CVE Tools
Track your stack

Google Chrome

7,411 CVEs tracked. 77 of them are in CISA KEV.

This hub aggregates every CVE we track for Google Chrome, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.

Google Chrome CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Google Chrome CVEs per month
MonthCVEs
2024-1113
2024-127
2025-0117
2025-029
2025-0316
2025-0413
2025-0514
2025-0610
2025-076
2025-0816
2025-0912
2025-101
2025-1167
2025-1219
2026-0112
2026-0220
2026-0374
2026-04144
2026-05370
2026-06965
2026-07487
2026-08396
2026-09467
2026-10658

Severity

How the 7,411 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical6959%
  • High3,47247%
  • Medium3,08342%
  • Low1592%

Latest CVEs

The 15 most recently published vulnerabilities affecting Google Chrome.

  1. CVE-2026-113274Use after free in ReadingMode in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)8.8
  2. CVE-2026-113083Memory corruption in Actor in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s...8.8
  3. CVE-2026-113013Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)8.8
  4. CVE-2026-113125Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)8.8
  5. CVE-2026-113088Memory corruption in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromi...8.8
  6. CVE-2026-113039Use after free in Bookmarks in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)8.8
  7. CVE-2026-113227Use after free in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)8.8
  8. CVE-2026-112996Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)8.8
  9. CVE-2026-113294Improper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...8.8
  10. CVE-2026-113286Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity:...8.8
  11. CVE-2026-113122Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)6.5
  12. CVE-2026-113182Memory corruption in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)8.8
  13. CVE-2026-113074Use after free in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve...8.8
  14. CVE-2026-113067Use after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)8.8
  15. CVE-2026-113130Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)8.8

Product grouping is registry-driven, with AI assist and human review. How it works