Chrome Releases: Stable Channel Update for ChromeOS / ChromeOS Flex

Stable Channel Update for ChromeOS / ChromeOS Flex

Tuesday, September 8, 2026

The Stable channel is being updated to OS version 16765.41.0 (Browser version 152.0.7977.113) for most ChromeOS devices.

If you find new issues, please let us know one of the following ways:

File a bug
Visit our ChromeOS communities

General: Chromebook Help Community
Beta Specific: ChromeOS Beta Help Community

Report an issue or send feedback on Chrome
Interested in switching channels? Find out how.

Luis Menezes

Google ChromeOS
ChromeOS Vulnerability Rewards Program Reported Bug Fixes:N/AOther 3rd Party Security Fixes Included:Medium Fixes Fix for KVM guest-controlled index vulnerability in kvm-cpufreq Medium Fixes virtio-gpu object-creation cleanup double-free/UAF High Fixes CVE-2026-64561 (Zapscape) - KVM VM Escape Medium Fixes Navi: MTK V4L2 decoder exploit High Fixes CVE-2026-53359 Linux kernel vulnerability advisory High Fixes Vulnerability: Local privilege escalation in LTS 6.12.93 (kernelCTF) High Fixes PPD directive injection via unescaped IPP .language sub-field High Fixes Heap Use-After-Free in cupsd via create_local_bg_thread
Android Security fixes can be found here
Chrome Browser Security Fixes:[$500.0] [548340637] High CVE-2026-79078 Use after free in FedCM on 2026-08-18 [$1000.0] [546670199] High CVE-2026-79236 Type confusion in V8 on 2026-08-14 [$1000.0] [545767601] High CVE-2026-78938 Type confusion in V8 on 2026-08-12 [$2000.0] [543707066] High CVE-2026-79274 Information leak in GPU on 2026-08-07 [$TBD] [540870921] High CVE-2026-78954 Incorrect authorization in Extensions on 2026-07-30 [$1000.0] [540430406] High CVE-2026-78899 Use after free in V8 on 2026-07-29 [$TBD] [538969297] Medium CVE-2026-79141 Incorrect authorization in Browser on 2026-07-25 [$TBD] [537846307] Medium CVE-2026-79025 Improper input validation in Workers on 2026-07-22 [$TBD] [537835609] High CVE-2026-78904 Type confusion in ANGLE on 2026-07-22 [$TBD] [537233963] High CVE-2026-79027 Use after free in WebRTC Reported by [Mozilla] on 2026-07-21 [$TBD] [537145191] Medium CVE-2026-79266 Use after free in DevTools on 2026-07-20 [$TBD] [537109028] High CVE-2026-79026 Use after free in Extensions on 2026-07-20 [$1000.0] [536913431] Medium CVE-2026-79216 Buffer overflow in Blink Reported by [Found by XBOW and triaged by Andrés Luksenberg] on 2026-07-20 [$TBD] [536662911] Medium CVE-2026-79073 Improper state validation in Parser on 2026-07-20 [$TBD] [536659904] High CVE-2026-79275 Use after free in ANGLE on 2026-07-19 [$TBD] [536636648] High CVE-2026-79149 Use after free in ANGLE on 2026-07-19 [$TBD] [536568319] High CVE-2026-79014 Race condition in Autofill on 2026-07-19 [$TBD] [536606137] High CVE-2026-79198 Use after free in Platform on 2026-07-19 [$TBD] [536526176] Medium CVE-2026-79185 Information leak in DOM on 2026-07-19 [$TBD] [536505721] High CVE-2026-79189 Out of bounds write in ANGLE on 2026-07-19 [$TBD] [536444272] High CVE-2026-79188 Out of bounds write in ANGLE on 2026-07-18 [$TBD] [536428842] Medium CVE-2026-78963 Improper input validation in Media on 2026-07-18 [$TBD] [536428615] High CVE-2026-78900 Improper input validation in Media on 2026-07-18 [$TBD] [536428988] Medium CVE-2026-79004 Out of bounds read in Media on 2026-07-18 [$TBD] [536166543] Low CVE-2026-78914 Uninitialized resource in Skia on 2026-07-17 [$TBD] [535876894] Medium CVE-2026-79174 Incorrect authorization in Extensions Reported by [章鱼哥@aipyaipy.com] on 2026-07-17 [$TBD] [535379043] High CVE-2026-79118 Uninitialized resource in ANGLE on 2026-07-15 [$TBD] [535374213] Medium CVE-2026-78984 Uninitialized resource in GPU on 2026-07-15 [$TBD] [534591074] High CVE-2026-79232 Use after free in Aura on 2026-07-13 [$TBD] [534468209] High CVE-2026-79235 Use after free in WebGL on 2026-07-13 [$TBD] [533917984] Medium CVE-2026-78960 Information leak in Extensions Reported by [Oran Simhony from Palo Alto Networks] on 2026-07-12 [$TBD] [533511967] Low CVE-2026-79260 Improper input validation in Cookies on 2026-07-10 [$TBD] [533093250] Medium CVE-2026-79075 Information leak in Geolocation on 2026-07-09 [$TBD] [533079345] Low CVE-2026-79179 Incorrect authorization in DOM on 2026-07-09 [$TBD] [533075126] Low CVE-2026-79133 Incorrect authorization in Forms on 2026-07-09 [$TBD] [533060125] Low CVE-2026-79021 Missing authorization in InterestGroups on 2026-07-09 [$TBD] [533021205] Low CVE-2026-79017 Race condition in Extensions on 2026-07-09 [$TBD] [533001362] Low CVE-2026-79125 Information leak in XR on 2026-07-09 [$TBD] [532988552] High CVE-2026-79043 Out of bounds write in ANGLE on 2026-07-09 [$TBD] [532957785] Medium CVE-2026-79034 Information leak in CORS on 2026-07-09 [$TBD] [532923954] Medium CVE-2026-79221 Uninitialized resource in Dawn on 2026-07-09 [$TBD] [532921800] Critical CVE-2026-79200 Use after free in Aura on 2026-07-09 [$TBD] [532914769] Medium CVE-2026-79033 Insufficient control flow management in DevTools on 2026-07-09 [$TBD] [532914190] High CVE-2026-78895 Information leak in Paint on 2026-07-09 [$TBD] [532904047] High CVE-2026-78908 Information leak in Canvas on 2026-07-09 [$TBD] [532303080] Low CVE-2026-79148 Off-by-one error in DevTools on 2026-07-07 [$TBD] [532182486] Medium CVE-2026-79203 Improper input validation in DevTools on 2026-07-07 [$TBD] [532162132] Medium CVE-2026-79227 Type confusion in DevTools on 2026-07-07 [$TBD] [531297707] Low CVE-2026-79197 Use after free in V8 on 2026-07-04 [$TBD] [531245718] Low CVE-2026-79045 Type confusion in V8 on 2026-07-04 [$TBD] [530816571] Low CVE-2026-79223 Integer overflow in Chromium on 2026-07-03 [$TBD] [529991907] High CVE-2026-78948 Buffer overflow in WebGL on 2026-06-30 [$TBD] [528397177] High CVE-2026-79072 Improper state validation in Performance on 2026-06-26 [$TBD] [525689847] Medium CVE-2026-79097 Use after free in V8 on 2026-06-19 [$TBD] [525686865] Medium CVE-2026-78901 Race condition in V8 on 2026-06-19 [$TBD] [525683797] High CVE-2026-79111 Improper input validation in Dawn on 2026-06-19 [$TBD] [525311654] Low CVE-2026-79246 Information leak in DataTransfer on 2026-06-18 [$TBD] [524864599] Low CVE-2026-79112 Out of bounds read in Skia Reported by [] on 2026-06-17 [$TBD] [524822825] Medium CVE-2026-78962 Uninitialized resource in WebXR on 2026-06-16 [$TBD] [524698525] High CVE-2026-79082 Incorrect authorization in Transactions Platform on 2026-06-16 [$TBD] [524520965] Medium CVE-2026-79211 Incorrect authorization in USB on 2026-06-16 [$TBD] [524541667] Medium CVE-2026-79252 Information leak in ServiceWorker on 2026-06-16 [$TBD] [524418836] Medium CVE-2026-79258 Incorrect authorization in WebXR on 2026-06-15 [$TBD] [523723064] High CVE-2026-78965 Uninitialized resource in ANGLE on 2026-06-13 [$TBD] [523717796] High CVE-2026-79130 Buffer overflow in ANGLE on 2026-06-13 [$TBD] [523716748] Medium CVE-2026-78913 Use after free in Chromoting on 2026-06-13 [$TBD] [523661149] Medium CVE-2026-79265 Incomplete cleanup in GetUserMedia on 2026-06-13 [$TBD] [523572877] Low CVE-2026-79244 Use after free in Animation on 2026-06-13 [$TBD] [523313378] Low CVE-2026-78947 Incomplete cleanup in Chromium Reported by [] on 2026-06-12 [$TBD] [523296105] High CVE-2026-79187 Use after free in WebRTC on 2026-06-12 [$TBD] [523237735] Low CVE-2026-78980 Improper input validation in ReaderMode on 2026-06-12 [$TBD] [523232966] Medium CVE-2026-79249 Code injection in Bisection on 2026-06-12 [$TBD] [523095011] High CVE-2026-79093 Incorrect authorization in Paint on 2026-06-11 [$TBD] [522957054] Medium CVE-2026-78951 Use after free in ServiceWorker on 2026-06-11 [$TBD] [522823211] Medium CVE-2026-79220 Information leak in Network on 2026-06-11 [$TBD] [522803735] Low CVE-2026-79018 Information leak in FoldableAPIs on 2026-06-11 [$TBD] [522791354] Medium CVE-2026-79003 Incorrect authorization in Device on 2026-06-11 [$TBD] [522418913] Low CVE-2026-79056 Use after free in ServiceWorker on 2026-06-10 [$TBD] [522351802] Medium CVE-2026-79134 Incorrect authorization in GetUserMedia on 2026-06-10 [$TBD] [522304549] Low CVE-2026-79108 UI misrepresentation in Web Authentication on 2026-06-10 [$TBD] [522294538] High CVE-2026-79155 Race condition in FileSystem on 2026-06-10 [$TBD] [522291712] Low CVE-2026-79015 Improper input validation in ServiceWorker on 2026-06-10 [$TBD] [522077127] Medium CVE-2026-79085 Missing authorization in Network on 2026-06-09 [$TBD] [521942358] High CVE-2026-79183 Use after free in Accessibility on 2026-06-09 [$TBD] [521502218] High CVE-2026-79212 Missing authorization in Passwords on 2026-06-08 [$TBD] [521285077] High CVE-2026-79202 Use after free in Chromecast on 2026-06-08 [$TBD] [520542088] Medium CVE-2026-79269 Uninitialized resource in ANGLE on 2026-06-05 [$TBD] [520516462] Medium CVE-2026-79068 Improper resource exposure in StreamsAPI on 2026-06-05 [$TBD] [520492291] Medium CVE-2026-79154 Missing authorization in DevTools on 2026-06-05 [$TBD] [520481800] Medium CVE-2026-79103 Incorrect reference resolution in Speech on 2026-06-05 [$TBD] [520052954] Medium CVE-2026-78944 Use after free in DevTools Reported by [] on 2026-06-05 [$TBD] [520179360] Medium CVE-2026-79245 Use after free in UI on 2026-06-04 [$TBD] [520121111] Medium CVE-2026-79059 Information leak in BFCache on 2026-06-04 [$TBD] [520117546] Medium CVE-2026-79178 Incorrect authorization in Web Authentication on 2026-06-04 [$TBD] [520016142] Low CVE-2026-78956 Type confusion in V8 on 2026-06-04 [$TBD] [519984038] Medium CVE-2026-79083 Improper enforcement of behavioral workflow in Media on 2026-06-04 [$TBD] [519369088] Medium CVE-2026-78983 Use after free in Views on 2026-06-02 [$TBD] [519254827] Low CVE-2026-79060 Incorrect authorization in StorageAccessAPI on 2026-06-02 [$TBD] [519246298] Low CVE-2026-79009 UI misrepresentation in UI on 2026-06-02 [$TBD] [519242511] Low CVE-2026-79058 Missing authorization in Passwords on 2026-06-02 [$TBD] [519229463] Low CVE-2026-78896 Information leak in StorageAccessAPI on 2026-06-02 [$TBD] [518125889] Low CVE-2026-78968 Missing authorization in Core on 2026-05-30 [$TBD] [518094442] Medium CVE-2026-79234 Injection in CSS on 2026-05-29 [$TBD] [518084889] Medium CVE-2026-78959 Improper handling of case sensitivity in FileSystem on 2026-05-29 [$TBD] [518078552] Medium CVE-2026-78903 Incomplete cleanup in SiteIsolation on 2026-05-29 [$TBD] [518065628] Medium CVE-2026-79205 Incorrect authorization in Network on 2026-05-29 [$TBD] [518062961] Medium CVE-2026-79070 Incorrect reference resolution in Cache on 2026-05-29 [$TBD] [518035396] Medium CVE-2026-79283 UI misrepresentation in Geometry on 2026-05-29 [$TBD] [518023156] Medium CVE-2026-79291 Information leak in CSS on 2026-05-29 [$TBD] [517959443] High CVE-2026-79257 Use after free in Views on 2026-05-29 [$TBD] [517774971] Medium CVE-2026-79238 Incorrect authorization in ServiceWorker on 2026-05-29 [$TBD] [517761566] Medium CVE-2026-79023 Incorrect authorization in Editing on 2026-05-28 [$TBD] [517746687] Medium CVE-2026-79293 Information leak in Animation on 2026-05-28 [$TBD] [517742721] High CVE-2026-78911 Incorrect authorization in USB on 2026-05-28 [$TBD] [517736936] High CVE-2026-79011 UI misrepresentation in Browser on 2026-05-28 [$TBD] [517718241] Low CVE-2026-78946 Incorrect authorization in Select on 2026-05-28 [$TBD] [517697155] Medium CVE-2026-79242 Observable discrepancy in HTML on 2026-05-28 [$TBD] [517673944] Low CVE-2026-79090 Improper privilege management in Actor on 2026-05-28 [$TBD] [517655953] Medium CVE-2026-79193 Information leak in Canvas on 2026-05-28 [$TBD] [517634590] Medium CVE-2026-79024 Information leak in ServiceWorker on 2026-05-28 [$TBD] [517608454] Medium CVE-2026-79099 Missing authorization in Network on 2026-05-28 [$TBD] [517606780] Medium CVE-2026-79191 Incorrect authorization in SiteIsolation on 2026-05-28 [$TBD] [517580738] Medium CVE-2026-79276 Improper privilege management in FileSystem on 2026-05-28 [$TBD] [517550421] Medium CVE-2026-78976 Improper input validation in StorageAccessAPI on 2026-05-28 [$TBD] [517550232] High CVE-2026-78934 Race condition in ReadAloud on 2026-05-28 [$TBD] [517540292] Low CVE-2026-79005 Incorrect authorization in StorageAccessAPI on 2026-05-28 [$TBD] [517527943] High CVE-2026-78986 Uninitialized resource in GPU on 2026-05-28 [$TBD] [517519352] High CVE-2026-79292 Integer overflow in Chromecast on 2026-05-28 [$TBD] [517518019] Critical CVE-2026-79052 Use after free in Aura on 2026-05-28 [$TBD] [517515945] High CVE-2026-79047 Use after free in Views on 2026-05-28 [$TBD] [517487890] Medium CVE-2026-79173 UI misrepresentation in WebAppInstalls on 2026-05-28 [$TBD] [517467117] Medium CVE-2026-79094 Race condition in Workers on 2026-05-28 [$TBD] [517404644] Medium CVE-2026-79287 Observable discrepancy in Forms on 2026-05-28 [$TBD] [517398863] Medium CVE-2026-78975 Incorrect authorization in DOM on 2026-05-28 [$TBD] [517364411] Medium CVE-2026-79050 Incorrect authorization in Network on 2026-05-27 [$TBD] [517245017] Medium CVE-2026-78905 Type confusion in ANGLE on 2026-05-27 [$TBD] [517074167] Medium CVE-2026-79151 Improper input validation in Safebrowsing on 2026-05-27 [$TBD] [517045394] Medium CVE-2026-79127 Out of bounds write in ANGLE on 2026-05-27 [$TBD] [516988476] Critical CVE-2026-79224 Use after free in Chromecast on 2026-05-26 [$TBD] [516947491] High CVE-2026-79219 Use after free in Bluetooth on 2026-05-26 [$TBD] [516921259] Medium CVE-2026-79272 Improper input validation in FindInPage on 2026-05-26 [$TBD] [516899248] Medium CVE-2026-79002 Incorrect authorization in SiteIsolation on 2026-05-26 [$TBD] [516824665] Medium CVE-2026-79229 Uninitialized resource in ANGLE on 2026-05-26 [$TBD] [516777082] Critical CVE-2026-79121 Improper input validation in Chromecast on 2026-05-26 [$TBD] [516764384] Critical CVE-2026-79054 Use after free in Chromecast on 2026-05-26 [$TBD] [516665605] Medium CVE-2026-78953 Missing authorization in SiteIsolation on 2026-05-26 [$TBD] [516427761] Critical CVE-2026-79290 Use after free in Aura on 2026-05-25 [$TBD] [516398679] Medium CVE-2026-79228 Incorrect authorization in SiteIsolation on 2026-05-25 [$TBD] [515477007] Medium CVE-2026-79214 Improper input validation in Preload on 2026-05-21 [$TBD] [514529599] Medium CVE-2026-78967 Missing authorization in BFCache on 2026-05-18 [$TBD] [514454739] Medium CVE-2026-79143 Incorrect authorization in FileSystem on 2026-05-18 [$TBD] [514439436] Medium CVE-2026-78955 Observable discrepancy in PerformanceAPIs on 2026-05-18 [$TBD] [514408247] Low CVE-2026-79261 Incorrect authorization in Controls on 2026-05-18 [$TBD] [514078852] Medium CVE-2026-78912 UI misrepresentation in Browser on 2026-05-17 [$TBD] [514038302] Low CVE-2026-79022 UI misrepresentation in Transactions Platform on 2026-05-17 [$TBD] [514017820] Medium CVE-2026-79020 Out of bounds read in Skia on 2026-05-17 [$TBD] [514010111] Low CVE-2026-79098 UI misrepresentation in PermissionElement on 2026-05-17 [$TBD] [514006744] Medium CVE-2026-79250 UI misrepresentation in Navigation on 2026-05-17 [$TBD] [513969378] Low CVE-2026-79147 Information leak in Skia on 2026-05-17 [$TBD] [513923164] Medium CVE-2026-78906 Race condition in ANGLE on 2026-05-16 [$TBD] [513850062] Medium CVE-2026-79053 Missing authorization in Lighthouse on 2026-05-16 [$TBD] [513841856] Medium CVE-2026-79051 Incorrect authorization in Loader on 2026-05-16 [$TBD] [513836495] Medium CVE-2026-79201 Improper access control in Workers on 2026-05-16 [$TBD] [513786555] Medium CVE-2026-79049 Incorrect reference resolution in Passwords on 2026-05-16 [$TBD] [513760788] Medium CVE-2026-79215 Integer overflow in WebGL on 2026-05-16 [$TBD] [513745793] Medium CVE-2026-79074 Information leak in Network on 2026-05-15 [$TBD] [513737209] Medium CVE-2026-79013 Improper input validation in Sync on 2026-05-15 [$TBD] [513719741] Medium CVE-2026-79199 Incorrect authorization in Network on 2026-05-15 [$TBD] [513688690] Low CVE-2026-79119 Use after free in PDF on 2026-05-15 [$TBD] [513608831] Medium CVE-2026-79122 Information leak in SignIn on 2026-05-15 [$TBD] [513607252] Medium CVE-2026-79226 Improper privilege management in Regional Capabilities on 2026-05-15 [$TBD] [513486883] Low CVE-2026-78897 Missing authorization in BrowserTag on 2026-05-15 [$TBD] [513392351] Medium CVE-2026-79251 Improper input validation in Network on 2026-05-14 [$TBD] [513361380] Low CVE-2026-79206 Out of bounds read in FileSystem on 2026-05-14 [$TBD] [513287677] Medium CVE-2026-79208 Missing authorization in HTTP2 on 2026-05-14 [$TBD] [513261751] High CVE-2026-78939 Use after free in Chromecast on 2026-05-14 [$TBD] [513222422] Medium CVE-2026-79259 Improper input validation in Safebrowsing on 2026-05-14 [$TBD] [513192145] Medium CVE-2026-78943 Improper input validation in Editing on 2026-05-14 [$TBD] [513172858] Low CVE-2026-79190 Incorrect authorization in Extensions on 2026-05-14 [$TBD] [513049445] Medium CVE-2026-79067 Missing authorization in Network on 2026-05-13 [$TBD] [513048462] Medium CVE-2026-79270 Uninitialized resource in ANGLE on 2026-05-13 [$TBD] [512971896] Medium CVE-2026-79120 Uninitialized resource in ANGLE on 2026-05-13 [$TBD] [511822878] Medium CVE-2026-79107 Incorrect authorization in TabGroups on 2026-05-10 [$TBD] [511819962] Medium CVE-2026-78940 Improper initialization in Network on 2026-05-10 [$TBD] [511806043] Medium CVE-2026-79038 Incorrect authorization in WebProtect on 2026-05-10 [$TBD] [511794959] Medium CVE-2026-79255 Improper input validation in WebRTC on 2026-05-10 [$TBD] [511736672] Medium CVE-2026-79066 Improper input validation in Navigation on 2026-05-10 [$TBD] [511260796] Medium CVE-2026-78910 Buffer overflow in V8 on 2026-05-08 [$TBD] [507483993] Medium CVE-2026-79264 Incorrect reference resolution in Preload on 2026-04-28 [$TBD] [506539337] Low CVE-2026-79181 Observable discrepancy in Glic on 2026-04-25 [$TBD] [505991181] Medium CVE-2026-78894 Race condition in Payments on 2026-04-24 [$TBD] [505951430] Medium CVE-2026-79137 Incorrect authorization in Extensions on 2026-04-23 [$TBD] [504633668] Medium CVE-2026-78969 Uninitialized resource in Video on 2026-04-20 [$TBD] [504356442] Medium CVE-2026-79231 Buffer overflow in Media on 2026-04-19 [$TBD] [504226770] Medium CVE-2026-79087 Injection in Chrome Tabs on 2026-04-19 [$TBD] [503847023] Medium CVE-2026-78907 Incorrect authorization in WebProtect on 2026-04-17 [$TBD] [503624894] Medium CVE-2026-79136 Incorrect authorization in ServiceWorker on 2026-04-17 [$TBD] [503585863] Medium CVE-2026-79110 Missing authorization in Preload on 2026-04-17 [$TBD] [503472696] Medium CVE-2026-79031 Improper resource exposure in Preload on 2026-04-16 [$1000.0] [503048520] Low CVE-2026-78974 UI misrepresentation in Linux Toolkit Theming Reported by [] on 2026-04-15 [$TBD] [503013378] Medium CVE-2026-78891 Buffer overflow in WebRTC Reported by [[goes here]] on 2026-04-15 [$TBD] [502918844] Medium CVE-2026-79248 Incorrect authorization in Input on 2026-04-15 [$TBD] [502888857] Medium CVE-2026-78991 Race condition in WebProtect on 2026-04-15 [$TBD] [502514083] Low CVE-2026-79000 Improper input validation in DeviceBoundSessionCredentials on 2026-04-14 [$TBD] [502488051] Medium CVE-2026-79095 Information leak in Payments on 2026-04-14 [$TBD] [502344135] Medium CVE-2026-79006 Protection mechanism failure in HttpsUpgrades on 2026-04-13 [$TBD] [502252964] Low CVE-2026-79196 Race condition in Editing on 2026-04-13 [$TBD] [502232151] Medium CVE-2026-79116 Missing authorization in Viz on 2026-04-13 [$TBD] [502139081] Medium CVE-2026-78942 Incorrect reference resolution in Loader on 2026-04-13 [$TBD] [502082953] Medium CVE-2026-79192 Improper input validation in Variations on 2026-04-13 [$TBD] [501892500] High CVE-2026-79195 Use after free in Script on 2026-04-12 [$TBD] [501881082] Low CVE-2026-78950 Integer overflow in WebRTC on 2026-04-12 [$TBD] [501799770] Medium CVE-2026-79065 Improper input validation in Network on 2026-04-11 [$TBD] [501759192] Medium CVE-2026-79144 Information leak in Skia on 2026-04-11 [$TBD] [501661601] Medium CVE-2026-79271 Information leak in DOM on 2026-04-11 [$TBD] [501637242] Medium CVE-2026-78909 Use after free in Views on 2026-04-11 [$TBD] [501604761] Medium CVE-2026-78990 Use after free in Compositing on 2026-04-10 [$TBD] [501594511] Medium CVE-2026-78987 Information leak in Canvas on 2026-04-10 [$TBD] [501416859] Low CVE-2026-79077 Incorrect authorization in WebProtect on 2026-04-10 [$TBD] [500492844] Medium CVE-2026-79028 Observable discrepancy in Network on 2026-04-07 [$TBD] [500311587] High CVE-2026-79218 Incorrect authorization in Sandbox on 2026-04-07 [$TBD] [500038021] Medium CVE-2026-78985 Incorrect reference resolution in FileSystem on 2026-04-06 [$TBD] [499068536] Medium CVE-2026-79237 Incorrect authorization in Navigation on 2026-04-02 [$TBD] [498367544] Medium CVE-2026-79109 Improper input validation in Printing on 2026-03-31 [$TBD] [498328139] Medium CVE-2026-79032 Improper input validation in Network on 2026-03-31 [$TBD] [498327743] Medium CVE-2026-78941 Information leak in Core on 2026-03-31 [$TBD] [497957278] Medium CVE-2026-78999 Improper privilege management in Navigation on 2026-03-30 [$TBD] [497948894] Medium CVE-2026-78945 Use after free in Views on 2026-03-30 [$TBD] [497876969] Low CVE-2026-79289 Improper control of a resource through its lifetime in Workers on 2026-03-30 [$TBD] [497869284] Medium CVE-2026-79010 Operation on a resource after expiration or release in Network on 2026-03-30 [$TBD] [497854976] Medium CVE-2026-79016 Observable discrepancy in SVG on 2026-03-30 [$TBD] [497839983] Medium CVE-2026-79267 Race condition in Workers on 2026-03-30 [$TBD] [497646947] Medium CVE-2026-79186 Incorrect authorization in Network on 2026-03-29 [$TBD] [497637694] Medium CVE-2026-78966 Externally controlled reference in QUIC on 2026-03-29 [$TBD] [497538341] Medium CVE-2026-79176 UI misrepresentation in Extensions on 2026-03-29 [$TBD] [497499482] Low CVE-2026-79184 Missing authorization in Preload on 2026-03-29 [$TBD] [497456156] Medium CVE-2026-79106 Improper input validation in Input on 2026-03-29 [$TBD] [497338168] Medium CVE-2026-79262 Incorrect authorization in Network on 2026-03-28 [$TBD] [497269030] Medium CVE-2026-78961 Incorrect authorization in Core on 2026-03-28 [$TBD] [497256260] Low CVE-2026-79263 Race condition in Extensions on 2026-03-28 [$TBD] [497205529] Medium CVE-2026-78958 Uninitialized resource in Skia on 2026-03-28 [$TBD] [497017869] Medium CVE-2026-79104 Missing authorization in Sensor on 2026-03-27 [$TBD] [496401361] Medium CVE-2026-79088 Incorrect authorization in FileSystem on 2026-03-25 [$TBD] [496395158] Medium CVE-2026-79076 Improper input validation in Sync on 2026-03-25 [$TBD] [496292729] Medium CVE-2026-79071 Race condition in GPU on 2026-03-25 [$TBD] [495998981] Medium CVE-2026-78893 Information leak in QUIC on 2026-03-24 [$TBD] [495579602] Medium CVE-2026-79007 Uninitialized resource in GPU on 2026-03-23 [$8000.0] [495021566] Medium CVE-2026-79209 Type confusion in Animation on 2026-03-22 [$2000.0] [40057398] Medium CVE-2026-79030 Observable discrepancy in Autofill Reported by [Young Min Kim (@ylemkimon), CompSec Lab at Seoul National University] on 2021-09-25 [$TBD] [553117928] High CVE-2026-84325 Improper input validation in DataTransfer on 2026-08-26 [$500.0] [547936520] High CVE-2026-84326 Uninitialized resource in V8 on 2026-08-17 [$TBD] [537105664] High CVE-2026-84349 Use after free in Browser on 2026-07-20 [$TBD] [533534913] High CVE-2026-84324 Use after free in Proxy on 2026-07-10 [$TBD] [523208474] High CVE-2026-84357 Improper input validation in Omnibox on 2026-06-12 [$TBD] [522302504] Medium CVE-2026-84335 Incorrect authorization in TabStrip on 2026-06-10 [$TBD] [521753402] Low CVE-2026-84331 Incorrect authorization in Actor on 2026-06-09 [$TBD] [518100026] Medium CVE-2026-84348 Information leak in MediaCapture on 2026-05-29 [$TBD] [514489238] Medium CVE-2026-84332 Incorrect authorization in SiteSettings on 2026-05-18 [$TBD] [514078656] High CVE-2026-84359 Information leak in Skia on 2026-05-17 [$TBD] [514006886] Medium CVE-2026-84358 Improper privilege management in Downloads on 2026-05-17 [$TBD] [513713427] Low CVE-2026-84350 Use after free in TabStrip on 2026-05-15 [$TBD] [511774376] Medium CVE-2026-84355 Incorrect authorization in Navigation on 2026-05-10 [$2000.0] [503787232] Low CVE-2026-84356 UI misrepresentation in FullScreen Reported by [] on 2026-04-17 [$TBD] [502411391] Medium CVE-2026-84323 Missing authorization in FileSystem on 2026-04-13 [$TBD] [501679156] Medium CVE-2026-84347 Use after free in WebRTC on 2026-04-11 [$TBD] [498839176] High CVE-2026-84354 Incorrect authorization in FileSystem on 2026-04-02 [$TBD] [498710886] Medium CVE-2026-84328 Missing authorization in FileSystem on 2026-04-01 [$TBD] [553449113] High CVE-2026-85051 Type confusion in Compositing on 2026-08-27 [$TBD] [553345874] High CVE-2026-85049 Use after free in Skia on 2026-08-27 [$TBD] [553119925] High CVE-2026-85042 Use after free in DevTools on 2026-08-26 [$1000.0] [552689418] High CVE-2026-85053 Improper resource exposure in CacheStorage on 2026-08-26 [$1000.0] [547819997] High CVE-2026-85045 Race condition in V8 Reported by [Brendan Dolan-Gavitt, XBOW] on 2026-08-17 [$1000.0] [542403045] High CVE-2026-85046 Type confusion in V8 on 2026-08-04 [$1500.0] [540357382] High CVE-2026-85048 Use after free in Compositing on 2026-07-29 [$TBD] [533502257] High CVE-2026-85043 Incomplete cleanup in Network on 2026-07-10 [$TBD] [502304489] High CVE-2026-85052 Out of bounds read in CrashReporting on 2026-04-13