# Google Chrome.

Every CVE that names Google Chrome among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-121245.md)
  `CVE-2026-121245` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Race condition
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121077.md)
  `CVE-2026-121077` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121238.md)
  `CVE-2026-121238` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121042.md)
  `CVE-2026-121042` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Google Chrome: UI misrepresentation in Shopping in Google Chrome on on Android prior to 157.0.8103.38…](https://agentprime.io/advisories/CVE-2026-121110.md)
  `CVE-2026-121110` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-451
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-121158.md)
  `CVE-2026-121158` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Information disclosure
- [Google Chrome: UI misrepresentation in UI in Google Chrome prior to 157.0.8103.38 allowed a remote…](https://agentprime.io/advisories/CVE-2026-121216.md)
  `CVE-2026-121216` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-451
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121128.md)
  `CVE-2026-121128` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Use of uninitialized resource in Google Chrome](https://agentprime.io/advisories/CVE-2026-121176.md)
  `CVE-2026-121176` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Google Chrome: UI misrepresentation in Passwords in Google Chrome on on iOS prior to 157.0.8103.38…](https://agentprime.io/advisories/CVE-2026-121186.md)
  `CVE-2026-121186` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-451
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-121223.md)
  `CVE-2026-121223` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Information disclosure
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121164.md)
  `CVE-2026-121164` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Type confusion in Google Chrome](https://agentprime.io/advisories/CVE-2026-121218.md)
  `CVE-2026-121218` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121257.md)
  `CVE-2026-121257` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121070.md)
  `CVE-2026-121070` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Time-of-check time-of-use race condition in Google Chrome](https://agentprime.io/advisories/CVE-2026-121048.md)
  `CVE-2026-121048` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: Race condition
- [Use after free in Google Chrome](https://agentprime.io/advisories/CVE-2026-121202.md)
  `CVE-2026-121202` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121194.md)
  `CVE-2026-121194` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121212.md)
  `CVE-2026-121212` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Google Chrome: UI misrepresentation in Bluetooth in Google Chrome prior to 157.0.8103.38 allowed a…](https://agentprime.io/advisories/CVE-2026-121215.md)
  `CVE-2026-121215` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-451
- [Out-of-bounds read in Google Chrome](https://agentprime.io/advisories/CVE-2026-121184.md)
  `CVE-2026-121184` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Incomplete cleanup in Google Chrome](https://agentprime.io/advisories/CVE-2026-121096.md)
  `CVE-2026-121096` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-459
- [Google Chrome: UI misrepresentation in PermissionElement in Google Chrome prior to 157.0.8103.38 allowed…](https://agentprime.io/advisories/CVE-2026-121067.md)
  `CVE-2026-121067` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-451
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-121132.md)
  `CVE-2026-121132` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Information disclosure
- [Observable discrepancy in Google Chrome](https://agentprime.io/advisories/CVE-2026-121187.md)
  `CVE-2026-121187` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Information disclosure
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-121239.md)
  `CVE-2026-121239` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Information disclosure
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121116.md)
  `CVE-2026-121116` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Google Chrome: Confused deputy in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote…](https://agentprime.io/advisories/CVE-2026-121171.md)
  `CVE-2026-121171` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-441
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121065.md)
  `CVE-2026-121065` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-121254.md)
  `CVE-2026-121254` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Information disclosure
- [Use of uninitialized resource in Google Chrome](https://agentprime.io/advisories/CVE-2026-121033.md)
  `CVE-2026-121033` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121088.md)
  `CVE-2026-121088` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-121163.md)
  `CVE-2026-121163` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-20
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-121059.md)
  `CVE-2026-121059` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Information disclosure
- [Google Chrome: Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a…](https://agentprime.io/advisories/CVE-2026-121170.md)
  `CVE-2026-121170` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-913
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121220.md)
  `CVE-2026-121220` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121075.md)
  `CVE-2026-121075` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121030.md)
  `CVE-2026-121030` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121040.md)
  `CVE-2026-121040` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121136.md)
  `CVE-2026-121136` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121103.md)
  `CVE-2026-121103` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Use of uninitialized resource in Google Chrome](https://agentprime.io/advisories/CVE-2026-121072.md)
  `CVE-2026-121072` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121183.md)
  `CVE-2026-121183` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121231.md)
  `CVE-2026-121231` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121255.md)
  `CVE-2026-121255` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Integer overflow in Google Chrome](https://agentprime.io/advisories/CVE-2026-121219.md)
  `CVE-2026-121219` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Google Chrome: UI misrepresentation in Prompts in Google Chrome prior to 157.0.8103.38 allowed a remote…](https://agentprime.io/advisories/CVE-2026-121122.md)
  `CVE-2026-121122` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-451
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121039.md)
  `CVE-2026-121039` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Google Chrome: Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38…](https://agentprime.io/advisories/CVE-2026-121200.md)
  `CVE-2026-121200` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-706
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-121106.md)
  `CVE-2026-121106` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Information disclosure
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121248.md)
  `CVE-2026-121248` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121193.md)
  `CVE-2026-121193` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Google Chrome: UI misrepresentation in PageInfo in Google Chrome on on iOS prior to 157.0.8103.38…](https://agentprime.io/advisories/CVE-2026-121177.md)
  `CVE-2026-121177` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-451
- [Execution with unnecessary privileges in Google Chrome](https://agentprime.io/advisories/CVE-2026-121234.md)
  `CVE-2026-121234` · CVE record: Google Chrome · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Privilege escalation
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-121115.md)
  `CVE-2026-121115` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-20
- [Google Chrome: Use of released resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote…](https://agentprime.io/advisories/CVE-2026-121256.md)
  `CVE-2026-121256` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-672
- [Incorrect authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121066.md)
  `CVE-2026-121066` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [Execution with unnecessary privileges in Google Chrome](https://agentprime.io/advisories/CVE-2026-121196.md)
  `CVE-2026-121196` · CVE record: Google Chrome · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Privilege escalation
- [Information disclosure in Google Chrome](https://agentprime.io/advisories/CVE-2026-121099.md)
  `CVE-2026-121099` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Information disclosure
- [Missing authorization in Google Chrome](https://agentprime.io/advisories/CVE-2026-121199.md)
  `CVE-2026-121199` · CVE record: Google Chrome · CVSS 5.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control

Newest: <https://agentprime.io/advisories/technology/google-chrome.md>
Older: <https://agentprime.io/advisories/technology/google-chrome.md?cursor=WyIyMDI2LTExLTAzVDIwOjQyOjQwLjg5MTAwMFoiLCJDVkUtMjAyNi0xMjExOTkiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=google-chrome&cursor=WyIyMDI2LTExLTAzVDIwOjQyOjUyLjQzODAwMFoiLCJDVkUtMjAyNi0xMjEwNDkiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/google-chrome/?cursor=WyIyMDI2LTExLTAzVDIwOjQyOjUyLjQzODAwMFoiLCJDVkUtMjAyNi0xMjEwNDkiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.