: Insufficient validation of untrusted input in WebShare. Reported by Google on 2026-05-14
[N/A][513158425] Medium CVE-2026-13940: Uninitialized Use in Cast. Reported by Google on 2026-05-14
[N/A][513183855] Medium CVE-2026-13941: Inappropriate implementation in SiteSettings. Reported by Google on 2026-05-14
[N/A][513186670] Medium CVE-2026-13942: Insufficient validation of untrusted input in Video Capture. Reported by Google on 2026-05-14
[N/A][513204116] Medium CVE-2026-13943: Uninitialized Use in CSS. Reported by Google on 2026-05-14
[N/A][513224212] Medium CVE-2026-13944: Inappropriate implementation in DataTransfer. Reported by Google on 2026-05-14
[N/A][513226551] Medium CVE-2026-13945: Insufficient policy enforcement in Extensions. Reported by Google on 2026-05-14
[N/A][513274039] Medium CVE-2026-13946: Inappropriate implementation in ScriptInjections. Reported by Google on 2026-05-14
[N/A][513280648] Medium CVE-2026-13947: Uninitialized Use in XR. Reported by Google on 2026-05-14
[N/A][513286820] Medium CVE-2026-13948: Insufficient policy enforcement in Extensions. Reported by Google on 2026-05-14
[N/A][513311569] Medium CVE-2026-13949: Insufficient policy enforcement in Payments. Reported by Google on 2026-05-14
[N/A][513360781] Medium CVE-2026-13950: Uninitialized Use in GPU. Reported by Google on 2026-05-15
[N/A][513394321] Medium CVE-2026-13951: Policy bypass in USB. Reported by Google on 2026-05-15
[N/A][513401808] Medium CVE-2026-13952: Inappropriate implementation in PerformanceAPIs. Reported by Google on 2026-05-15
[N/A][513459192] Medium CVE-2026-13953: Inappropriate implementation in SplitView. Reported by Google on 2026-05-15
[N/A][513504934] Medium CVE-2026-13954: Insufficient policy enforcement in XML. Reported by Google on 2026-05-15
[N/A][513508305] Medium CVE-2026-13955: Insufficient validation of untrusted input in CustomTabs. Reported by Google on 2026-05-15
[N/A][513515168] Medium CVE-2026-13956: Incorrect security UI in PageInfo. Reported by Google on 2026-05-15
[N/A][513553557] Medium CVE-2026-13957: Incorrect security UI in Extensions. Reported by Google on 2026-05-15
[N/A][513567306] Medium CVE-2026-13958: Uninitialized Use in Codecs. Reported by Google on 2026-05-15
[N/A][513609249] Medium CVE-2026-13959: Insufficient validation of untrusted input in Blink. Reported by Google on 2026-05-15
[N/A][513714023] Medium CVE-2026-13960: Inappropriate implementation in Passwords. Reported by Google on 2026-05-16
[N/A][513719481] Medium CVE-2026-13961: Insufficient validation of untrusted input in DevTools. Reported by Google on 2026-05-16
[N/A][513721370] Medium CVE-2026-13962: Insufficient data validation in PDF. Reported by Google on 2026-05-16
[N/A][513727626] Medium CVE-2026-13963: Inappropriate implementation in DevTools. Reported by Google on 2026-05-16
[N/A][513735096] Medium CVE-2026-13964: Insufficient policy enforcement in WebView. Reported by Google on 2026-05-16
[N/A][513737952] Medium CVE-2026-13965: Use after free in Oilpan. Reported by Google on 2026-05-16
[N/A][513741393] Medium CVE-2026-13966: Inappropriate implementation in History. Reported by Google on 2026-05-16

[N/A][513751951] Medium CVE-2026-13967: Type Confusion in V8. Reported by Google on 2026-05-16

[N/A][513762145] Medium CVE-2026-13968: Insufficient validation of untrusted input in DevTools. Reported by Google on 2026-05-16

[N/A][513762962] Medium CVE-2026-13969: Uninitialized Use in UI. Reported by Google on 2026-05-16

[N/A][513779283] Medium CVE-2026-13970: Uninitialized Use in Media. Reported by Google on 2026-05-16

[N/A][513780208] Medium CVE-2026-13971: Uninitialized Use in Skia. Reported by Google on 2026-05-16

[N/A][513792140] Medium CVE-2026-13972: Inappropriate implementation in Paint. Reported by Google on 2026-05-16

[N/A][513832989] Medium CVE-2026-13973: Inappropriate implementation in UI. Reported by Google on 2026-05-16

[N/A][513850475] Medium CVE-2026-13974: Integer overflow in Safe Browsing. Reported by Google on 2026-05-16

[N/A][513857658] Medium CVE-2026-13975: Out of bounds read in ANGLE. Reported by Google on 2026-05-16

[N/A][513858286] Medium CVE-2026-13976: Heap buffer overflow in Storage. Reported by Google on 2026-05-16

[N/A][513859894] Medium CVE-2026-13977: Inappropriate implementation in HTMLParser. Reported by Google on 2026-05-16

[N/A][513866949] Medium CVE-2026-13978: Insufficient policy enforcement in PageInfo. Reported by Google on 2026-05-16

[N/A][513988889] Medium CVE-2026-13979: Inappropriate implementation in Paint. Reported by Google on 2026-05-17

[N/A][513989973] Medium CVE-2026-13980: Incorrect security UI in Chrome for iOS. Reported by Google on 2026-05-17

[N/A][513990408] Medium CVE-2026-13981: Inappropriate implementation in Chrome for iOS. Reported by Google on 2026-05-17

[N/A][514006829] Medium CVE-2026-13982: Incorrect security UI in Passwords. Reported by Google on 2026-05-17

[N/A][514009910] Medium CVE-2026-13983: Incorrect security UI in Chrome for iOS. Reported by Google on 2026-05-17

[N/A][514010404] Medium CVE-2026-13984: Incorrect security UI in TabStrip. Reported by Google on 2026-05-17

[N/A][514013849] Medium CVE-2026-13985: Inappropriate implementation in MediaCapture. Reported by Google on 2026-05-17

[N/A][514020959] Medium CVE-2026-13986: Inappropriate implementation in Media UI. Reported by Google on 2026-05-17

[N/A][514039122] Medium CVE-2026-13987: Incorrect security UI in Mobile. Reported by Google on 2026-05-17

[N/A][514040614] Medium CVE-2026-13988: Inappropriate implementation in Paint. Reported by Google on 2026-05-17

[N/A][514056221] Medium CVE-2026-13989: Insufficient policy enforcement in PageInfo. Reported by Google on 2026-05-17

[N/A][514058439] Medium CVE-2026-13990: Insufficient validation of untrusted input in DataTransfer. Reported by Google on 2026-05-17

[N/A][514061117] Medium CVE-2026-13991: Insufficient validation of untrusted input in Chrome for iOS. Reported by Google on 2026-05-17

[N/A][514063409] Medium CVE-2026-13992: Inappropriate implementation in UI. Reported by Google on 2026-05-17

[N/A][514064139] Medium CVE-2026-13993: Incorrect security UI in WebAppInstalls. Reported by Google on 2026-05-17

[N/A][514067416] Medium CVE-2026-13994: Inappropriate implementation in Credential Management. Reported by Google on 2026-05-17

[N/A][514067524] Medium CVE-2026-13995: Insufficient validation of untrusted input in Autofill. Reported by Google on 2026-05-17

[N/A][514068972] Medium CVE-2026-13996: Incorrect security UI in Permissions. Reported by Google on 2026-05-17

[N/A][514069689] Medium CVE-2026-13997: Incorrect security UI in Extensions. Reported by Google on 2026-05-17

[N/A][514070501] Medium CVE-2026-13998: Incorrect security UI in File Input. Reported by Google on 2026-05-17

[N/A][514071697] Medium CVE-2026-13999: Inappropriate implementation in Extensions. Reported by Google on 2026-05-17

[N/A][514461552] Medium CVE-2026-14000: Inappropriate implementation in XML. Reported by Google on 2026-05-19

[N/A][514481943] Medium CVE-2026-14001: Inappropriate implementation in Network. Reported by Google on 2026-05-19

[N/A][514489361] Medium CVE-2026-14002: Inappropriate implementation in Geolocation. Reported by Google on 2026-05-19

[N/A][514503077] Medium CVE-2026-14003: Insufficient policy enforcement in Extensions. Reported by Google on 2026-05-19

[N/A][514538751] Medium CVE-2026-14004: Inappropriate implementation in CSS. Reported by Google on 2026-05-19

[N/A][514740273] Medium CVE-2026-14005: Use after free in Omnibox. Reported by Google on 2026-05-19

[N/A][515423596] Medium CVE-2026-14006: Use after free in Navigation. Reported by Google on 2026-05-21

[N/A][516425999] Medium CVE-2026-14007: Insufficient policy enforcement in PermissionsPolicy. Reported by Google on 2026-05-25

[N/A][516781007] Medium CVE-2026-14008: Uninitialized Use in WebXR. Reported by Google on 2026-05-26

[N/A][516819850] Medium CVE-2026-14009: Insufficient data validation in Passwords. Reported by Google on 2026-05-26

[N/A][516924151] Medium CVE-2026-14010: Uninitialized Use in Codecs. Reported by Google on 2026-05-27

[N/A][516944556] Medium CVE-2026-14011: Out of bounds read in SurfaceCapture. Reported by Google on 2026-05-27

[N/A][517110749] Medium CVE-2026-14012: Side-channel information leakage in CSS. Reported by Google on 2026-05-27

[N/A][517114175] Medium CVE-2026-14013: Inappropriate implementation in SVG. Reported by Google on 2026-05-27

[N/A][517155893] Medium CVE-2026-14014: Inappropriate implementation in Paint. Reported by Google on 2026-05-27

[N/A][517207235] Medium CVE-2026-14015: Inappropriate implementation in WebRTC. Reported by Google on 2026-05-27

[N/A][517234388] Medium CVE-2026-14016: Insufficient policy enforcement in SVG. Reported by Google on 2026-05-27

[N/A][517241992] Medium CVE-2026-14017: Inappropriate implementation in Navigation. Reported by Google on 2026-05-27

[N/A][517350251] Medium CVE-2026-14018: Use after free in Updater. Reported by Google on 2026-05-28

[N/A][517455455] Medium CVE-2026-14019: Inappropriate implementation in Passwords. Reported by Google on 2026-05-28

[N/A][517598518] Medium CVE-2026-14020: Insufficient validation of untrusted input in WebXR. Reported by Google on 2026-05-28

[N/A][517731924] Medium CVE-2026-14021: Insufficient validation of untrusted input in StorageAccessAPI. Reported by Google on 2026-05-29

[N/A][517791835] Medium CVE-2026-14022: Insufficient validation of untrusted input in Network. Reported by Google on 2026-05-29

[N/A][518063436] Medium CVE-2026-14023: Insufficient validation of untrusted input in SanitizerAPI. Reported by Google on 2026-05-30

[N/A][518245882] Medium CVE-2026-14024: Use after free in Ozone. Reported by Google on 2026-05-30

[$2000][506482786] Low CVE-2026-14025: Use after free in Views. Reported by asjidkalam on 2026-04-26
[$1000][507263861] Low CVE-2026-14026: Incorrect security UI in SplitView. Reported by adisahilna35@gmail.com on 2026-04-28
[TBD][361375787] Low CVE-2026-14027: Use after free in SignIn. Reported by Sven Dysthe (@svn-dys) on 2024-08-21
[TBD][401816601] Low CVE-2026-14028: Incorrect security UI in Chrome for iOS. Reported by Ameen Basha M K on 2025-03-09
[TBD][488762971] Low CVE-2026-14030: Incorrect security UI in SplitView. Reported by Khalil Zhani on 2026-03-01
[N/A][495459838] Low CVE-2026-14031: Incorrect security UI in File Input. Reported by Google on 2026-03-23
[N/A][495783474] Low CVE-2026-14032: Use after free in Bluetooth. Reported by Google on 2026-03-24
[N/A][495848160] Low CVE-2026-14033: Insufficient policy enforcement in Media. Reported by Google on 2026-03-24
[N/A][496368832] Low CVE-2026-14034: Inappropriate implementation in WebXR. Reported by Google on 2026-03-26
[N/A][496371586] Low CVE-2026-14035: Insufficient policy enforcement in Bluetooth. Reported by Google on 2026-03-26
[N/A][496411061] Low CVE-2026-14036: Insufficient policy enforcement in Bluetooth. Reported by Google on 2026-03-26
[N/A][496522611] Low CVE-2026-14037: Insufficient policy enforcement in GPU. Reported by Google on 2026-03-26
[N/A][497241148] Low CVE-2026-14038: Insufficient validation of untrusted input in New Tab Page. Reported by Google on 2026-03-28
[N/A][497358012] Low CVE-2026-14039: Insufficient policy enforcement in GetUserMedia. Reported by Google on 2026-03-29
[N/A][497488593] Low CVE-2026-14040: Use after free in BrowserTag. Reported by Google on 2026-03-29
[N/A][497544822] Low CVE-2026-14041: Insufficient policy enforcement in Serial. Reported by Google on 2026-03-29
[N/A][497558336] Low CVE-2026-14042: Inappropriate implementation in Isolated Web Apps. Reported by Google on 2026-03-29
[N/A][497632232] Low CVE-2026-14043: Use after free in GetUserMedia. Reported by Google on 2026-03-30
[N/A][497670996] Low CVE-2026-14044: Use after free in ANGLE. Reported by Google on 2026-03-30
[N/A][497723649] Low CVE-2026-14045: Insufficient validation of untrusted input in Network. Reported by Google on 2026-03-30
[N/A][497959724] Low CVE-2026-14046: Inappropriate implementation in CustomTabs. Reported by Google on 2026-03-30
[N/A][498864176] Low CVE-2026-14047: Insufficient policy enforcement in Extensions. Reported by Google on 2026-04-02
[N/A][499189601] Low CVE-2026-14048: Use after free in Chromecast. Reported by Google on 2026-04-03
[N/A][501659888] Low CVE-2026-14049: Inappropriate implementation in GPU. Reported by Google on 2026-04-11
[N/A][501708647] Low CVE-2026-14050: Insufficient policy enforcement in Passwords. Reported by Google on 2026-04-11
[N/A][501747804] Low CVE-2026-14051: Uninitialized Use in GamepadAPI. Reported by Google on 2026-04-11
[N/A][501810874] Low CVE-2026-14052: Insufficient policy enforcement in FileSystem. Reported by Google on 2026-04-12
[N/A][501836539] Low CVE-2026-14053: Insufficient policy enforcement in Extensions. Reported by Google on 2026-04-12
[N/A][501851312] Low CVE-2026-14054: Insufficient policy enforcement in Network. Reported by Google on 2026-04-12
[N/A][501857663] Low CVE-2026-14055: Insufficient validation of untrusted input in Device Trust. Reported by Google on 2026-04-12
[N/A][501888426] Low CVE-2026-14056: Insufficient validation of untrusted input in Media. Reported by Google on 2026-04-12
[N/A][502212647] Low CVE-2026-14057: Insufficient policy enforcement in FedCM. Reported by Google on 2026-04-13
[N/A][502354038] Low CVE-2026-14058: Policy bypass in Parser. Reported by Google on 2026-04-14
[N/A][502363986] Low CVE-2026-14059: Insufficient policy enforcement in Related-Website-Sets. Reported by Google on 2026-04-14
[N/A][502372527] Low CVE-2026-14060: Insufficient validation of untrusted input in Chromoting. Reported by Google on 2026-04-14
[N/A][502434484] Low CVE-2026-14061: Inappropriate implementation in Dawn. Reported by Google on 2026-04-14
[N/A][502448128] Low CVE-2026-14062: Inappropriate implementation in Views. Reported by Google on 2026-04-14
[N/A][502473563] Low CVE-2026-14063: Out of bounds memory access in Chromecast. Reported by Google on 2026-04-14
[N/A][502714977] Low CVE-2026-14064: Use after free in PageInfo. Reported by Google on 2026-04-15
[N/A][503617508] Low CVE-2026-14065: Insufficient validation of untrusted input in PageInfo. Reported by Google on 2026-04-17
[N/A][503779807] Low CVE-2026-14066: Insufficient validation of untrusted input in Chrome for iOS. Reported by Google on 2026-04-17
[N/A][504069465] Low CVE-2026-14067: Use after free in Chrome for iOS. Reported by Google on 2026-04-18
[N/A][504210171] Low CVE-2026-14068: Inappropriate implementation in Omnibox. Reported by Google on 2026-04-19
[N/A][505136542] Low CVE-2026-14069: Integer overflow in WebNN. Reported by Google on 2026-04-21
[N/A][505137978] Low CVE-2026-14070: Uninitialized Use in WebNN. Reported by Google on 2026-04-21
[N/A][506143724] Low CVE-2026-14071: Side-channel information leakage in WebAudio. Reported by Google on 2026-04-24
[N/A][507099867] Low CVE-2026-14072: Incorrect security UI in SplitView. Reported by FARISSAL B on 2026-04-28
[N/A][507237563] Low CVE-2026-14073: Insufficient policy enforcement in WebXR. Reported by Google on 2026-04-28
[N/A][511743480] Low CVE-2026-14074: Side-channel information leakage in WebAuthentication. Reported by Google on 2026-05-10
[N/A][511808800] Low CVE-2026-14075: Policy bypass in Chrome for iOS. Reported by Google on 2026-05-10
[N/A][511815165] Low CVE-2026-14076: Policy bypass in Network. Reported by Google on 2026-05-10
[TBD][511869411] Low CVE-2026-14077: Incorrect security UI in Select. Reported by pwn.ai on 2026-05-11
[N/A][512953564] Low CVE-2026-14078: Policy bypass in WebRTC. Reported by Google on 2026-05-13
[N/A][512971938] Low CVE-2026-14079: Policy bypass in Network. Reported by Google on 2026-05-13
[N/A][512997517] Low CVE-2026-14080: Insufficient validation of untrusted input in TabSwitcher. Reported by Google on 2026-05-13
[N/A][513030698] Low CVE-2026-14081: Insufficient policy enforcement in DevTools. Reported by Google on 2026-05-14

[N/A][513049578] Low CVE-2026-14082: Race in Storage. Reported by Google on 2026-05-14

[N/A][513128322] Low CVE-2026-14083: Insufficient validation of untrusted input in HTML. Reported by Google on 2026-05-14

[N/A][513138148] Low CVE-2026-14084: Insufficient validation of untrusted input in Chromoting. Reported by Google on 2026-05-14

[N/A][513155863] Low CVE-2026-14085: Side-channel information leakage in CSS. Reported by Google on 2026-05-14

[N/A][513169718] Low CVE-2026-14086: Insufficient policy enforcement in HID. Reported by Google on 2026-05-14

[N/A][513177237] Low CVE-2026-14087: Insufficient validation of untrusted input in WebNN. Reported by Google on 2026-05-14

[N/A][513178869] Low CVE-2026-14088: Uninitialized Use in Canvas. Reported by Google on 2026-05-14

[N/A][513188254] Low CVE-2026-14089: Insufficient validation of untrusted input in PopupBlocker. Reported by Google on 2026-05-14

[N/A][513194241] Low CVE-2026-14090: Out of bounds read in CameraCapture. Reported by Google on 2026-05-14

[N/A][513208773] Low CVE-2026-14091: Use after free in DevTools. Reported by Google on 2026-05-14

[N/A][513212892] Low CVE-2026-14092: Insufficient policy enforcement in Privacy. Reported by Google on 2026-05-14

[N/A][513240099] Low CVE-2026-14093: Use after free in Cast. Reported by Google on 2026-05-14

[N/A][513264273] Low CVE-2026-14094: Use after free in Installer. Reported by Google on 2026-05-14

[N/A][513271007] Low CVE-2026-14095: Insufficient validation of untrusted input in Browser. Reported by Google on 2026-05-14

[N/A][513310821] Low CVE-2026-14096: Object lifecycle issue in Input. Reported by Google on 2026-05-14

[N/A][513333529] Low CVE-2026-14097: Inappropriate implementation in WebAppInstalls. Reported by Google on 2026-05-14

[N/A][513375767] Low CVE-2026-14098: Inappropriate implementation in CSS. Reported by Google on 2026-05-15

[N/A][513382161] Low CVE-2026-14099: Use after free in Chrome for iOS. Reported by Google on 2026-05-15

[N/A][513383891] Low CVE-2026-14100: Insufficient data validation in NetworkCache. Reported by Google on 2026-05-15

[N/A][513454805] Low CVE-2026-14101: Insufficient policy enforcement in Sandbox. Reported by Google on 2026-05-15

[N/A][513455047] Low CVE-2026-14102: Use after free in Passwords. Reported by Google on 2026-05-15

[N/A][513465245] Low CVE-2026-14103: Use after free in SSL. Reported by Google on 2026-05-15

[N/A][513484193] Low CVE-2026-14104: Insufficient validation of untrusted input in WebAppInstalls. Reported by Google on 2026-05-15

[N/A][513528117] Low CVE-2026-14105: Insufficient policy enforcement in Speech. Reported by Google on 2026-05-15

[N/A][513532778] Low CVE-2026-14106: Insufficient validation of untrusted input in Text. Reported by Google on 2026-05-15

[N/A][513544566] Low CVE-2026-14107: Use after free in Scheduling. Reported by Google on 2026-05-15

[N/A][513689974] Low CVE-2026-14108: Use after free in PDFium. Reported by Google on 2026-05-15

[N/A][513694957] Low CVE-2026-14109: Insufficient policy enforcement in Mojo. Reported by Google on 2026-05-16

[N/A][513698452] Low CVE-2026-14110: Inappropriate implementation in DarkMode. Reported by Google on 2026-05-16

[N/A][513710926] Low CVE-2026-14111: Use after free in WebProtect. Reported by Google on 2026-05-16

[N/A][513713946] Low CVE-2026-14112: Inappropriate implementation in Enterprise. Reported by Google on 2026-05-16

[N/A][513737335] Low CVE-2026-14113: Use after free in Updater. Reported by Google on 2026-05-16

[N/A][513743129] Low CVE-2026-14114: Inappropriate implementation in WebAppInstalls. Reported by Google on 2026-05-16

[N/A][513745699] Low CVE-2026-14115: Insufficient validation of untrusted input in Cast. Reported by Google on 2026-05-16

[N/A][513747800] Low CVE-2026-14116: Insufficient validation of untrusted input in DevTools. Reported by Google on 2026-05-16

[N/A][513751020] Low CVE-2026-14117: Insufficient validation of untrusted input in DevTools. Reported by Google on 2026-05-16

[N/A][513772764] Low CVE-2026-14118: Insufficient data validation in DevTools. Reported by Google on 2026-05-16

[N/A][513775483] Low CVE-2026-14119: Type Confusion in Bluetooth. Reported by Google on 2026-05-16

[N/A][513777411] Low CVE-2026-14120: Inappropriate implementation in DevTools. Reported by Google on 2026-05-16

[N/A][513789382] Low CVE-2026-14121: Use after free in Chromoting. Reported by Google on 2026-05-16

[N/A][513824891] Low CVE-2026-14122: Insufficient validation of untrusted input in WebAppInstalls. Reported by Google on 2026-05-16

[N/A][513856644] Low CVE-2026-14123: Incorrect security UI in Chrome for iOS. Reported by Google on 2026-05-16

[N/A][513867710] Low CVE-2026-14124: Inappropriate implementation in CredentialProvider. Reported by Google on 2026-05-16

[N/A][513918431] Low CVE-2026-14125: Uninitialized Use in ANGLE. Reported by Google on 2026-05-17

[N/A][513992796] Low CVE-2026-14126: Incorrect security UI in UI. Reported by Google on 2026-05-17

[N/A][514009654] Low CVE-2026-14127: Inappropriate implementation in Printing. Reported by Google on 2026-05-17

[N/A][514015836] Low CVE-2026-14128: Insufficient data validation in Chrome for iOS. Reported by Google on 2026-05-17

[N/A][514018024] Low CVE-2026-14129: Incorrect security UI in PreviewTab. Reported by Google on 2026-05-17

[N/A][514019522] Low CVE-2026-14130: Incorrect security UI in Omnibox. Reported by Google on 2026-05-17

[N/A][514020982] Low CVE-2026-14131: Insufficient validation of untrusted input in WebAppInstalls. Reported by Google on 2026-05-17

[N/A][514039492] Low CVE-2026-14132: Inappropriate implementation in WebXR. Reported by Google on 2026-05-17

[N/A][514039947] Low CVE-2026-14133: Race in History Embeddings. Reported by Google on 2026-05-17

[N/A][514055973] Low CVE-2026-14134: Inappropriate implementation in Autofill. Reported by Google on 2026-05-17

[N/A][514058566] Low CVE-2026-14135: Insufficient validation of untrusted input in Network. Reported by Google on 2026-05-17

[N/A][514068611] Low CVE-2026-14136: Incorrect security UI in Chrome for iOS. Reported by Google on 2026-05-17

[N/A][514070067] Low CVE-2026-14137: Insufficient validation of untrusted input in Chrome for iOS. Reported by Google on 2026-05-17

[N/A][514071775] Low CVE-2026-14138: Inappropriate implementation in WebAppInstalls. Reported by Google on 2026-05-17

[N/A][514072495] Low CVE-2026-14139: Inappropriate implementation in TabStrip. Reported by Google on 2026-05-17

[N/A][514072607] Low CVE-2026-14140: Insufficient validation of untrusted input in Input. Reported by Google on 2026-05-17

[N/A][514072867] Low CVE-2026-14141: Incorrect security UI in Document Picture-in-Picture. Reported by Google on 2026-05-17

[N/A][514073460] Low CVE-2026-14142: Inappropriate implementation in Extensions. Reported by Google on 2026-05-17

[N/A][514075028] Low CVE-2026-14143: Incorrect security UI in Passwords. Reported by Google on 2026-05-17

[N/A][514079793] Low CVE-2026-14144: Incorrect security UI in Views. Reported by Google on 2026-05-17

[N/A][514485825] Low CVE-2026-14145: Inappropriate implementation in CSS. Reported by Google on 2026-05-19

[N/A][514550047] Low CVE-2026-14146: Inappropriate implementation in CSS. Reported by Google on 2026-05-19

[N/A][514632767] Low CVE-2026-14147: Inappropriate implementation in CSS. Reported by Google on 2026-05-19

[N/A][515426873] Low CVE-2026-14148: Type Confusion in CSS. Reported by Google on 2026-05-21

[N/A][515427046] Low CVE-2026-14149: Use after free in Audio. Reported by Google on 2026-05-21

[N/A][517376041] Low CVE-2026-14150: Insufficient validation of untrusted input in Speech. Reported by Google on 2026-05-28

[N/A][517381770] Low CVE-2026-14151: Inappropriate implementation in AI. Reported by Google on 2026-05-28

[N/A][517534944] Low CVE-2026-14152: Out of bounds write in ANGLE. Reported by Google on 2026-05-28

[N/A][517684077] Low CVE-2026-14153: Inappropriate implementation in Glic. Reported by Google on 2026-05-29

[N/A][517741170] Low CVE-2026-14154: Inappropriate implementation in DevTools. Reported by Google on 2026-05-29

[N/A][518246925] Low CVE-2026-14155: Insufficient policy enforcement in StorageAccessAPI. Reported by Google on 2026-05-30

[N/A][518247789] Low CVE-2026-14156: Policy bypass in StorageAccessAPI. Reported by Google on 2026-05-30

We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.

Many of our security bugs are detected using AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.

Interested in switching release channels? Find out how here. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.

Daniel Yip

Google Chrome

Stable Channel Update for ChromeOS / ChromeOS Flex

2026-06-26T12:01:01.666-07:00

The ChromeOS Stable channel is being updated to OS version 16667.55.0 (Browser version 149.0.7827.226) for most ChromeOS devices.

If you find new issues, please let us know one of the following ways:

File a bug
Visit our ChromeOS communities

General: Chromebook Help Community
Beta Specific: ChromeOS Beta Help Community

Report an issue or send feedback on Chrome
Interested in switching channels? Find out how.

Luis Menezes

Google ChromeOS

Chrome Dev for Desktop Update

2026-06-26T07:58:33.364-07:00

The Dev channel has been updated to 151.0.7912.0 for Windows, Mac and Linux.

A partial list of changes is available in the Git log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.

Chrome Release Team
Google Chrome

Chrome for Android Update

2026-06-25T17:00:00.000-07:00

Hi, everyone! We've just released Chrome 149 (149.0.7827.200) for Android. It'll become available on Google Play over the next few days.

This release includes stability and performance improvements. You can see a full list of the changes in the Git log. If you find a new issue, please let us know by filing a bug.

Android releases contain the same security fixes as their corresponding Desktop releases (Windows & Mac: 149.0.7827.200/201, Linux: 149.0.7872.200) unless otherwise noted.

Harry Souders

Google Chrome

Long Term Support Channel Update for ChromeOS

2026-06-25T14:11:43.320-07:00

A new LTS-144 version 144.0.7559.256(Platform Version: 16503.88.0), is being rolled out for most ChromeOS devices.

This version includes selected security fixes including:

519258799	High	CVE-2026-12034	Insufficient validation of untrusted input
499449324	High	CVE-2026-7922	Use after free in ServiceWorker
523677844	Critical	CVE-2026-13033	Out of bounds read in Blink>InterestGroups
506653647	High	CVE-2026-9970	Use after free in WebGL
511765713	High	CVE-2026-10969	Insufficient validation of untrusted input in Extensions
513609324	High	CVE-2026-10003	Use after free in Views
501575979	High	CVE-2026-9933	Use after free in Input
513208588	High	CVE-2026-9993	Use after free in Views
504710769	High	CVE-2026-9961	Use after free in SurfaceCapture
513256572	High	CVE-2026-9995	Use after free in WebXR
519728275	Critical	CVE-2026-12439	Use after free in Digital Credentials
487357841	High	CVE-2026-10905	Use after free in Network on Android)
502978647	High	CVE-2026-8557	Use after free in Accessibility
498783665	High	CVE-2026-9903	Insufficient validation of untrusted input in Site Isolation
493957495	Medium	CVE-2026-7339	Heap buffer overflow in WebRTC
504629701	High	CVE-2026-8559	Integer overflow in Internationalization
499891888	High	CVE-2026-6920	Out of bounds read in GPU
499565267	High	CVE-2026-8524	Out of bounds write in WebAudio
513754619	High	CVE-2026-10007	Use after free in SVG
516942828	Critical	CVE-2026-12008	Use after free
519731619	Critical	CVE-2026-12440	Use after free in DigitalCredentials
497880137	High	CVE-2026-6360	Use after free in FileSystem
520157118	Critical	CVE-2026-12441	Use after free in File Input
500104917	High	CVE-2026-7348	Use after free in Codecs

Release notes for LTS-144 can be found here

Want to know more about Long-term Support? Click here

Andy Wu
Google Chrome OS

Stable Channel Update for Desktop

2026-06-25T13:55:25.118-07:00

The Stable channel has been updated to 149.0.7827.200/201 for Windows and Mac and 149.0.7827.200 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log

Security Fixes and Rewards

Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.

This update includes 3 security fixes. Please see the Chrome Security Pagefor more information.

[N/A][513138301] High CVE-2026-13281: Integer overflow in Mojo. Reported by Google on 2026-05-14

[N/A][517522620] High CVE-2026-13282: Use after free in Payments. Reported by Google on 2026-05-28

[N/A][522561151] High CVE-2026-13283: Use after free in AdFilter. Reported by Google on 2026-06-11

We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.

Many of our security bugs are detected using AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.

Daniel Yip

Google Chrome

Chrome Dev for Android Update

2026-06-25T08:58:32.571-07:00

Hi everyone! We've just released Chrome Dev 151 (151.0.7910.0) for Android. It's now available on Google Play.

You can see a partial list of the changes in the Git log. For details on new features, check out the Chromium blog, and for details on web platform updates, check here.

If you find a new issue, please let us know by filing a bug.

Chrome Release Team
Google Chrome

Chrome Stable for iOS Update

2026-06-24T14:43:32.251-07:00

Hi everyone! We've just released Chrome Stable 150 (150.0.7871.51) for iOS; it'll become available on App Store in the next few hours.

This release includes stability and performance improvements. You can see a full list of the changes in the Git log. If you find a new issue, please let us know by filing a bug.

Chrome Release Team
Google Chrome

Chrome for Android Update

2026-06-24T13:57:28.841-07:00

Hello Everyone! We've just released Chrome 150 (150.0.7871.46) for Android to a small percentage of users. It'll become available on Google Play over the next few days. You can find more details about early Stable releases here.

This release includes stability and performance improvements. You can see a full list of the changes in the Git log. If you find a new issue, please let us know by filing a bug.

Krishna Govind
Google Chrome

Early Stable Update for Desktop

2026-06-24T12:05:57.103-07:00

The Stable channel has been updated to 150.0.7871.46/.47 for Windows and Mac as part of our early stable release to a small percentage of users. A full list of changes in this build is available in the log.

You can find more details about early Stable releases here.

Daniel Yip

Google Chrome

Chrome Beta for iOS Update

2026-06-24T11:58:32.892-07:00

Hi everyone! We've just released Chrome Beta 150 (150.0.7871.52) for iOS; it'll become available on App Store in the next few days.

You can see a partial list of the changes in the Git log. If you find a new issue, please let us know by filing a bug.

Chrome Release Team
Google Chrome

Chrome Beta for Desktop Update

2026-06-24T10:13:32.649-07:00

The Beta channel has been updated to 150.0.7871.46 for Windows, Mac and Linux.

Chrome Release Team
Google Chrome

Chrome Beta for Android Update

2026-06-24T06:13:32.305-07:00

Hi everyone! We've just released Chrome Beta 150 (150.0.7871.46) for Android. It's now available on Google Play.

You can see a partial list of the changes in the Git log. For details on new features, check out the Chromium blog, and for details on web platform updates, check here.

If you find a new issue, please let us know by filing a bug.

Chrome Release Team
Google Chrome

Chrome for Android Update

2026-06-23T16:00:00.000-07:00

Hi, everyone! We've just released Chrome 149 (149.0.7827.197) for Android. It'll become available on Google Play over the next few days.

This release includes stability and performance improvements. You can see a full list of the changes in the Git log. If you find a new issue, please let us know by filing a bug.

Android releases contain the same security fixes as their corresponding Desktop releases (Windows & Mac: 149.0.7827.155/156, Linux: 149.0.7872.155) unless otherwise noted.

Harry Souders

Google Chrome

Extended Stable Update for Desktop

2026-06-23T11:59:57.405-07:00

The Extended Stable channel has been updated to 148.0.7778.280 for Windows and Mac which will roll out over the coming days/weeks.

A full list of changes in this build is available in the log. Interested in switching release channels? Find out how here. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.

Daniel Yip

Google Chrome

Stable Channel Update for Desktop

2026-06-23T11:37:55.829-07:00

The Stable channel has been updated to 149.0.7827.196/197 for Windows and Mac and 149.0.7827.196 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log

Security Fixes and Rewards

This update includes 18 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information

[TBD][520656244] Critical CVE-2026-13028: Use after free in WebGL. Reported by anonymous on 2026-06-07

[N/A][523591974] Critical CVE-2026-13032: Use after free in WebGL. Reported by Google on 2026-06-13

[N/A][523677844] Critical CVE-2026-13033: Out of bounds read in Blink>InterestGroups. Reported by Google on 2026-06-13

[N/A][523740781] Critical CVE-2026-13038: Use after free in Autofill. Reported by Google on 2026-06-14

[N/A][511776603] High CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials. Reported by Google on 2026-05-10

[N/A][516734537] High CVE-2026-13022: Inappropriate implementation in Autofill. Reported by Google on 2026-05-26

[N/A][517080836] High CVE-2026-13023: Uninitialized Use in GPU. Reported by Google on 2026-05-27

[N/A][517148260] High CVE-2026-13024: Insufficient validation of untrusted input in Navigation. Reported by Google on 2026-05-27

[N/A][518043569] High CVE-2026-13025: Insufficient validation of untrusted input in DevTools. Reported by Google on 2026-05-30

[N/A][519728279] High CVE-2026-13026: Use after free in Digital Credentials. Reported by Google on 2026-06-03

[N/A][520543781] High CVE-2026-13027: Use after free in FileSystem. Reported by Google on 2026-06-05

[N/A][521495992] High CVE-2026-13029: Use after free in Web Authentication. Reported by Google on 2026-06-08

[N/A][522840723] High CVE-2026-13030: Uninitialized Use in GPU. Reported by Google on 2026-06-11

[N/A][523308824] High CVE-2026-13031: Use after free in Blink. Reported by Google on 2026-06-12

[N/A][523699355] High CVE-2026-13034: Inappropriate implementation in Passwords. Reported by Google on 2026-06-13

[N/A][523704570] High CVE-2026-13035: Use after free in Bluetooth. Reported by Google on 2026-06-13

[N/A][523711130] High CVE-2026-13036: Use after free in Blink. Reported by Google on 2026-06-13

[N/A][523721871] High CVE-2026-13037: Use after free in WebView. Reported by Google on 2026-06-14

We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.

Many of our security bugs are detected using AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.

Daniel Yip

Google Chrome

Beta Channel Update for ChromeOS / ChromeOS Flex

2026-06-23T11:28:37.216-07:00

The Beta channel is being updated to OS version 16700.25.0 (Browser version 150.0.7871.40) for most ChromeOS devices.

If you find new issues, please let us know one of the following ways:

File a bug
Visit our ChromeOS communities

General: Chromebook Help Community
Beta Specific: ChromeOS Beta Help Community

Report an issue or send feedback on Chrome
Interested in switching channels? Find out how.

Alon Bajayo

Google ChromeOS

Beta Channel Update for ChromeOS / ChromeOS Flex

2026-06-18T11:21:43.705-07:00

The Beta channel is being updated to OS version 16700.20.0 (Browser version 150.0.7871.32) for most ChromeOS devices.

If you find new issues, please let us know one of the following ways:

File a bug
Visit our ChromeOS communities

General: Chromebook Help Community
Beta Specific: ChromeOS Beta Help Community

Report an issue or send feedback on Chrome
Interested in switching channels? Find out how.

Alon Bajayo

Google ChromeOS

Chrome Dev for Android Update

2026-06-18T10:28:32.466-07:00

Hi everyone! We've just released Chrome Dev 151 (151.0.7896.3) for Android. It's now available on Google Play.

You can see a partial list of the changes in the Git log. For details on new features, check out the Chromium blog, and for details on web platform updates, check here.

If you find a new issue, please let us know by filing a bug.

Chrome Release Team
Google Chrome

Chrome Dev for Desktop Update

2026-06-18T07:13:33.274-07:00

The Dev channel has been updated to 151.0.7896.2 for Windows, Mac and Linux.

Chrome Release Team
Google Chrome

Chrome Stable for iOS Update

2026-06-17T14:13:32.471-07:00

Hi everyone! We've just released Chrome Stable 150 (150.0.7871.34) for iOS; it'll become available on App Store in the next few hours.

This release includes stability and performance improvements. You can see a full list of the changes in the Git log. If you find a new issue, please let us know by filing a bug.

Chrome Release Team
Google Chrome

Chrome for Android Update

2026-06-17T14:00:00.000-07:00

Hello Everyone! We've just released Chrome 150 (150.0.7871.28) for Android to a small percentage of users. It'll become available on Google Play over the next few days. You can find more details about early Stable releases here.

This release includes stability and performance improvements. You can see a full list of the changes in the Git log. If you find a new issue, please let us know by filing a bug.

Harry Souders
Google Chrome

Stable Channel Update for ChromeOS / ChromeOS Flex

2026-06-17T13:48:04.973-07:00

The ChromeOS Stable channel is being updated to OS version 16667.47.0 (Browser version 149.0.7827.153) for most ChromeOS devices.

If you find new issues, please let us know one of the following ways:

File a bug
Visit our ChromeOS communities

General: Chromebook Help Community
Beta Specific: ChromeOS Beta Help Community

Report an issue or send feedback on Chrome
Interested in switching channels? Find out how.

Luis Menezes

Google ChromeOS

ChromeOS Vulnerability Rewards Program Reported Bug Fixes:

N/A

Other 3rd Party Security Fixes Included:

High Fixes [LPE] Patchpanel ConnectNamespace PID Gate Bypass Allows CAP_NET_ADMIN Root Netns Operations

Medium Fixes [PSP-376][PowerVR] Resource leak and improper locking in DevmemIntMapPMR error path if remapping with incompatible policy

High Fixes CVE-2026-41157 [PSP-419][PowerVR] OOB Write in CalculateNPOTTwiddleSparsePageMap3D

Android Security fixes can be found here

Chrome Browser Security Fixes:

[$TBD] [517046249] Critical CVE-2026-10902 Use after free in Ozone on 2026-05-27

[$TBD] [516653777] Critical CVE-2026-10899 Use after free in Ozone on 2026-05-26

[$TBD] [516311623] High CVE-2026-10989 Inappropriate implementation in V8 on 2026-05-24

[$TBD] [515465685] High CVE-2026-10988 Use after free in Views on 2026-05-21

[$TBD] [515431687] High CVE-2026-10987 Integer overflow in V8 on 2026-05-21

[$TBD] [514744613] High CVE-2026-10986 Integer overflow in Media on 2026-05-19

[$TBD] [514082801] High CVE-2026-10985 Out of bounds read in Skia on 2026-05-17

[$TBD] [513947609] High CVE-2026-10983 Insufficient validation of untrusted input in Dawn on 2026-05-16

[$TBD] [513946753] Critical CVE-2026-10898 Stack buffer overflow in GPU on 2026-05-16

[$TBD] [513774197] High CVE-2026-10982 Use after free in WebXR on 2026-05-16

[$TBD] [513762354] High CVE-2026-10981 Insufficient validation of untrusted input in Codecs on 2026-05-16

[$TBD] [513713927] High CVE-2026-10980 Insufficient validation of untrusted input in DevTools on 2026-05-15

[$TBD] [513543143] Critical CVE-2026-10897 Out of bounds write in GPU on 2026-05-15

[$TBD] [513468021] High CVE-2026-10979 Out of bounds read in ANGLE on 2026-05-15

[$TBD] [513454018] Critical CVE-2026-10895 Use after free in Ozone on 2026-05-15

[$TBD] [513445101] Critical CVE-2026-10894 Use after free in Printing on 2026-05-14

[$TBD] [513340227] High CVE-2026-10977 Uninitialized Use in Skia on 2026-05-14

[$TBD] [513249847] High CVE-2026-10976 Uninitialized Use in Dawn on 2026-05-14

[$TBD] [513231432] Critical CVE-2026-10893 Use after free in Chromoting on 2026-05-14

[$TBD] [513160681] Critical CVE-2026-10891 Use after free in GFX on 2026-05-14

[$TBD] [513154132] High CVE-2026-10975 Use after free in WebRTC on 2026-05-14

[$TBD] [513136593] Critical CVE-2026-10890 Use after free in Cast on 2026-05-14

[$TBD] [513135862] High CVE-2026-10974 Insufficient validation of untrusted input in ANGLE on sampler-only structs in ESSL 3.00+ on 2026-05-14

[$TBD] [513042859] High CVE-2026-10973 Uninitialized Use in Dawn on ChromeOS/Linux Mali GPUs in WebGPU on 2026-05-13

[$TBD] [513006660] High CVE-2026-10972 Use after free in Ozone on Linux on 2026-05-13

[$TBD] [513003797] Critical CVE-2026-10889 Out of bounds read in ANGLE on 2026-05-13

[$TBD] [512772489] High CVE-2026-10970 Insufficient validation of untrusted input in InterestGroups on 2026-05-13

[$TBD] [511765713] High CVE-2026-10969 Insufficient validation of untrusted input in Extensions on 2026-05-10

[$TBD] [511713779] High CVE-2026-10966 Insufficient validation of untrusted input in Codecs on 2026-05-10

[$TBD] [511290038] High CVE-2026-10965 Integer overflow in DevTools on 2026-05-08

[$TBD] [511228272] High CVE-2026-10964 Integer overflow in V8 on 2026-05-08

[$TBD] [511218177] High CVE-2026-10963 Integer overflow in V8 on 2026-05-08

[$500.0] [508811477] High CVE-2026-10910 Type Confusion in V8 Reported by [Mufeed VH from Winfunc Research (winfunc.com)] on 2026-05-02

[$1000.0] [508092644] High CVE-2026-10909 Use after free in Dawn on 2026-04-30

[$TBD] [507382702] Medium CVE-2026-11213 Insufficient validation of untrusted input in Reading Mode on 2026-04-28

[$TBD] [507258786] High CVE-2026-10960 Uninitialized Use in Codecs on 2026-04-27

[$TBD] [507216833] Medium CVE-2026-11212 Insufficient policy enforcement in DevTools on 2026-04-27

[$8000.0] [506855825] High CVE-2026-10904 Inappropriate implementation in V8 Reported by [[303f06e3]] on 2026-04-27

[$TBD] [506629455] Medium CVE-2026-11211 Integer overflow in V8 on 2026-04-26

[$TBD] [506473226] Medium CVE-2026-11210 Insufficient policy enforcement in Safe Browsing on 2026-04-25

[$TBD] [506392934] Low CVE-2026-11309 Insufficient policy enforcement in History on 2026-04-25

[$TBD] [506391032] Medium CVE-2026-11209 Insufficient policy enforcement in Passwords on 2026-04-25

[$TBD] [506387278] Medium CVE-2026-11208 Use after free in Codecs on 2026-04-25

[$TBD] [506377279] High CVE-2026-10957 Use after free in Glic on 2026-04-25

[$TBD] [506375731] High CVE-2026-10956 Use after free in MimeHandlerView on 2026-04-25

[$TBD] [506150628] High CVE-2026-10954 Use after free in Actor on 2026-04-24

[$TBD] [506127858] Medium CVE-2026-11207 Insufficient validation of untrusted input in Autofill on 2026-04-24

[$TBD] [505945112] Low CVE-2026-11308 Inappropriate implementation in Extensions on 2026-04-23

[$TBD] [505815080] Critical CVE-2026-10888 Use after free in Cast Streaming on 2026-04-23

[$2000.0] [505427216] Medium CVE-2026-11206 Policy bypass in ServiceWorker Reported by [David Bors, Catalin Iovita ] on 2026-04-23

[$2000.0] [505371980] Medium CVE-2026-10995 Heap buffer overflow in TabStrip Reported by [] on 2026-04-22

[$TBD] [505068950] Low CVE-2026-11201 Use after free in ServiceWorker
on 2026-04-21

[$TBD] [505096898] Critical CVE-2026-10886 Use after free in FileSystem on 2026-04-21

[$2000.0] [505045913] High CVE-2026-10908 Use after free in FullScreen Reported by [Mihnea Nicolau] on 2026-04-21

[$2000.0] [504820809] Medium CVE-2026-10994 Uninitialized Use in ANGLE Reported by [Mufeed VH from Winfunc Research (winfunc.com)] on 2026-04-21

[$TBD] [504644843] High CVE-2026-10949 Heap buffer overflow in Video on 2026-04-20

[$TBD] [504597736] High CVE-2026-10947 Use after free in WebRTC on 2026-04-20

[$TBD] [504599749] High CVE-2026-10948 Use after free in WebRTC on 2026-04-20

[$TBD] [504587797] High CVE-2026-10946 Heap buffer overflow in Media on 2026-04-20

[$TBD] [504579798] Medium CVE-2026-11200 Inappropriate implementation in WebRTC on 2026-04-20

[$TBD] [504572664] Medium CVE-2026-11199 Insufficient validation of untrusted input in WebRTC on 2026-04-20

[$TBD] [504551617] Low CVE-2026-11307 Use after free in PDFium on 2026-04-20

[$TBD] [504548949] Low CVE-2026-11306 Use after free in PDFium on 2026-04-20

[$TBD] [504545544] Low CVE-2026-11305 Use after free in PDFium on 2026-04-20

[$TBD] [504418475] Low CVE-2026-11304 Use after free in PDFium on 2026-04-19

[$TBD] [504417768] High CVE-2026-10945 Use after free in PDF on 2026-04-19

[$TBD] [504416752] Low CVE-2026-11303 Use after free in PDFium on 2026-04-19

[$TBD] [504395300] Medium CVE-2026-11198 Insufficient validation of untrusted input in Codecs on 2026-04-19

[$TBD] [504194151] High CVE-2026-10943 Heap-UAF in RtpSenderBase::DetachTrackAndGetStopTask during SDP rollback Reported by [] on 2026-04-19

[$TBD] [504180386] Low CVE-2026-11301 Out of bounds read in LiveCaption on 2026-04-18

[$2000.0] [504160794] Medium CVE-2026-10993 Heap buffer overflow in Skia on the default Rust ICC path on 2026-04-18

[$3000.0] [504073872] Medium CVE-2026-11197 SharedWorker same-origin check bypass for chrome-extension:// — DedicatedWorker hardening (8bde565) not applied to sibling SharedWorker path Reported by [*VEZEKA*] on 2026-04-18

[$TBD] [503958940] High CVE-2026-10941 Out of bounds memory access in Skia on 2026-04-17

[$TBD] [503879106] Medium CVE-2026-11196 Type Confusion in XML on 2026-04-17

[$TBD] [503865896] Medium CVE-2026-11195 Inappropriate implementation in MHTML on 2026-04-17

[$5000.0] [503768143] Critical CVE-2026-10883 Out of bounds write in ANGLE on 2026-04-17

[$TBD] [503719488] Medium CVE-2026-11194 Inappropriate implementation in Network on 2026-04-17

[$3000.0] [503553614] Medium CVE-2026-10991 Use after free in V8 Reported by [Alisa Esage (@alisaesage) ] on 2026-04-17

[$TBD] [503642586] Medium CVE-2026-11193 Insufficient policy enforcement in Password Manager on 2026-04-17

[$TBD] [503617302] Critical CVE-2026-10884 Use after free in Chromecast on 2026-04-17

[$TBD] [503614310] Low CVE-2026-11300 Inappropriate implementation in Permissions on 2026-04-17

[$11000.0] [503422316] High CVE-2026-10903 Use after free in WebRTC on 2026-04-17

[$43000.0] [503420443] Critical CVE-2026-10882 Use after free in Network on 2026-04-16

[$3000.0] [503420438] High CVE-2026-10906 Use after free in WebAuthentication
Reported by [] on 2026-04-16

[$TBD] [503502607] High CVE-2026-10939 Use after free in WebRTC on 2026-04-16

[$TBD] [503490678] Medium CVE-2026-11192 Insufficient validation of untrusted input in Password Manager on 2026-04-16

[$TBD] [503392431] Medium CVE-2026-11191 Out of bounds memory access in ANGLE on 2026-04-16

[$TBD] [503375371] Medium CVE-2026-11190 Insufficient policy enforcement in Extensions on 2026-04-16

[$500.0] [503346647] Low CVE-2026-11225 I identified that the Chrome browser’s Reading List feature introduces an origin confusion issue by reordering domain names. This behavior can mislead users about the true origin of a website. on 2026-04-16

[$TBD] [503197481] Medium CVE-2026-11189 Insufficient validation of untrusted input in DevTools Reported by [lebr0nli of National Yang Ming Chiao Tung University, Dept. of CS, Security and Systems Lab.] on 2026-04-16

[$TBD] [502819675] Medium CVE-2026-11187 Insufficient policy enforcement in Glic on 2026-04-15

[$TBD] [502805170] Medium CVE-2026-11186 Inappropriate implementation in CSS on 2026-04-15

[$TBD] [502784366] Medium CVE-2026-11185 Use after free in V8 on 2026-04-14

[$TBD] [502777516] Medium CVE-2026-11184 Insufficient policy enforcement in Actor on 2026-04-14

[$TBD] [502681591] High CVE-2026-10938 Insufficient validation of untrusted input in Input on 2026-04-14

[$TBD] [502651056] High CVE-2026-10937 Inappropriate implementation in Passwords on 2026-04-14

[$TBD] [502651014] Medium CVE-2026-11182 Inappropriate implementation in SVG on 2026-04-14

[$TBD] [502633299] Medium CVE-2026-11181 Inappropriate implementation in Media Session on 2026-04-14

[$TBD] [502631225] Medium CVE-2026-11180 Policy bypass in SVG on 2026-04-14

[$TBD] [502615170] Medium CVE-2026-11179 Inappropriate implementation in ORB on duplicate X-Content-Type-Options headers leaking JSON arrays on 2026-04-14

[$TBD] [502598424] Low CVE-2026-11299 Out of bounds read in Fonts on 32-bit via integer wraparound in Buffer::ReadU8 bounds check with crafted TTC font offset. on 2026-04-14

[$TBD] [502449864] Medium CVE-2026-11177 Use after free in Omnibox Reported by [gevakun] on 2026-04-14

[$500.0] [502461760] Low CVE-2026-11224 Use after free in Chromoting Reported by [David Bors, Catalin Iovita] on 2026-04-14

[$TBD] [502493950] Low CVE-2026-11296 Inappropriate implementation in ImageCapture on 2026-04-14

[$TBD] [502439789] High CVE-2026-10936 Type Confusion in V8 on 2026-04-14

[$TBD] [502403953] Low CVE-2026-11294 Inappropriate implementation in Passwords on 2026-04-13

[$TBD] [502371717] Medium CVE-2026-11176 Inappropriate implementation in Media on 2026-04-13

[$TBD] [502358901] Low CVE-2026-11292 Policy bypass in Blink on 2026-04-13

[$TBD] [502348223] Medium CVE-2026-11174 Insufficient policy enforcement in Site Isolation on 2026-04-13

[$TBD] [502337304] Medium CVE-2026-11173 Out of bounds write in V8 on 2026-04-13

[$TBD] [502322596] Medium CVE-2026-11170 Inappropriate implementation in Chromoting on 2026-04-13

[$TBD] [502322843] Medium CVE-2026-11171 Integer overflow in Blink on 2026-04-13

[$TBD] [502285273] Medium CVE-2026-11169 Inappropriate implementation in XML on 2026-04-13

[$TBD] [502256049] Medium CVE-2026-11168 Insufficient policy enforcement in Extensions on 2026-04-13

[$TBD] [502239897] Low CVE-2026-11289 Side-channel information leakage in Paint on 2026-04-13

[$TBD] [502231588] Low CVE-2026-11288 Policy bypass in CSS on 2026-04-13

[$TBD] [502118936] Medium CVE-2026-11166 Inappropriate implementation in SVG on 2026-04-13

[$TBD] [502110170] Low CVE-2026-11286 Insufficient validation of untrusted input in Wallet on 2026-04-13

[$TBD] [502089411] Medium CVE-2026-11164 Use after free in Blink on 2026-04-13

[$TBD] [502073069] Low CVE-2026-11284 Side-channel information leakage in PerformanceAPIs on 2026-04-13

[$TBD] [502035074] Medium CVE-2026-11162 Insufficient policy enforcement in CSS on 2026-04-12

[$TBD] [502023400] Low CVE-2026-11282 Policy bypass in Sandbox on 2026-04-12

[$TBD] [501920294] Medium CVE-2026-11161 Insufficient data validation in DataTransfer on 2026-04-12

[$TBD] [501898683] High CVE-2026-10935 Inappropriate implementation in V8 on 2026-04-12

[$TBD] [501878477] Low CVE-2026-11279 Out of bounds read in DevTools on 2026-04-12

[$TBD] [501862016] Medium CVE-2026-11160 Out of bounds read in Input on 2026-04-12

[$TBD] [501861921] Medium CVE-2026-11159 Uninitialized Use in Skia on 2026-04-12

[$TBD] [501823385] Medium CVE-2026-11157 Script injection in Accessibility on 2026-04-11

[$TBD] [501810226] Medium CVE-2026-11156 Inappropriate implementation in CSS on 2026-04-11

[$TBD] [501801823] Medium CVE-2026-11155 Insufficient policy enforcement in CSS on registered custom properties on 2026-04-11

[$TBD] [501789156] Medium CVE-2026-11154 Use after free in Dawn on 2026-04-11

[$TBD] [501780338] Low CVE-2026-11276 Inappropriate implementation in Cast on 2026-04-11

[$TBD] [501779840] Medium CVE-2026-11153 Side-channel information leakage in Forms on 2026-04-11

[$TBD] [501762953] Medium CVE-2026-11152 Object lifecycle issue in Dawn on 2026-04-11

[$TBD] [501757688] Low CVE-2026-11273 Insufficient validation of untrusted input in Omnibox on 2026-04-11

[$TBD] [501740323] Medium CVE-2026-11151 Insufficient validation of untrusted input in Password Manager on 2026-04-11

[$TBD] [501740299] Medium CVE-2026-11150 Inappropriate implementation in XML on 2026-04-11

[$TBD] [501739206] Medium CVE-2026-11149 Insufficient validation of untrusted input in Extensions on 2026-04-11

[$TBD] [501709220] Medium CVE-2026-11146 Insufficient validation of untrusted input in Chromoting on 2026-04-11

[$TBD] [501685207] Low CVE-2026-11271 Incorrect security UI in Passwords on 2026-04-11

[$TBD] [501676175] Medium CVE-2026-11144 Use after free in Media on 2026-04-11

[$TBD] [501674219] Medium CVE-2026-11143 Heap buffer overflow in Extensions on 2026-04-11

[$TBD] [501668745] Medium CVE-2026-11142 Policy bypass in Paint on 2026-04-11

[$TBD] [501667839] Medium CVE-2026-11141 Uninitialized Use in Audio on 2026-04-11

[$TBD] [501659253] Medium CVE-2026-11140 Insufficient validation of untrusted input in Chromecast on 2026-04-11

[$TBD] [501650594] Medium CVE-2026-11139 Policy bypass in Paint on 2026-04-11

[$TBD] [501650354] Medium CVE-2026-11138 Uninitialized Use in ANGLE on 2026-04-11

[$TBD] [501647943] Medium CVE-2026-11137 Uninitialized Use in ANGLE on 2026-04-11

[$7000.0] [501646327] High CVE-CVE-2026-11136 Use after free in Canvas on 2026-04-11

[$TBD] [501644835] Medium CVE-2026-11135 Insufficient policy enforcement in Autofill on 2026-04-11

[$TBD] [501640084] Medium CVE-2026-11134 Insufficient data validation in Media on 2026-04-11

[$TBD] [501606085] Medium CVE-2026-11133 Insufficient policy enforcement in Paint on 2026-04-10

[$TBD] [501597365] Medium CVE-2026-11132 Policy bypass in Paint on 2026-04-10

[$TBD] [501546443] Medium CVE-2026-11130 Use after free in Media on 2026-04-10

[$TBD] [501541962] Medium CVE-2026-11129 Inappropriate implementation in Extensions on 2026-04-10

[$TBD] [501528031] Medium CVE-2026-11126 Insufficient validation of untrusted input in DevTools on 2026-04-10

[$TBD] [501517520] Medium CVE-2026-11125 Use after free in Compositing on 2026-04-10

[$TBD] [501511299] Medium CVE-2026-11124 Heap buffer overflow in Skia on 2026-04-10

[$TBD] [501505198] Medium CVE-2026-11123 Uninitialized Use in ANGLE on 2026-04-10

[$TBD] [501485453] Medium CVE-2026-11122 Inappropriate implementation in Keyboard on 2026-04-10

[$TBD] [501483855] Medium CVE-2026-11121 Insufficient validation of untrusted input in Skia on 2026-04-10

[$TBD] [501467566] Medium CVE-2026-11120 Insufficient validation of untrusted input in Enterprise Reporting on 2026-04-10

[$TBD] [501424047] Medium CVE-2026-11118 Use after free in WebRTC on 2026-04-10

[$TBD] [501376612] Medium CVE-2026-11116 Use after free in Chromoting on 2026-04-10

[$10000.0] [501115599] High CVE-2026-10931 Use after free in FileSystem Reported by [asjidkalam] on 2026-04-09

[$TBD] [500560764] Medium CVE-2026-11113 Insufficient validation of untrusted input in ANGLE on 2026-04-07

[$TBD] [500551122] Low CVE-2026-11269 Inappropriate implementation in Extensions on 2026-04-07

[$TBD] [500541413] Medium CVE-2026-11112 Insufficient validation of untrusted input in Chromoting on 2026-04-07

[$TBD] [500530720] Medium CVE-2026-11111 Out of bounds read in ANGLE on 2026-04-07

[$TBD] [500528864] Medium CVE-2026-11110 Uninitialized Use in ANGLE on 2026-04-07

[$TBD] [500528267] Low CVE-2026-11267 Insufficient policy enforcement in Extensions on 2026-04-07

[$TBD] [500524833] Medium CVE-2026-11109 Uninitialized Use in ANGLE on 2026-04-07

[$TBD] [500521311] Low CVE-2026-11266 Policy bypass in SafeBrowsing on 2026-04-07

[$TBD] [500510384] Medium CVE-2026-11107 Inappropriate implementation in Downloads on 2026-04-07

[$TBD] [500508725] Medium CVE-2026-11106 Inappropriate implementation in Media on 2026-04-07

[$TBD] [500505339] Medium CVE-2026-11105 Insufficient validation of untrusted input in WebUI on 2026-04-07

[$TBD] [500501226] Medium CVE-2026-11104 Uninitialized Use in ANGLE on 2026-04-07

[$TBD] [500468338] Medium CVE-2026-11102 Inappropriate implementation in Isolated Web Apps on 2026-04-07

[$TBD] [500414865] Medium CVE-2026-11099 Vulnerability in Skia on 2026-04-07

[$TBD] [500315455] Medium CVE-2026-11098 Insufficient validation of untrusted input in GPU on 2026-04-07

[$TBD] [500296311] Medium CVE-2026-11096 Out of bounds read in WebRTC on 2026-04-07

[$TBD] [500293394] Medium CVE-2026-11095 Insufficient validation of untrusted input in Codecs on 2026-04-07

[$TBD] [500262869] Low CVE-2026-11265 Insufficient data validation in Autofill on 2026-04-07

[$TBD] [500172365] Medium CVE-2026-11093 Insufficient validation of untrusted input in Printing on 2026-04-06

[$TBD] [500170887] Medium CVE-2026-11092 Insufficient policy enforcement in DevTools on restricted hosts on 2026-04-06

[$TBD] [500162791] Medium CVE-2026-11091 Inappropriate implementation in Dawn on 2026-04-06

[$TBD] [500161302] Medium CVE-2026-11090 Uninitialized Use in ANGLE on 2026-04-06

[$TBD] [500154880] Medium CVE-2026-11089 Uninitialized Use in Media on Odd Dimensions on 2026-04-06

[$TBD] [500144879] Medium CVE-2026-11088 Integer overflow in ANGLE on 2026-04-06

[$TBD] [500140111] Medium CVE-2026-11086 Insufficient validation of untrusted input in Dawn on 2026-04-06

[$TBD] [500140149] Medium CVE-2026-11087 Uninitialized Use in ANGLE on 2026-04-06

[$TBD] [500132379] Medium CVE-2026-11085 Integer overflow in GPU on 2026-04-06

[$TBD] [500124500] Medium CVE-2026-11084 Inappropriate implementation in Password Manager on 2026-04-06

[$TBD] [500124367] High CVE-2026-10928 Script injection in Headless on 2026-04-06

[$TBD] [500099106] Low CVE-2026-11264 Policy bypass in Content Security Policy on 2026-04-06

[$TBD] [500095743] Medium CVE-2026-11083 Inappropriate implementation in Password Manager on 2026-04-06

[$TBD] [500076131] Medium CVE-2026-11081 Policy bypass in Canvas on 2026-04-06

[$TBD] [500075522] High CVE-2026-10926 Use after free in Cast on 2026-04-06

[$TBD] [500055357] High CVE-2026-10924 Integer overflow in Chromecast on 2026-04-06

[$TBD] [500028989] Medium CVE-2026-11079 Insufficient validation of untrusted input in Codecs on 2026-04-06

[$3000.0] [499659070] Medium CVE-2026-11075 Out of bounds read in V8 Reported by [Junyoung Park(@candymate) of KAIST Hacking Lab] on 2026-04-06

[$TBD] [499784386] Medium CVE-2026-11076 Type Confusion in CSS on 2026-04-05

[$4000.0] [499587071] Medium CVE-2026-11074 Use after free in WebRTC on Wayland KDE (Slack screen share) on 2026-04-05

[$TBD] [499386363] Low CVE-2026-11262 Use after free in TabStrip on 2026-04-03

[$TBD] [499365904] Medium CVE-2026-11073 Use after free in WebGL on 2026-04-03

[$TBD] [499262832] Low CVE-2026-11261 Insufficient validation of untrusted input in PDF on 2026-04-03

[$TBD] [499257860] Low CVE-2026-11260 Policy bypass in Permissions on 2026-04-03

[$TBD] [499227659] Medium CVE-2026-11071 Use after free in Base on 2026-04-03

[$TBD] [499215943] Low CVE-2026-11259 Insufficient validation of untrusted input in Cast on 2026-04-03

[$TBD] [499213367] Medium CVE-2026-11069 Insufficient validation of untrusted input in Cast on 2026-04-03

[$TBD] [499194333] Medium CVE-2026-11068 Use after free in WebSockets on 2026-04-03

[$TBD] [499164652] High CVE-2026-10922 Insufficient validation of untrusted input in DevTools on 2026-04-02

[$TBD] [499159695] High CVE-2026-10921 Integer overflow in Dawn on 2026-04-02

[$TBD] [499140183] Medium CVE-2026-11067 Uninitialized Use in Dawn on 2026-04-02

[$TBD] [499124128] Medium CVE-2026-11066 Insufficient validation of untrusted input in ANGLE on 2026-04-02

[$TBD] [499078161] Low CVE-2026-11258 Inappropriate implementation in File System Access on 2026-04-02

[$TBD] [499051898] Low CVE-2026-11257 Inappropriate implementation in Browser on 2026-04-02

[$TBD] [499033012] Medium CVE-2026-11062 Insufficient policy enforcement in Extensions on 2026-04-02

[$TBD] [499031961] Medium CVE-2026-11061 Out of bounds read in ANGLE on 2026-04-02

[$TBD] [498991983] Medium CVE-2026-11059 Use after free in Blink on 2026-04-02

[$TBD] [498951946] Medium CVE-2026-11057 Uninitialized Use in Skia on 2026-04-02

[$97000.0] [498904293] Critical CVE-2026-10881 Out of bounds read and write in ANGLE Reported by [Anonymous] on 2026-04-02

[$2000.0] [498828605] Medium CVE-2026-11051 Out of bounds read in ANGLE on 2026-04-02

[$TBD] [498872764] High CVE-2026-10919 Use after free in ANGLE on 2026-04-02

[$TBD] [498856565] Low CVE-2026-11256 Out of bounds read in GPU on 2026-04-02

[$TBD] [498845284] Medium CVE-2026-11054 Use after free in WebRTC on 2026-04-02

[$TBD] [498841456] Medium CVE-2026-11053 VULNERABILITY in WebRTC on 2026-04-02

[$TBD] [498834967] Medium CVE-2026-11052 Type Confusion in GPU on 2026-04-01

[$TBD] [498818402] Medium CVE-2026-11050 Use after free in V8 on 2026-04-01

[$TBD] [498815068] Medium CVE-2026-11049 Use after free in Password Manager on 2026-04-01

[$TBD] [498808432] Medium CVE-2026-11048 Inappropriate implementation in Extensions on 2026-04-01

[$TBD] [498728857] Medium CVE-2026-11046 Insufficient validation of untrusted input in Media on 2026-04-01

[$TBD] [498720094] Medium CVE-2026-11042 Use after free in Views on 2026-04-01

[$TBD] [498417152] Low CVE-2026-11255 Insufficient validation of untrusted input in Storage Access API on 2026-03-31

[$TBD] [498405554] Low CVE-2026-11254 Inappropriate implementation in Permissions on 2026-03-31

[$TBD] [498397912] Low CVE-2026-11253 Race in Permissions on 2026-03-31

[$TBD] [498373018] Low CVE-2026-11252 Policy bypass in Content Settings on 2026-03-31

[$TBD] [498371085] Medium CVE-2026-11040 Use after free in ANGLE on 2026-03-31

[$TBD] [498301853] Low CVE-2026-11251 Insufficient validation of untrusted input in Password Manager on 2026-03-31

[$TBD] [498281224] Low CVE-2026-11250 Inappropriate implementation in DevTools on 2026-03-31

[$TBD] [498259721] High CVE-2026-10918 Use after free in Viz on 2026-03-31

[$TBD] [498204112] Medium CVE-2026-11039 Uninitialized Use in Skia on 2026-03-31

[$TBD] [498080391] Medium CVE-2026-11038 Insufficient validation of untrusted input in Subresource Integrity on 2026-03-31

[$TBD] [497989379] Low CVE-2026-11249 Use after free in Network on 2026-03-30

[$TBD] [497971287] Medium CVE-2026-11037 Out of bounds write in Codecs on 2026-03-30

[$TBD] [497964917] Medium CVE-2026-11036 Inappropriate implementation in DOM on 2026-03-30

[$TBD] [497946941] Low CVE-2026-11248 Policy bypass in Google Lens on 2026-03-30

[$TBD] [497929481] High CVE-2026-10917 Insufficient validation of untrusted input in Media on 2026-03-30

[$TBD] [497831111] Medium CVE-2026-11032 Insufficient data validation in Password Manager on 2026-03-30

[$TBD] [497748760] Medium CVE-2026-11031 Insufficient validation of untrusted input in Password Manager on 2026-03-30

[$TBD] [497722502] Medium CVE-2026-11030 Use after free in Network on 2026-03-30

[$TBD] [497660733] Low CVE-2026-11246 Insufficient validation of untrusted input in IndexedDB on 2026-03-29

[$TBD] [497643690] High CVE-2026-10916 Insufficient validation of untrusted input in DevTools on 2026-03-29

[$TBD] [497627277] Medium CVE-2026-11028 Use after free in Media on 2026-03-29

[$TBD] [497610654] Low CVE-2026-11245 Inappropriate implementation in Payments on 2026-03-29

[$TBD] [497609145] Low CVE-2026-11244 Insufficient validation of untrusted input in WebAuthentication on 2026-03-29

[$TBD] [497604407] Medium CVE-2026-11027 Insufficient validation of untrusted input in Glic on 2026-03-29

[$TBD] [497599683] Medium CVE-2026-11026 Insufficient policy enforcement in Extensions on 2026-03-29

[$TBD] [497595264] Medium CVE-2026-11025 Insufficient policy enforcement in Navigation on 2026-03-29

[$TBD] [497591594] Medium CVE-2026-11024 Stack buffer overflow in Skia on 2026-03-29

[$TBD] [497538899] Medium CVE-2026-11023 Insufficient validation of untrusted input in WebAppInstalls on 2026-03-29

[$TBD] [497532918] Medium CVE-2026-11022 Insufficient validation of untrusted input in DevTools on 2026-03-29

[$TBD] [497440270] Medium CVE-2026-11020 Inappropriate implementation in Extensions on 2026-03-29

[$TBD] [497394061] Low CVE-2026-11243 Incorrect security UI in Downloads on 2026-03-29

[$TBD] [497385823] Low CVE-2026-11242 Insufficient validation of untrusted input in Plugins on 2026-03-29

[$TBD] [497342466] Medium CVE-2026-11018 Insufficient policy enforcement in Actor on 2026-03-28

[$TBD] [497336872] Medium CVE-2026-11017 Inappropriate implementation in Link Preview on 2026-03-28

[$TBD] [497183443] Medium CVE-2026-11015 Out of bounds read in WebGPU on 2026-03-28

[$TBD] [497278395] Medium CVE-2026-11016 Insufficient validation of untrusted input in Network on 2026-03-28

[$TBD] [497203741] Low CVE-2026-11241 Insufficient validation of untrusted input in Cast on 2026-03-28

[$TBD] [497058611] Medium CVE-2026-11014 Insufficient policy enforcement in Extensions on 2026-03-27

[$TBD] [497056412] Medium CVE-2026-11013 Insufficient validation of untrusted input in Network on 2026-03-27

[$TBD] [497030032] Low CVE-2026-11240 Insufficient validation of untrusted input in Loader on 2026-03-27

[$TBD] [497025738] Low CVE-2026-11239 Insufficient validation of untrusted input in Extensions on 2026-03-27

[$TBD] [496705691] Low CVE-2026-11238 Inappropriate implementation in DevTools on 2026-03-26

[$TBD] [496702621] Medium CVE-2026-11011 Insufficient policy enforcement in Password Manager on 2026-03-26

[$TBD] [496617698] Low CVE-2026-11237 Insufficient validation of untrusted input in Media on 2026-03-26

[$TBD] [496614553] High CVE-2026-10912 Insufficient validation of untrusted input in Extensions on 2026-03-26

[$TBD] [496427030] Low CVE-2026-11236 Insufficient policy enforcement in Web Bluetooth on 2026-03-26

[$TBD] [496419374] Low CVE-2026-11235 Insufficient validation of untrusted input in Compositing on 2026-03-26

[$TBD] [496095145] Low CVE-2026-11234 Insufficient policy enforcement in FoldableAPIs on 2026-03-25

[$TBD] [496088449] Low CVE-2026-11233 Insufficient validation of untrusted input in FoldableAPIs on 2026-03-25

[$TBD] [495981782] Low CVE-2026-11232 Inappropriate implementation in TabGroups on 2026-03-24

[$TBD] [495864099] Medium CVE-2026-11008 Insufficient validation of untrusted input in WebAppInstalls on 2026-03-24

[$TBD] [495819067] High CVE-2026-10911 Insufficient validation of untrusted input in Media on 2026-03-24

[$TBD] [495489174] Medium CVE-2026-11006 Out of bounds read in Dawn on 2026-03-23

[$TBD] [494823889] Medium CVE-2026-11004 Out of bounds read in ANGLE on 2026-03-22

[$1000.0] [494800494] Low CVE-2026-11223 Insufficient validation of untrusted input in Network on 2026-03-21

[$TBD] [494740162] Medium CVE-2026-11002 Use after free in Autofill on 2026-03-21

[$TBD] [493691489] Medium CVE-2026-11001 Incorrect security UI in Payments on 2026-03-17

[$2000.0] [493534964] Medium CVE-2026-10992 Insufficient data validation in Animation Reported by [heapracer] on 2026-03-17

[$TBD] [493225428] Low CVE-2026-11230 Use after free in Extensions on 2026-03-16

[$TBD] [492374380] Medium CVE-2026-11000 Use after free in Fonts on 2026-03-13

[$2000.0] [489071023] High CVE-2026-10907 Out of bounds write in ANGLE on 2026-03-02

[$5000.0] [487357841] High CVE-2026-10905 Use after free in Network on Android) on 2026-02-25

[$3000.0] [487564032] Low CVE-2026-11217 Insufficient policy enforcement in Fenced Frames on 2026-02-25

[$2000.0] [487300831] Low CVE-2026-11220 Insufficient validation of untrusted input in Navigation on 2026-02-24

[$TBD] [486536242] Medium CVE-2026-10998 Out of bounds read in Media Reported by [] on 2026-02-22

[$TBD] [482713603] Low CVE-2026-11229 Insufficient policy enforcement in Enterprise on 2026-02-07

[$3000.0] [474583539] Low CVE-2026-11216 Incorrect security UI in File Input Reported by [] on 2026-01-10

[$2000.0] [464217867] Medium CVE-2026-10997 Insufficient policy enforcement in Extensions on 2025-11-28

[$1000.0] [458442542] Low CVE-2026-11222 Popup window tab doesn't show the origin correctly on 2025-11-06

[$TBD] [448421954] Low CVE-2026-11227 Incorrect security UI in Tab Hover Cards on 2025-09-30

[$TBD] [40051700] Low CVE-2026-10996 Inappropriate implementation in Workers on 2020-03-05

[$TBD] [518105731] High CVE-2026-11697 Insufficient validation of untrusted input in UI on 2026-05-29

[$TBD] [518043597] Critical CVE-2026-11644 Use after free in Views on Linux/X11 on 2026-05-29

[$TBD] [518006379] Critical CVE-2026-11643 Use after free in Proxy on 2026-05-29

[$TBD] [517762104] High CVE-2026-11695 Inappropriate implementation in Passwords on 2026-05-28

[$TBD] [517705966] High CVE-2026-11694 Use after free in ServiceWorker on 2026-05-28

[$TBD] [517678820] Critical CVE-2026-11642 Use after free in Web Apps on 2026-05-28

[$TBD] [517644287] High CVE-2026-11693 Inappropriate implementation in Plugins on 2026-05-28

[$TBD] [517607902] High CVE-2026-11692 Use after free in Read Anything on 2026-05-28

[$TBD] [517585486] High CVE-2026-11691 Insufficient validation of untrusted input in New Tab Page on 2026-05-28

[$TBD] [517486004] High CVE-2026-11689 Insufficient validation of untrusted input in Passwords on 2026-05-28

[$TBD] [517339758] Critical CVE-2026-11640 Integer overflow in libyuv on 2026-05-27

[$TBD] [517309206] High CVE-2026-11688 Object lifecycle issue in SVG on 2026-05-27

[$500.0] [517168239] High CVE-2026-11646 Use after free in ViewTransitions on 2026-05-27

[$TBD] [517130229] High CVE-2026-11684 Insufficient policy enforcement in Network on 2026-05-27

[$TBD] [517129549] High CVE-2026-11683 Use after free in WebCodecs on 2026-05-27

[$TBD] [517103584] High CVE-2026-11682 Insufficient validation of untrusted input in Views on 2026-05-27

[$TBD] [517050585] High CVE-2026-11681 Use after free in Ozone on 2026-05-27

[$TBD] [517047197] Critical CVE-2026-11638 Use after free in Printing on 2026-05-27

[$TBD] [516986556] High CVE-2026-11678 Integer overflow in libyuv on 2026-05-26

[$TBD] [516949298] High CVE-2026-11676 Insufficient validation of untrusted input in Dawn on 2026-05-26

[$TBD] [516915337] High CVE-2026-11675 Insufficient validation of untrusted input in Skia on 2026-05-26

[$TBD] [516910450] High CVE-2026-11674 Use after free in Guest View on 2026-05-26

[$TBD] [516902973] High CVE-2026-11673 Use after free in InterestGroups on 2026-05-26

[$TBD] [516794471] High CVE-2026-11672 Out of bounds write in GPU on 2026-05-26

[$TBD] [516707881] Critical CVE-2026-11632 Use after free in TabStrip on 2026-05-26

[$TBD] [516677924] Critical CVE-2026-11630 Use after free in File Input on 2026-05-26

[$TBD] [516674532] Critical CVE-2026-11629 Use after free in Ozone on 2026-05-26

[$TBD] [516608438] High CVE-2026-11671 Use after free in Navigation on 2026-05-25

[$TBD] [516501794] Critical CVE-2026-11628 Use after free in Ozone on 2026-05-25

[$TBD] [516413817] Medium CVE-2026-11701 Insufficient validation of untrusted input in Guest View on 2026-05-25

[$TBD] [515469283] High CVE-2026-11670 Use after free in PDF on 2026-05-21

[$TBD] [515429352] High CVE-2026-11669 Integer overflow in Media on ChromeOS on 2026-05-21

[$TBD] [515419790] High CVE-2026-11668 Uninitialized Use in Codecs on 2026-05-21

[$TBD] [514671098] High CVE-2026-11667 Out of bounds read in WebRTC on 2026-05-19

[$TBD] [514009323] High CVE-2026-11666 Insufficient validation of untrusted input in Input on 2026-05-17

[$TBD] [513830374] High CVE-2026-11664 Use after free in Payments on 2026-05-16

[$TBD] [513820666] High CVE-2026-11663 Use after free in Skia on 2026-05-16

[$TBD] [513773313] High CVE-2026-11662 Type Confusion in Bindings on 2026-05-16

[$TBD] [513731890] High CVE-2026-11660 Insufficient validation of untrusted input in New Tab Page on 2026-05-15

[$TBD] [513702971] High CVE-2026-11659 Insufficient validation of untrusted input in UI on 2026-05-15

[$TBD] [513564337] High CVE-2026-11658 Insufficient validation of untrusted input in Extensions on 2026-05-15

[$TBD] [513424000] High CVE-2026-11656 Use after free in ServiceWorker on 2026-05-14

[$TBD] [513321171] High CVE-2026-11653 Insufficient validation of untrusted input in Extensions on 2026-05-14

[$TBD] [513156160] High CVE-2026-11652 Use after free in Extensions on 2026-05-14

[$TBD] [511736002] High CVE-2026-11651 Use after free in Network on 2026-05-10

[$TBD] [511732085] Medium CVE-2026-11700 Use after free in Tracing on 2026-05-10

[$TBD] [511279942] High CVE-2026-11650 Use after free in V8 on 2026-05-08

[$TBD] [511270083] High CVE-2026-11649 Use after free in V8 on 2026-05-08

[$55000.0] [506689381] High CVE-2026-11645 Out of bounds memory access in V8 Reported by [[303f06e3]] on 2026-04-26

[$TBD] [519258799] High CVE-2026-12034 Insufficient validation of untrusted input on 2026-06-02

[$TBD] [519248779] High CVE-2026-12033 Out of bounds read on 2026-06-02

[$TBD] [517517155] High CVE-2026-12027 Insufficient policy enforcement on 2026-05-28

[$TBD] [517347084] High CVE-2026-12026 Out of bounds read on 2026-05-27

[$TBD] [517153191] High CVE-2026-12025 Insufficient validation of untrusted input on 2026-05-27

[$TBD] [517086161] High CVE-2026-12024 Insufficient policy enforcement on 2026-05-27

[$TBD] [517018374] High CVE-2026-12023 Use after free on 2026-05-27

[$TBD] [516942828] Critical CVE-2026-12008 Use after free on 2026-05-26

[$TBD] [516872067] High CVE-2026-12019 Out of bounds write on 2026-05-26

[$TBD] [516797143] High CVE-2026-12017 Insufficient validation of untrusted input on subframe error pages on 2026-05-26

[$TBD] [516482138] High CVE-2026-12016 Insufficient validation of untrusted input on 2026-05-25

[$TBD] [515463295] High CVE-2026-12015 Use after free on 2026-05-21

[$TBD] [514742747] High CVE-2026-12014 Use after free on 2026-05-19

[$TBD] [499182801] High CVE-2026-12012 Use after free on 2026-04-03

Chrome Beta for iOS Update

2026-06-17T10:43:32.884-07:00

Hi everyone! We've just released Chrome Beta 150 (150.0.7871.35) for iOS; it'll become available on App Store in the next few days.

You can see a partial list of the changes in the Git log. If you find a new issue, please let us know by filing a bug.

Chrome Release Team
Google Chrome