# Google Chrome.

Every CVE that names Google Chrome among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Google Chrome: UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a…](https://agentprime.io/advisories/CVE-2026-87507.md)
  `CVE-2026-87507` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-451
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-87599.md)
  `CVE-2026-87599` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-20
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-87516.md)
  `CVE-2026-87516` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87452.md)
  `CVE-2026-87452` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Google Chrome: UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a…](https://agentprime.io/advisories/CVE-2026-87501.md)
  `CVE-2026-87501` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-451
- [Improper check for unusual conditions in Google Chrome](https://agentprime.io/advisories/CVE-2026-87548.md)
  `CVE-2026-87548` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-754
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-87573.md)
  `CVE-2026-87573` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-20
- [Integer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-87643.md)
  `CVE-2026-87643` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87508.md)
  `CVE-2026-87508` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87556.md)
  `CVE-2026-87556` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Google Chrome: Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to…](https://agentprime.io/advisories/CVE-2026-87562.md)
  `CVE-2026-87562` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-706
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87534.md)
  `CVE-2026-87534` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-87648.md)
  `CVE-2026-87648` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-87539.md)
  `CVE-2026-87539` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-87521.md)
  `CVE-2026-87521` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87560.md)
  `CVE-2026-87560` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87432.md)
  `CVE-2026-87432` · CVE record: Google Chrome · CVSS 4.2 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87513.md)
  `CVE-2026-87513` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Google Chrome: Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36…](https://agentprime.io/advisories/CVE-2026-87479.md)
  `CVE-2026-87479` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-807
- [Incomplete cleanup in Google Chrome](https://agentprime.io/advisories/CVE-2026-87436.md)
  `CVE-2026-87436` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-459
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87475.md)
  `CVE-2026-87475` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87476.md)
  `CVE-2026-87476` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Use of uninitialized resource in Google Chrome](https://agentprime.io/advisories/CVE-2026-87576.md)
  `CVE-2026-87576` · CVE record: Google Chrome · CVSS 3.4 Low · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Heap-based buffer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-87579.md)
  `CVE-2026-87579` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Use of uninitialized resource in Google Chrome](https://agentprime.io/advisories/CVE-2026-87497.md)
  `CVE-2026-87497` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Cleartext transmission of sensitive information in Google Chrome](https://agentprime.io/advisories/CVE-2026-87482.md)
  `CVE-2026-87482` · CVE record: Google Chrome · CVSS 5.9 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87580.md)
  `CVE-2026-87580` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-87590.md)
  `CVE-2026-87590` · CVE record: Google Chrome · CVSS 5.9 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-20
- [Integer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-87630.md)
  `CVE-2026-87630` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87443.md)
  `CVE-2026-87443` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Improper check for unusual conditions in Google Chrome](https://agentprime.io/advisories/CVE-2026-87645.md)
  `CVE-2026-87645` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-754
- [Google Chrome: Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36…](https://agentprime.io/advisories/CVE-2026-87613.md)
  `CVE-2026-87613` · CVE record: Google Chrome · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-706
- [Cross-site request forgery in Google Chrome](https://agentprime.io/advisories/CVE-2026-87449.md)
  `CVE-2026-87449` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Cross-site request forgery (CSRF)
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87577.md)
  `CVE-2026-87577` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Use of uninitialized resource in Google Chrome](https://agentprime.io/advisories/CVE-2026-87642.md)
  `CVE-2026-87642` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-87615.md)
  `CVE-2026-87615` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Race condition
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87603.md)
  `CVE-2026-87603` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87466.md)
  `CVE-2026-87466` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Google Chrome: Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote…](https://agentprime.io/advisories/CVE-2026-87582.md)
  `CVE-2026-87582` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-441
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87652.md)
  `CVE-2026-87652` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87485.md)
  `CVE-2026-87485` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87471.md)
  `CVE-2026-87471` · CVE record: Google Chrome · CVSS 8.1 High · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87537.md)
  `CVE-2026-87537` · CVE record: Google Chrome · CVSS 8.1 High · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87481.md)
  `CVE-2026-87481` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Google Chrome: Inappropriate implementation in Downloads in Google Chrome on on Android prior to…](https://agentprime.io/advisories/CVE-2026-87503.md)
  `CVE-2026-87503` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-841
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-87457.md)
  `CVE-2026-87457` · CVE record: Google Chrome · CVSS 8.1 High · Not analysed yet · Published 9 Sept 2026 · Tags: Race condition
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87557.md)
  `CVE-2026-87557` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-87433.md)
  `CVE-2026-87433` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2026 · Tags: Race condition
- [Execution with unnecessary privileges in Google Chrome](https://agentprime.io/advisories/CVE-2026-87506.md)
  `CVE-2026-87506` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 9 Sept 2026 · Tags: Privilege escalation
- [Google Chrome: Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote…](https://agentprime.io/advisories/CVE-2026-87442.md)
  `CVE-2026-87442` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-441
- [Google Chrome: Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36…](https://agentprime.io/advisories/CVE-2026-87547.md)
  `CVE-2026-87547` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-706
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87515.md)
  `CVE-2026-87515` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87465.md)
  `CVE-2026-87465` · CVE record: Google Chrome · CVSS 4.2 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-87658.md)
  `CVE-2026-87658` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Information disclosure
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-87553.md)
  `CVE-2026-87553` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-20
- [Use of uninitialized resource in Google Chrome](https://agentprime.io/advisories/CVE-2026-87456.md)
  `CVE-2026-87456` · CVE record: Google Chrome · CVSS 3.4 Low · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87606.md)
  `CVE-2026-87606` · CVE record: Google Chrome · CVSS 8.1 High · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-87611.md)
  `CVE-2026-87611` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 9 Sept 2026 · Tags: Broken access control
- [Type confusion in Google Chrome](https://agentprime.io/advisories/CVE-2026-87636.md)
  `CVE-2026-87636` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-87588.md)
  `CVE-2026-87588` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/google-chrome.md>
Older: <https://agentprime.io/advisories/technology/google-chrome.md?cursor=WyIyMDI2LTA5LTA5VDAwOjA5OjM5LjUwMzAwMFoiLCJDVkUtMjAyNi04NzU4OCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=google-chrome&cursor=WyIyMDI2LTA5LTA5VDAwOjA5OjQ5Ljk0NjAwMFoiLCJDVkUtMjAyNi04NzU1OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/google-chrome/?cursor=WyIyMDI2LTA5LTA5VDAwOjA5OjQ5Ljk0NjAwMFoiLCJDVkUtMjAyNi04NzU1OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.
