# Google Chrome.

Every CVE that names Google Chrome among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-120930.md)
  `CVE-2026-120930` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Out-of-bounds write in Google Chrome](https://agentprime.io/advisories/CVE-2026-120931.md)
  `CVE-2026-120931` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-121141.md)
  `CVE-2026-121141` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-20
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121195.md)
  `CVE-2026-121195` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-121064.md)
  `CVE-2026-121064` · CVE record: Google Chrome · CVSS 7.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-20
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121169.md)
  `CVE-2026-121169` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121069.md)
  `CVE-2026-121069` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121142.md)
  `CVE-2026-121142` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121232.md)
  `CVE-2026-121232` · CVE record: Google Chrome · CVSS 5.1 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121041.md)
  `CVE-2026-121041` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Out-of-bounds read in Google Chrome](https://agentprime.io/advisories/CVE-2026-121093.md)
  `CVE-2026-121093` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-121230.md)
  `CVE-2026-121230` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 3 Nov 2026 · Tags: Race condition
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121073.md)
  `CVE-2026-121073` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Uncontrolled recursion in Google Chrome](https://agentprime.io/advisories/CVE-2026-121092.md)
  `CVE-2026-121092` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service
- [Resource exposure in Google Chrome](https://agentprime.io/advisories/CVE-2026-121175.md)
  `CVE-2026-121175` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Information disclosure
- [Improper check for unusual conditions in Google Chrome](https://agentprime.io/advisories/CVE-2026-121054.md)
  `CVE-2026-121054` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-754
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121029.md)
  `CVE-2026-121029` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Google Chrome: UI misrepresentation in Browser in Google Chrome on on Mac prior to 157.0.8103.38 allowed…](https://agentprime.io/advisories/CVE-2026-121045.md)
  `CVE-2026-121045` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-451
- [Google Chrome: UI misrepresentation in Notifications in Google Chrome on on Windows prior to…](https://agentprime.io/advisories/CVE-2026-121162.md)
  `CVE-2026-121162` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-451
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121225.md)
  `CVE-2026-121225` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Google Chrome: Confused deputy in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote…](https://agentprime.io/advisories/CVE-2026-121198.md)
  `CVE-2026-121198` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-441
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-121240.md)
  `CVE-2026-121240` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-20
- [Google Chrome: UI misrepresentation in Passwords in Google Chrome prior to 157.0.8103.38 allowed a…](https://agentprime.io/advisories/CVE-2026-121081.md)
  `CVE-2026-121081` · CVE record: Google Chrome · CVSS 5.9 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-451
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-121050.md)
  `CVE-2026-121050` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: Race condition
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121205.md)
  `CVE-2026-121205` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Incomplete cleanup in Google Chrome](https://agentprime.io/advisories/CVE-2026-121204.md)
  `CVE-2026-121204` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-459
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121159.md)
  `CVE-2026-121159` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121085.md)
  `CVE-2026-121085` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121251.md)
  `CVE-2026-121251` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-121130.md)
  `CVE-2026-121130` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Information disclosure
- [Google Chrome: UI misrepresentation in PageInfo in Google Chrome prior to 157.0.8103.38 allowed a remote…](https://agentprime.io/advisories/CVE-2026-121121.md)
  `CVE-2026-121121` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-451
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121189.md)
  `CVE-2026-121189` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Google Chrome: UI misrepresentation in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote…](https://agentprime.io/advisories/CVE-2026-121206.md)
  `CVE-2026-121206` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-451
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121172.md)
  `CVE-2026-121172` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121253.md)
  `CVE-2026-121253` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Google Chrome: UI misrepresentation in Mobile in Google Chrome on on Android prior to 157.0.8103.38…](https://agentprime.io/advisories/CVE-2026-121165.md)
  `CVE-2026-121165` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-451
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-121236.md)
  `CVE-2026-121236` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-20
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121101.md)
  `CVE-2026-121101` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Incomplete cleanup in Google Chrome](https://agentprime.io/advisories/CVE-2026-121055.md)
  `CVE-2026-121055` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-459
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-121138.md)
  `CVE-2026-121138` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Information disclosure
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121111.md)
  `CVE-2026-121111` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Google Chrome: UI misrepresentation in Payments in Google Chrome prior to 157.0.8103.38 allowed a remote…](https://agentprime.io/advisories/CVE-2026-121043.md)
  `CVE-2026-121043` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-451
- [Resource exposure in Google Chrome](https://agentprime.io/advisories/CVE-2026-121168.md)
  `CVE-2026-121168` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: Information disclosure
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121252.md)
  `CVE-2026-121252` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-121235.md)
  `CVE-2026-121235` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Information disclosure
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121157.md)
  `CVE-2026-121157` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121222.md)
  `CVE-2026-121222` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121046.md)
  `CVE-2026-121046` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-121125.md)
  `CVE-2026-121125` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Information disclosure
- [Google Chrome: UI misrepresentation in Extensions in Google Chrome prior to 157.0.8103.38 allowed a…](https://agentprime.io/advisories/CVE-2026-121190.md)
  `CVE-2026-121190` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-451
- [Google Chrome: UI misrepresentation in Transactions Platform in Google Chrome on on Android prior to…](https://agentprime.io/advisories/CVE-2026-121053.md)
  `CVE-2026-121053` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-451
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-121243.md)
  `CVE-2026-121243` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Information disclosure
- [Weak encryption in Google Chrome](https://agentprime.io/advisories/CVE-2026-121109.md)
  `CVE-2026-121109` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Weak cryptography or TLS
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121217.md)
  `CVE-2026-121217` · CVE record: Google Chrome · CVSS 7.5 High · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Google Chrome: Information loss in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a…](https://agentprime.io/advisories/CVE-2026-121134.md)
  `CVE-2026-121134` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-221
- [Google Chrome: UI misrepresentation in Input in Google Chrome prior to 157.0.8103.38 allowed a remote…](https://agentprime.io/advisories/CVE-2026-121209.md)
  `CVE-2026-121209` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-451
- [Google Chrome: Security issue in Platform in Google Chrome prior to 157.0.8103.38 allowed a remote…](https://agentprime.io/advisories/CVE-2026-121135.md)
  `CVE-2026-121135` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-436
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121167.md)
  `CVE-2026-121167` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121091.md)
  `CVE-2026-121091` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Out-of-bounds read in Google Chrome](https://agentprime.io/advisories/CVE-2026-121049.md)
  `CVE-2026-121049` · CVE record: Google Chrome · CVSS 3.3 Low · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption

Older: <https://agentprime.io/advisories/technology/google-chrome.md?cursor=WyIyMDI2LTExLTAzVDIwOjQyOjUyLjQzODAwMFoiLCJDVkUtMjAyNi0xMjEwNDkiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=google-chrome>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/google-chrome/>. Everything for agents: <https://agentprime.io/llms.txt>.
