# Google Chrome.

Every CVE that names Google Chrome among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Heap-based buffer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-19138.md)
  `CVE-2026-19138` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 6 Aug 2026 · Tags: Memory corruption
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-19168.md)
  `CVE-2026-19168` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 6 Aug 2026 · Tags: CWE-693
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-19169.md)
  `CVE-2026-19169` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 6 Aug 2026 · Tags: CWE-20
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-19172.md)
  `CVE-2026-19172` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 6 Aug 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-19170.md)
  `CVE-2026-19170` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: Memory corruption
- [Out-of-bounds write in Google Chrome](https://agentprime.io/advisories/CVE-2026-19157.md)
  `CVE-2026-19157` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-19154.md)
  `CVE-2026-19154` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 6 Aug 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-19149.md)
  `CVE-2026-19149` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-19137.md)
  `CVE-2026-19137` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 6 Aug 2026 · Tags: Memory corruption
- [Google Chrome: Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed…](https://agentprime.io/advisories/CVE-2026-18019.md)
  `CVE-2026-18019` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-1300
- [Google Chrome: Inappropriate implementation in Updater in Google Chrome on Windows prior to…](https://agentprime.io/advisories/CVE-2026-18018.md)
  `CVE-2026-18018` · CVE record: Google Chrome · CVSS 4.0 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-451
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-18017.md)
  `CVE-2026-18017` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: Memory corruption
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-18016.md)
  `CVE-2026-18016` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-18015.md)
  `CVE-2026-18015` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-693
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-18014.md)
  `CVE-2026-18014` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-20
- [Google Chrome: Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…](https://agentprime.io/advisories/CVE-2026-18013.md)
  `CVE-2026-18013` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-451
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-18012.md)
  `CVE-2026-18012` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: Memory corruption
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-18011.md)
  `CVE-2026-18011` · CVE record: Google Chrome · CVSS 2.4 Low · Not analysed yet · Published 30 Jul 2026 · Tags: Information disclosure
- [Google Chrome: Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed…](https://agentprime.io/advisories/CVE-2026-18010.md)
  `CVE-2026-18010` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-451
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-18009.md)
  `CVE-2026-18009` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-20, CWE-451
- [Google Chrome: Inappropriate implementation in Settings in Google Chrome prior to 151.0.7922.72 allowed…](https://agentprime.io/advisories/CVE-2026-18008.md)
  `CVE-2026-18008` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in Input in Google Chrome on Android prior to 151.0.7922.72…](https://agentprime.io/advisories/CVE-2026-18007.md)
  `CVE-2026-18007` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-451
- [Google Chrome: Inappropriate implementation in Google Lens in Google Chrome prior to 151.0.7922.72…](https://agentprime.io/advisories/CVE-2026-18006.md)
  `CVE-2026-18006` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-451
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-18005.md)
  `CVE-2026-18005` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Information disclosure
- [Improper access control in Google Chrome](https://agentprime.io/advisories/CVE-2026-18004.md)
  `CVE-2026-18004` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Broken access control
- [Google Chrome: Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…](https://agentprime.io/advisories/CVE-2026-18003.md)
  `CVE-2026-18003` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-451
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-18002.md)
  `CVE-2026-18002` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-20
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-18001.md)
  `CVE-2026-18001` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Information disclosure
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-18000.md)
  `CVE-2026-18000` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-17999.md)
  `CVE-2026-17999` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Race condition
- [Google Chrome: Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an…](https://agentprime.io/advisories/CVE-2026-17998.md)
  `CVE-2026-17998` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-451
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17997.md)
  `CVE-2026-17997` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Improper access control in Google Chrome](https://agentprime.io/advisories/CVE-2026-17996.md)
  `CVE-2026-17996` · CVE record: Google Chrome · CVSS 6.2 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Broken access control
- [Out-of-bounds read in Google Chrome](https://agentprime.io/advisories/CVE-2026-17995.md)
  `CVE-2026-17995` · CVE record: Google Chrome · CVSS 8.1 High · Not analysed yet · Published 30 Jul 2026 · Tags: Memory corruption
- [Improper access control in Google Chrome](https://agentprime.io/advisories/CVE-2026-17994.md)
  `CVE-2026-17994` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Broken access control
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-17993.md)
  `CVE-2026-17993` · CVE record: Google Chrome · CVSS 7.0 High · Not analysed yet · Published 30 Jul 2026 · Tags: Race condition
- [Use of uninitialized variable in Google Chrome](https://agentprime.io/advisories/CVE-2026-17992.md)
  `CVE-2026-17992` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Memory corruption
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-17991.md)
  `CVE-2026-17991` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-20
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-17990.md)
  `CVE-2026-17990` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-20
- [Type confusion in Google Chrome](https://agentprime.io/advisories/CVE-2026-17989.md)
  `CVE-2026-17989` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: Memory corruption
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-17988.md)
  `CVE-2026-17988` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-20
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-17987.md)
  `CVE-2026-17987` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-20
- [Improper access control in Google Chrome](https://agentprime.io/advisories/CVE-2026-17986.md)
  `CVE-2026-17986` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Broken access control
- [Google Chrome: Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed…](https://agentprime.io/advisories/CVE-2026-17985.md)
  `CVE-2026-17985` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-602
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17984.md)
  `CVE-2026-17984` · CVE record: Google Chrome · CVSS 3.3 Low · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Google Chrome: Inappropriate implementation in Global Media Controls in Google Chrome prior to…](https://agentprime.io/advisories/CVE-2026-17983.md)
  `CVE-2026-17983` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-451
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-17982.md)
  `CVE-2026-17982` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-20
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17981.md)
  `CVE-2026-17981` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Google Chrome: Inappropriate implementation in UI in Google Chrome on Android prior to 151.0.7922.72…](https://agentprime.io/advisories/CVE-2026-17980.md)
  `CVE-2026-17980` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-451
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-17979.md)
  `CVE-2026-17979` · CVE record: Google Chrome · CVSS 7.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: Race condition
- [Google Chrome: Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72…](https://agentprime.io/advisories/CVE-2026-17978.md)
  `CVE-2026-17978` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-1300
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-17977.md)
  `CVE-2026-17977` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346
- [Improper access control in Google Chrome](https://agentprime.io/advisories/CVE-2026-17976.md)
  `CVE-2026-17976` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Broken access control
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-17975.md)
  `CVE-2026-17975` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Information disclosure
- [Google Chrome: Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72…](https://agentprime.io/advisories/CVE-2026-17974.md)
  `CVE-2026-17974` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-602
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-17973.md)
  `CVE-2026-17973` · CVE record: Google Chrome · CVSS 5.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Information disclosure
- [Google Chrome: Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…](https://agentprime.io/advisories/CVE-2026-17972.md)
  `CVE-2026-17972` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-451
- [Out-of-bounds read in Google Chrome](https://agentprime.io/advisories/CVE-2026-17971.md)
  `CVE-2026-17971` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: Memory corruption
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-17970.md)
  `CVE-2026-17970` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-20
- [Improper privilege management in Google Chrome](https://agentprime.io/advisories/CVE-2026-17969.md)
  `CVE-2026-17969` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: Privilege escalation

Newest: <https://agentprime.io/advisories/technology/google-chrome.md>
Older: <https://agentprime.io/advisories/technology/google-chrome.md?cursor=WyIyMDI2LTA3LTMwVDAwOjI1OjQ4LjU0MzAwMFoiLCJDVkUtMjAyNi0xNzk2OSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=google-chrome&cursor=WyIyMDI2LTA4LTA2VDIwOjMzOjQyLjk2MjAwMFoiLCJDVkUtMjAyNi0xOTEzOSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/google-chrome/?cursor=WyIyMDI2LTA4LTA2VDIwOjMzOjQyLjk2MjAwMFoiLCJDVkUtMjAyNi0xOTEzOSJd>. Everything for agents: <https://agentprime.io/llms.txt>.
