# Google Chrome.

Every CVE that names Google Chrome among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106307.md)
  `CVE-2026-106307` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-106348.md)
  `CVE-2026-106348` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure
- [Incomplete cleanup in Google Chrome](https://agentprime.io/advisories/CVE-2026-106375.md)
  `CVE-2026-106375` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-459
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-106360.md)
  `CVE-2026-106360` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure
- [Incomplete cleanup in Google Chrome](https://agentprime.io/advisories/CVE-2026-106262.md)
  `CVE-2026-106262` · CVE record: Google Chrome · CVSS 4.2 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-459
- [Heap-based buffer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-106292.md)
  `CVE-2026-106292` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Google Chrome: Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a…](https://agentprime.io/advisories/CVE-2026-106301.md)
  `CVE-2026-106301` · CVE record: Google Chrome · CVSS 8.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-441
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-106373.md)
  `CVE-2026-106373` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106403.md)
  `CVE-2026-106403` · CVE record: Google Chrome · CVSS 8.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-106336.md)
  `CVE-2026-106336` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106391.md)
  `CVE-2026-106391` · CVE record: Google Chrome · CVSS 4.2 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Google Chrome: UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote…](https://agentprime.io/advisories/CVE-2026-106232.md)
  `CVE-2026-106232` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-451
- [Google Chrome: UI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a…](https://agentprime.io/advisories/CVE-2026-106229.md)
  `CVE-2026-106229` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-451
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-106226.md)
  `CVE-2026-106226` · CVE record: Google Chrome · CVSS 4.2 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-20
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106367.md)
  `CVE-2026-106367` · CVE record: Google Chrome · CVSS 8.4 High · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Google Chrome: Incorrect reference resolution in Offline in Google Chrome on on Android prior to…](https://agentprime.io/advisories/CVE-2026-106230.md)
  `CVE-2026-106230` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-706
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-106213.md)
  `CVE-2026-106213` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Race condition
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106205.md)
  `CVE-2026-106205` · CVE record: Google Chrome · CVSS 8.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Clickjacking in Google Chrome](https://agentprime.io/advisories/CVE-2026-106400.md)
  `CVE-2026-106400` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-1021
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106387.md)
  `CVE-2026-106387` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106328.md)
  `CVE-2026-106328` · CVE record: Google Chrome · CVSS 5.9 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Cross-site request forgery in Google Chrome](https://agentprime.io/advisories/CVE-2026-106216.md)
  `CVE-2026-106216` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Cross-site request forgery (CSRF)
- [Google Chrome: UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed…](https://agentprime.io/advisories/CVE-2026-106209.md)
  `CVE-2026-106209` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-451
- [Out-of-bounds read in Google Chrome](https://agentprime.io/advisories/CVE-2026-106284.md)
  `CVE-2026-106284` · CVE record: Google Chrome · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106410.md)
  `CVE-2026-106410` · CVE record: Google Chrome · CVSS 4.2 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-106277.md)
  `CVE-2026-106277` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106289.md)
  `CVE-2026-106289` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Google Chrome: Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote…](https://agentprime.io/advisories/CVE-2026-106228.md)
  `CVE-2026-106228` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-441
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106333.md)
  `CVE-2026-106333` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-106201.md)
  `CVE-2026-106201` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Race condition
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-106303.md)
  `CVE-2026-106303` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-106180.md)
  `CVE-2026-106180` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-106206.md)
  `CVE-2026-106206` · CVE record: Google Chrome · CVSS 5.9 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-20
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106280.md)
  `CVE-2026-106280` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Open redirect in Google Chrome](https://agentprime.io/advisories/CVE-2026-106322.md)
  `CVE-2026-106322` · CVE record: Google Chrome · CVSS 6.1 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Open redirect
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-106405.md)
  `CVE-2026-106405` · CVE record: Google Chrome · CVSS 6.0 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Race condition
- [Clickjacking in Google Chrome](https://agentprime.io/advisories/CVE-2026-106356.md)
  `CVE-2026-106356` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-1021
- [Use of uninitialized resource in Google Chrome](https://agentprime.io/advisories/CVE-2026-106370.md)
  `CVE-2026-106370` · CVE record: Google Chrome · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Google Chrome: Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a…](https://agentprime.io/advisories/CVE-2026-106188.md)
  `CVE-2026-106188` · CVE record: Google Chrome · CVSS 6.1 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-441
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-106392.md)
  `CVE-2026-106392` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure
- [Google Chrome: UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote…](https://agentprime.io/advisories/CVE-2026-106282.md)
  `CVE-2026-106282` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-451
- [Google Chrome: UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote…](https://agentprime.io/advisories/CVE-2026-106182.md)
  `CVE-2026-106182` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-451
- [Code injection in Google Chrome](https://agentprime.io/advisories/CVE-2026-106416.md)
  `CVE-2026-106416` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Code injection
- [Google Chrome: UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed…](https://agentprime.io/advisories/CVE-2026-106302.md)
  `CVE-2026-106302` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-451
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106246.md)
  `CVE-2026-106246` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Clickjacking in Google Chrome](https://agentprime.io/advisories/CVE-2026-106311.md)
  `CVE-2026-106311` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-1021
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106402.md)
  `CVE-2026-106402` · CVE record: Google Chrome · CVSS 4.8 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Google Chrome: Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior…](https://agentprime.io/advisories/CVE-2026-106361.md)
  `CVE-2026-106361` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-684
- [Google Chrome: Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to…](https://agentprime.io/advisories/CVE-2026-106279.md)
  `CVE-2026-106279` · CVE record: Google Chrome · CVSS 7.4 High · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-706
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106253.md)
  `CVE-2026-106253` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-106424.md)
  `CVE-2026-106424` · CVE record: Google Chrome · CVSS 4.0 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-106342.md)
  `CVE-2026-106342` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure
- [Resource exposure in Google Chrome](https://agentprime.io/advisories/CVE-2026-106354.md)
  `CVE-2026-106354` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure
- [Google Chrome: Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a…](https://agentprime.io/advisories/CVE-2026-106326.md)
  `CVE-2026-106326` · CVE record: Google Chrome · CVSS 4.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-441
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106198.md)
  `CVE-2026-106198` · CVE record: Google Chrome · CVSS 8.2 High · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Execution with unnecessary privileges in Google Chrome](https://agentprime.io/advisories/CVE-2026-106378.md)
  `CVE-2026-106378` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 6 Oct 2026 · Tags: Privilege escalation
- [Use of uninitialized resource in Google Chrome](https://agentprime.io/advisories/CVE-2026-106290.md)
  `CVE-2026-106290` · CVE record: Google Chrome · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106406.md)
  `CVE-2026-106406` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Use of uninitialized resource in Google Chrome](https://agentprime.io/advisories/CVE-2026-106261.md)
  `CVE-2026-106261` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2026-106408.md)
  `CVE-2026-106408` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-693

Newest: <https://agentprime.io/advisories/technology/google-chrome.md>
Older: <https://agentprime.io/advisories/technology/google-chrome.md?cursor=WyIyMDI2LTEwLTA2VDE4OjQxOjIwLjkyODAwMFoiLCJDVkUtMjAyNi0xMDY0MDgiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=google-chrome&cursor=WyIyMDI2LTEwLTA2VDE4OjQxOjI5Ljk2NzAwMFoiLCJDVkUtMjAyNi0xMDYyMTIiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/google-chrome/?cursor=WyIyMDI2LTEwLTA2VDE4OjQxOjI5Ljk2NzAwMFoiLCJDVkUtMjAyNi0xMDYyMTIiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.