Known Vulnerabilities for Chrome by Google
Listed below are 10 of the newest known vulnerabilities associated with "Chrome" by "Google".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-102878 json | mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to b... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-102331 json | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execu... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-102330 json | Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromise... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-102329 json | Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy i... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-102328 json | Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the s... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-102327 json | Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had co... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-102326 json | Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the s... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-102325 json | Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data ... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-102324 json | Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the ... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-102323 json | Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the s... | Not Provided | 2026-09-29 | 2026-09-30 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Chrome | 9.0.600.0 | ||||
| Application | Chrome | 9.0.599.0 | ||||
| Application | Chrome | 9.0.598.0 | ||||
| Application | Chrome | 9.0.597.99 | ||||
| Application | Chrome | 9.0.597.98 | ||||
| Application | Chrome | 9.0.597.97 | ||||
| Application | Chrome | 9.0.597.96 | ||||
| Application | Chrome | 9.0.597.94 | ||||
| Application | Chrome | 9.0.597.92 | ||||
| Application | Chrome | 9.0.597.90 | ||||
| Application | Chrome | 9.0.597.9 | ||||
| Application | Chrome | 9.0.597.88 | ||||
| Application | Chrome | 9.0.597.86 | ||||
| Application | Chrome | 9.0.597.85 | ||||
| Application | Chrome | 9.0.597.84 | ||||
| Application | Chrome | 9.0.597.83 | ||||
| Application | Chrome | 9.0.597.82 | ||||
| Application | Chrome | 9.0.597.81 | ||||
| Application | Chrome | 9.0.597.80 | ||||
| Application | Chrome | 9.0.597.8 |