Advisories · Technology

Google Chrome.

Every CVE that names Google Chrome among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-106307 CVE record

CVSS 6.5 Medium

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106348 CVE record

CVSS 6.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 6 Oct 2026
CVE-2026-106375 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Incomplete cleanup in Google Chrome
- Google Chrome
- CWE-459
Not analysed yet 6 Oct 2026
CVE-2026-106360 CVE record

CVSS 4.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 6 Oct 2026
CVE-2026-106262 CVE record

CVSS 4.2 Medium

Incomplete cleanup in Google Chrome
- Google Chrome
- CWE-459
Not analysed yet 6 Oct 2026
CVE-2026-106292 CVE record

CVSS 8.3 High

Heap-based buffer overflow in Google Chrome
- Google Chrome
- Memory corruption
Not analysed yet 6 Oct 2026
CVE-2026-106301 CVE record

CVSS 8.1 High

Google Chrome: Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a…
- Google Chrome
- CWE-441
Not analysed yet 6 Oct 2026
CVE-2026-106373 CVE record

CVSS 8.8 High

Use after free in Google Chrome
- Google Chrome
- Memory corruption
Not analysed yet 6 Oct 2026
CVE-2026-106403 CVE record

CVSS 8.1 High

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106336 CVE record

CVSS 4.3 Medium

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 6 Oct 2026
CVE-2026-106391 CVE record

CVSS 4.2 Medium

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106232 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote…
- Google Chrome
- CWE-451
Not analysed yet 6 Oct 2026
CVE-2026-106229 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 6 Oct 2026
CVE-2026-106226 CVE record

CVSS 4.2 Medium

Improper input validation in Google Chrome
- Google Chrome
- CWE-20
Not analysed yet 6 Oct 2026
CVE-2026-106367 CVE record

CVSS 8.4 High

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106230 CVE record

CVSS 5.3 Medium

Google Chrome: Incorrect reference resolution in Offline in Google Chrome on on Android prior to…
- Google Chrome
- CWE-706
Not analysed yet 6 Oct 2026
CVE-2026-106213 CVE record

CVSS 4.3 Medium

Race condition in Google Chrome
- Google Chrome
- Race condition
Not analysed yet 6 Oct 2026
CVE-2026-106205 CVE record

CVSS 8.1 High

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106400 CVE record

CVSS 5.4 Medium

Clickjacking in Google Chrome
- Google Chrome
- CWE-1021
Not analysed yet 6 Oct 2026
CVE-2026-106387 CVE record

CVSS 8.8 High

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106328 CVE record

CVSS 5.9 Medium

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106216 CVE record

CVSS 5.4 Medium

Cross-site request forgery in Google Chrome
- Google Chrome
- Cross-site request forgery (CSRF)
Not analysed yet 6 Oct 2026
CVE-2026-106209 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed…
- Google Chrome
- CWE-451
Not analysed yet 6 Oct 2026
CVE-2026-106284 CVE record

CVSS 4.7 Medium

Out-of-bounds read in Google Chrome
- Google Chrome
- Memory corruption
Not analysed yet 6 Oct 2026
CVE-2026-106410 CVE record

CVSS 4.2 Medium

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106277 CVE record

CVSS 4.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 6 Oct 2026
CVE-2026-106289 CVE record

CVSS 6.5 Medium

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106228 CVE record

CVSS 8.3 High

Google Chrome: Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote…
- Google Chrome
- CWE-441
Not analysed yet 6 Oct 2026
CVE-2026-106333 CVE record

CVSS 5.4 Medium

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106201 CVE record

CVSS 8.8 High

Race condition in Google Chrome
- Google Chrome
- Race condition
Not analysed yet 6 Oct 2026
CVE-2026-106303 CVE record

CVSS 5.3 Medium

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 6 Oct 2026
CVE-2026-106180 CVE record

CVSS 3.1 Low

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 6 Oct 2026
CVE-2026-106206 CVE record

CVSS 5.9 Medium

Improper input validation in Google Chrome
- Google Chrome
- CWE-20
Not analysed yet 6 Oct 2026
CVE-2026-106280 CVE record

CVSS 6.5 Medium

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106322 CVE record

CVSS 6.1 Medium

Open redirect in Google Chrome
- Google Chrome
- Open redirect
Not analysed yet 6 Oct 2026
CVE-2026-106405 CVE record

CVSS 6.0 Medium

Time-of-check time-of-use race condition in Google Chrome
- Google Chrome
- Race condition
Not analysed yet 6 Oct 2026
CVE-2026-106356 CVE record

CVSS 5.4 Medium

Clickjacking in Google Chrome
- Google Chrome
- CWE-1021
Not analysed yet 6 Oct 2026
CVE-2026-106370 CVE record

CVSS 4.7 Medium

Use of uninitialized resource in Google Chrome
- Google Chrome
- Memory corruption
Not analysed yet 6 Oct 2026
CVE-2026-106188 CVE record

CVSS 6.1 Medium

Google Chrome: Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a…
- Google Chrome
- CWE-441
Not analysed yet 6 Oct 2026
CVE-2026-106392 CVE record

CVSS 4.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 6 Oct 2026
CVE-2026-106282 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote…
- Google Chrome
- CWE-451
Not analysed yet 6 Oct 2026
CVE-2026-106182 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote…
- Google Chrome
- CWE-451
Not analysed yet 6 Oct 2026
CVE-2026-106416 CVE record

CVSS 5.4 Medium

Code injection in Google Chrome
- Google Chrome
- Code injection
Not analysed yet 6 Oct 2026
CVE-2026-106302 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed…
- Google Chrome
- CWE-451
Not analysed yet 6 Oct 2026
CVE-2026-106246 CVE record

CVSS 5.4 Medium

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106311 CVE record

CVSS 5.4 Medium

Clickjacking in Google Chrome
- Google Chrome
- CWE-1021
Not analysed yet 6 Oct 2026
CVE-2026-106402 CVE record

CVSS 4.8 Medium

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106361 CVE record

CVSS 6.5 Medium

Google Chrome: Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior…
- Google Chrome
- CWE-684
Not analysed yet 6 Oct 2026
CVE-2026-106279 CVE record

CVSS 7.4 High

Google Chrome: Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to…
- Google Chrome
- CWE-706
Not analysed yet 6 Oct 2026
CVE-2026-106253 CVE record

CVSS 4.3 Medium

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106424 CVE record

CVSS 4.0 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 6 Oct 2026
CVE-2026-106342 CVE record

CVSS 8.8 High

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 6 Oct 2026
CVE-2026-106354 CVE record

CVSS 4.3 Medium

Resource exposure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 6 Oct 2026
CVE-2026-106326 CVE record

CVSS 4.4 Medium

Google Chrome: Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a…
- Google Chrome
- CWE-441
Not analysed yet 6 Oct 2026
CVE-2026-106198 CVE record

CVSS 8.2 High

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106378 CVE record

CVSS 8.3 High

Execution with unnecessary privileges in Google Chrome
- Google Chrome
- Privilege escalation
Not analysed yet 6 Oct 2026
CVE-2026-106290 CVE record

CVSS 4.7 Medium

Use of uninitialized resource in Google Chrome
- Google Chrome
- Memory corruption
Not analysed yet 6 Oct 2026
CVE-2026-106406 CVE record

CVSS 5.4 Medium

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106261 CVE record

CVSS 6.5 Medium

Use of uninitialized resource in Google Chrome
- Google Chrome
- Memory corruption
Not analysed yet 6 Oct 2026
CVE-2026-106408 CVE record

CVSS 6.5 Medium

Protection mechanism failure in Google Chrome
- Google Chrome
- CWE-693
Not analysed yet 6 Oct 2026