# Google Chrome.

Every CVE that names Google Chrome among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106249.md)
  `CVE-2026-106249` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Improper privilege management in Google Chrome](https://agentprime.io/advisories/CVE-2026-106296.md)
  `CVE-2026-106296` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Privilege escalation
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106259.md)
  `CVE-2026-106259` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Google Chrome: Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed…](https://agentprime.io/advisories/CVE-2026-106221.md)
  `CVE-2026-106221` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-441
- [Integer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-106417.md)
  `CVE-2026-106417` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-106220.md)
  `CVE-2026-106220` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure
- [Google Chrome: UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a…](https://agentprime.io/advisories/CVE-2026-106285.md)
  `CVE-2026-106285` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-451
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106264.md)
  `CVE-2026-106264` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Out-of-bounds read in Google Chrome](https://agentprime.io/advisories/CVE-2026-106399.md)
  `CVE-2026-106399` · CVE record: Google Chrome · CVSS 3.3 Low · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-106192.md)
  `CVE-2026-106192` · CVE record: Google Chrome · CVSS 4.6 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure
- [Heap-based buffer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-106247.md)
  `CVE-2026-106247` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Uncontrolled search path in Google Chrome](https://agentprime.io/advisories/CVE-2026-106186.md)
  `CVE-2026-106186` · CVE record: Google Chrome · CVSS 8.6 High · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-427
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106422.md)
  `CVE-2026-106422` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-106299.md)
  `CVE-2026-106299` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-20
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106199.md)
  `CVE-2026-106199` · CVE record: Google Chrome · CVSS 8.2 High · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Use of uninitialized resource in Google Chrome](https://agentprime.io/advisories/CVE-2026-106275.md)
  `CVE-2026-106275` · CVE record: Google Chrome · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106362.md)
  `CVE-2026-106362` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106260.md)
  `CVE-2026-106260` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106297.md)
  `CVE-2026-106297` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Google Chrome: Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote…](https://agentprime.io/advisories/CVE-2026-106287.md)
  `CVE-2026-106287` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-221
- [Incorrect comparison in Google Chrome](https://agentprime.io/advisories/CVE-2026-106252.md)
  `CVE-2026-106252` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-697
- [Google Chrome: Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a…](https://agentprime.io/advisories/CVE-2026-106427.md)
  `CVE-2026-106427` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-441
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106306.md)
  `CVE-2026-106306` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Incomplete cleanup in Google Chrome](https://agentprime.io/advisories/CVE-2026-106394.md)
  `CVE-2026-106394` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-459
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106187.md)
  `CVE-2026-106187` · CVE record: Google Chrome · CVSS 4.2 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106309.md)
  `CVE-2026-106309` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106250.md)
  `CVE-2026-106250` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106191.md)
  `CVE-2026-106191` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106312.md)
  `CVE-2026-106312` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-106353.md)
  `CVE-2026-106353` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-20
- [Google Chrome: Confused deputy in DeviceBoundSessionCredentials in Google Chrome prior to 155.0.8059.39…](https://agentprime.io/advisories/CVE-2026-106359.md)
  `CVE-2026-106359` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-441
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106344.md)
  `CVE-2026-106344` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Google Chrome: UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39…](https://agentprime.io/advisories/CVE-2026-106317.md)
  `CVE-2026-106317` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-451
- [Google Chrome: UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to…](https://agentprime.io/advisories/CVE-2026-106338.md)
  `CVE-2026-106338` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-451
- [Google Chrome: UI misrepresentation in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote…](https://agentprime.io/advisories/CVE-2026-106276.md)
  `CVE-2026-106276` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-451
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106340.md)
  `CVE-2026-106340` · CVE record: Google Chrome · CVSS 4.6 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Google Chrome: Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to…](https://agentprime.io/advisories/CVE-2026-106409.md)
  `CVE-2026-106409` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-706
- [Type confusion in Google Chrome](https://agentprime.io/advisories/CVE-2026-106341.md)
  `CVE-2026-106341` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106372.md)
  `CVE-2026-106372` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-106254.md)
  `CVE-2026-106254` · CVE record: Google Chrome · CVSS 5.1 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-106210.md)
  `CVE-2026-106210` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-106321.md)
  `CVE-2026-106321` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-106207.md)
  `CVE-2026-106207` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Race condition
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106384.md)
  `CVE-2026-106384` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-106351.md)
  `CVE-2026-106351` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure
- [Use of uninitialized resource in Google Chrome](https://agentprime.io/advisories/CVE-2026-106386.md)
  `CVE-2026-106386` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106183.md)
  `CVE-2026-106183` · CVE record: Google Chrome · CVSS 5.9 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106404.md)
  `CVE-2026-106404` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-106263.md)
  `CVE-2026-106263` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-20
- [Google Chrome: UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed…](https://agentprime.io/advisories/CVE-2026-106337.md)
  `CVE-2026-106337` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-451
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106352.md)
  `CVE-2026-106352` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106295.md)
  `CVE-2026-106295` · CVE record: Google Chrome · CVSS 4.2 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-106330.md)
  `CVE-2026-106330` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure
- [Out-of-bounds write in Google Chrome](https://agentprime.io/advisories/CVE-2026-106401.md)
  `CVE-2026-106401` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Out-of-bounds read in Google Chrome](https://agentprime.io/advisories/CVE-2026-106304.md)
  `CVE-2026-106304` · CVE record: Google Chrome · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Use of uninitialized resource in Google Chrome](https://agentprime.io/advisories/CVE-2026-106395.md)
  `CVE-2026-106395` · CVE record: Google Chrome · CVSS 4.7 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106271.md)
  `CVE-2026-106271` · CVE record: Google Chrome · CVSS 8.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106388.md)
  `CVE-2026-106388` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106398.md)
  `CVE-2026-106398` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-106212.md)
  `CVE-2026-106212` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control

Newest: <https://agentprime.io/advisories/technology/google-chrome.md>
Older: <https://agentprime.io/advisories/technology/google-chrome.md?cursor=WyIyMDI2LTEwLTA2VDE4OjQxOjI5Ljk2NzAwMFoiLCJDVkUtMjAyNi0xMDYyMTIiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=google-chrome&cursor=WyIyMDI2LTEwLTA2VDE4OjQxOjM5LjE4NDAwMFoiLCJDVkUtMjAyNi0xMDYzNzQiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/google-chrome/?cursor=WyIyMDI2LTEwLTA2VDE4OjQxOjM5LjE4NDAwMFoiLCJDVkUtMjAyNi0xMDYzNzQiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.