Advisories · Technology

Google Chrome.

Every CVE that names Google Chrome among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-106249 CVE record

CVSS 8.8 High

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106296 CVE record

CVSS 5.4 Medium

Improper privilege management in Google Chrome
- Google Chrome
- Privilege escalation
Not analysed yet 6 Oct 2026
CVE-2026-106259 CVE record

CVSS 5.4 Medium

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106221 CVE record

CVSS 8.3 High

Google Chrome: Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed…
- Google Chrome
- CWE-441
Not analysed yet 6 Oct 2026
CVE-2026-106417 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Integer overflow in Google Chrome
- Google Chrome
- Memory corruption
Not analysed yet 6 Oct 2026
CVE-2026-106220 CVE record

CVSS 8.8 High

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 6 Oct 2026
CVE-2026-106285 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 6 Oct 2026
CVE-2026-106264 CVE record

CVSS 5.4 Medium

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106399 CVE record

CVSS 3.3 Low

Out-of-bounds read in Google Chrome
- Google Chrome
- Memory corruption
Not analysed yet 6 Oct 2026
CVE-2026-106192 CVE record

CVSS 4.6 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 6 Oct 2026
CVE-2026-106247 CVE record

CVSS 8.3 High

Heap-based buffer overflow in Google Chrome
- Google Chrome
- Memory corruption
Not analysed yet 6 Oct 2026
CVE-2026-106186 CVE record

CVSS 8.6 High

Uncontrolled search path in Google Chrome
- Google Chrome
- CWE-427
Not analysed yet 6 Oct 2026
CVE-2026-106422 CVE record

CVSS 4.3 Medium

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106299 CVE record

CVSS 5.4 Medium

Improper input validation in Google Chrome
- Google Chrome
- CWE-20
Not analysed yet 6 Oct 2026
CVE-2026-106199 CVE record

CVSS 8.2 High

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106275 CVE record

CVSS 4.7 Medium

Use of uninitialized resource in Google Chrome
- Google Chrome
- Memory corruption
Not analysed yet 6 Oct 2026
CVE-2026-106362 CVE record

CVSS 6.5 Medium

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106260 CVE record

CVSS 4.3 Medium

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106297 CVE record

CVSS 4.3 Medium

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106287 CVE record

CVSS 4.3 Medium

Google Chrome: Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote…
- Google Chrome
- CWE-221
Not analysed yet 6 Oct 2026
CVE-2026-106252 CVE record

CVSS 8.8 High

Incorrect comparison in Google Chrome
- Google Chrome
- CWE-697
Not analysed yet 6 Oct 2026
CVE-2026-106427 CVE record

CVSS 5.4 Medium

Google Chrome: Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a…
- Google Chrome
- CWE-441
Not analysed yet 6 Oct 2026
CVE-2026-106306 CVE record

CVSS 5.4 Medium

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106394 CVE record

CVSS 4.3 Medium

Incomplete cleanup in Google Chrome
- Google Chrome
- CWE-459
Not analysed yet 6 Oct 2026
CVE-2026-106187 CVE record

CVSS 4.2 Medium

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106309 CVE record

CVSS 8.8 High

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106250 CVE record

CVSS 5.4 Medium

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106191 CVE record

CVSS 8.3 High

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106312 CVE record

CVSS 6.5 Medium

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106353 CVE record

CVSS 6.5 Medium

Improper input validation in Google Chrome
- Google Chrome
- CWE-20
Not analysed yet 6 Oct 2026
CVE-2026-106359 CVE record

CVSS 4.3 Medium

Google Chrome: Confused deputy in DeviceBoundSessionCredentials in Google Chrome prior to 155.0.8059.39…
- Google Chrome
- CWE-441
Not analysed yet 6 Oct 2026
CVE-2026-106344 CVE record

CVSS 5.4 Medium

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106317 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39…
- Google Chrome
- CWE-451
Not analysed yet 6 Oct 2026
CVE-2026-106338 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to…
- Google Chrome
- CWE-451
Not analysed yet 6 Oct 2026
CVE-2026-106276 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote…
- Google Chrome
- CWE-451
Not analysed yet 6 Oct 2026
CVE-2026-106340 CVE record

CVSS 4.6 Medium

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106409 CVE record

CVSS 8.3 High

Google Chrome: Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to…
- Google Chrome
- CWE-706
Not analysed yet 6 Oct 2026
CVE-2026-106341 CVE record

CVSS 8.8 High

Type confusion in Google Chrome
- Google Chrome
- Memory corruption
Not analysed yet 6 Oct 2026
CVE-2026-106372 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106254 CVE record

CVSS 5.1 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 6 Oct 2026
CVE-2026-106210 CVE record

CVSS 3.1 Low

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 6 Oct 2026
CVE-2026-106321 CVE record

CVSS 4.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 6 Oct 2026
CVE-2026-106207 CVE record

CVSS 8.8 High

Time-of-check time-of-use race condition in Google Chrome
- Google Chrome
- Race condition
Not analysed yet 6 Oct 2026
CVE-2026-106384 CVE record

CVSS 6.5 Medium

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106351 CVE record

CVSS 5.3 Medium

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 6 Oct 2026
CVE-2026-106386 CVE record

CVSS 6.5 Medium

Use of uninitialized resource in Google Chrome
- Google Chrome
- Memory corruption
Not analysed yet 6 Oct 2026
CVE-2026-106183 CVE record

CVSS 5.9 Medium

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106404 CVE record

CVSS 6.5 Medium

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106263 CVE record

CVSS 6.5 Medium

Improper input validation in Google Chrome
- Google Chrome
- CWE-20
Not analysed yet 6 Oct 2026
CVE-2026-106337 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed…
- Google Chrome
- CWE-451
Not analysed yet 6 Oct 2026
CVE-2026-106352 CVE record

CVSS 8.8 High

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106295 CVE record

CVSS 4.2 Medium

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106330 CVE record

CVSS 4.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 6 Oct 2026
CVE-2026-106401 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Out-of-bounds write in Google Chrome
- Google Chrome
- Memory corruption
Not analysed yet 6 Oct 2026
CVE-2026-106304 CVE record

CVSS 4.7 Medium

Out-of-bounds read in Google Chrome
- Google Chrome
- Memory corruption
Not analysed yet 6 Oct 2026
CVE-2026-106395 CVE record

CVSS 4.7 Medium

Use of uninitialized resource in Google Chrome
- Google Chrome
- Memory corruption
Not analysed yet 6 Oct 2026
CVE-2026-106271 CVE record

CVSS 8.1 High

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106388 CVE record

CVSS 5.3 Medium

Missing authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106398 CVE record

CVSS 4.3 Medium

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026
CVE-2026-106212 CVE record

CVSS 8.8 High

Incorrect authorization in Google Chrome
- Google Chrome
- Broken access control
Not analysed yet 6 Oct 2026