Chrome Releases: ChromeOS Flex

Long Term Support Channel Update for ChromeOS

Thursday, August 27, 2026

A new LTS-144 version 144.0.7559.261(Platform Version: 16503.94.0), is being rolled out for most ChromeOS devices.

This version includes selected security fixes including:

516715010 High CVE-2026-76033 Inappropriate implementation in CORS

517916024 High CVE-2026-12462 Use after free in Media

517153191 High CVE-2026-12025 Insufficient validation of untrusted input

513757918 High CVE-2026-76018 Privilege elevation in Import

516482138 High CVE-2026-12016 Insufficient validation of untrusted input

545124048 High CVE-2026-76023 Improper resource control in Linux Toolkit Theming

516413817 Medium CVE-2026-11701 Insufficient validation of untrusted input in Guest View

513830374 High CVE-2026-11664 Use after free in Payments

543798025 High CVE-2026-76022 Buffer overflow in Network

543082390 High CVE-2026-76045 Use after free in WebGL

536676756 High CVE-2026-19558 Use after free in Extensions

520543781 High CVE-2026-13027 Use after free in FileSystem

517448723 High CVE-2026-17693 Inappropriate implementation in FileSystem

532929679 High CVE-2026-15777 Use after free in UI

520167277 High CVE-2026-19144 Use after free in HTML

514009323 High CVE-2026-11666 Insufficient validation of untrusted input in Input

504644843 High CVE-2026-10949 Heap buffer overflow in Video

513564337 High CVE-2026-11658 Insufficient validation of untrusted input in Extensions

513156160 High CVE-2026-11652 Use after free in Extensions

540100588 High CVE-2026-19559 Use after free in HTML

502681591 High CVE-2026-10938 Insufficient validation of untrusted input in Input

496375695 Medium CVE-2026-9124 Insufficient validation of untrusted input in Input

503873388 High CVE-2026-9951 Use after free in UI

499065126 High CVE-2026-7991 Use after free in UI

517050585 High CVE-2026-11681 Use after free in Ozone

521878431 High CVE-2026-19145 Use after free in Translate

523699355 High CVE-2026-13034 Inappropriate implementation in Passwords

536512612 High CVE-2026-19165 Use after free in Extensions

Release notes for LTS-144 can be found here

Want to know more about Long-term Support? Click here

Andy Wu

Google Chrome OS

Stable Channel Update for ChromeOS / ChromeOS Flex

Wednesday, August 26, 2026

M-151, ChromeOS version 16733.57.0 (Browser version 151.0.7922.221) has rolled out to ChromeOS devices on the Stable channel.

If you find new issues, please let us know one of the following ways:

File a bug
Visit our ChromeOS communities

General: Chromebook Help Community
Beta Specific: ChromeOS Beta Help Community

Report an issue or send feedback on Chrome
Interested in switching channels? Find out how.

Andy Wu

Google ChromeOS

Beta Channel Update for ChromeOS / ChromeOS Flex

Tuesday, August 25, 2026

The Beta channel is being updated to OS version 16765.31.0 (Browser version 152.0.7977.63) for most ChromeOS devices.

If you find new issues, please let us know one of the following ways:

File a bug
Visit our ChromeOS communities

Report an issue or send feedback on Chrome
Interested in switching channels? Find out how.

Luis Menezes

Google ChromeOS

Long Term Support Channel Update for ChromeOS

Monday, August 24, 2026

541854084543798025540100588513757918522819252539032888543082390516715010517612295534862220536439844536676756534867485540138836511731805513602949536512612532939327515428251536470854533053621540289900498079379500097298513564337520167277 here here

Stable Channel Update for ChromeOS / ChromeOS Flex

Wednesday, August 19, 2026

M-151, ChromeOS version 16733.54.0 (Browser version 151.0.7922.168) has rolled out to ChromeOS devices on the Stable channel.

If you find new issues, please let us know one of the following ways:

File a bug
Visit our ChromeOS communities

General: Chromebook Help Community
Beta Specific: ChromeOS Beta Help Community

Report an issue or send feedback on Chrome
Interested in switching channels? Find out how.

Andy Wu

Google ChromeOS

Beta Channel Update for ChromeOS / ChromeOS Flex

Tuesday, August 18, 2026

The Beta channel is being updated to OS version 16765.24.0 (Browser version 152.0.7977.51) for most ChromeOS devices.

If you find new issues, please let us know one of the following ways:

File a bug
Visit our ChromeOS communities

General: Chromebook Help Community
Beta Specific: ChromeOS Beta Help Community

Report an issue or send feedback on Chrome
Interested in switching channels? Find out how.

Luis Menezes

Google ChromeOS

Beta Channel Update for ChromeOS / ChromeOS Flex

Friday, August 14, 2026

The Beta channel is being updated to OS version 16765.19.0 (Browser version 152.0.7977.39) for most ChromeOS devices.

If you find new issues, please let us know one of the following ways:

Luis Menezes

Google ChromeOS

Stable Channel Update for ChromeOS / ChromeOS Flex

Thursday, August 13, 2026

M-151, ChromeOS version 16733.48.0 (Browser version 151.0.7922.141) has rolled out to ChromeOS devices on the Stable channel.

If you find new issues, please let us know one of the following ways:

File a bug
Visit our ChromeOS communities

General: Chromebook Help Community
Beta Specific: ChromeOS Beta Help Community

Report an issue or send feedback on Chrome
Interested in switching channels? Find out how.

Andy Wu

Google ChromeOS

ChromeOS Vulnerability Rewards Program Reported Bug Fixes:

N/A

Other 3rd Party Security Fixes Included:

High Fixes CVE-2026-46242 (Bad epoll) - Linux Local Privilege Escalation

High Fixes CVE-2026-53359 Linux kernel vulnerability advisory

Medium Fixes [PSP-482][PRJ-ZERO][PowerVR] ARM64 driver allows UM to trigger a DC IVAC instruction on arbitrary UM VA or device memory

High Fixes CVE-2026-45202 [PSP-578][PowerVR] Silent High-Order CMA Memory Leak & Double Free in `_FreeOSPages_Fast`

High Fixes Stack OOB Read to Heap OOB Write in msm_ccmd_ioctl_simple via Guest-Controlled _IOC_SIZE

High Fixes Potential Use-After-Free in AccessibilityEventRewriter via reentrant queue flush on session ID change

High Fixes PPD directive injection via unescaped IPP .language sub-field

High Fixes Use-After-Free in shill TetheringManager during network restart

High Fixes Heap UAF in shill P2PManager via stale raw P2PDevice pointer

Android Security fixes can be found here

Chrome Browser Security Fixes:

[$500.0] [528501127] High CVE-2026-17725 Type Confusion in V8 on 2026-06-27

[$TBD] [527665262] Medium CVE-2026-17897 Inappropriate implementation in ORB on 2026-06-24

[$TBD] [525691898] Low CVE-2026-18019 Side-channel information leakage in Media on 2026-06-19

[$TBD] [525331547] Medium CVE-2026-17896 Use after free in DevTools on 2026-06-18

[$TBD] [524931675] Medium CVE-2026-17895 Inappropriate implementation in DataTransfer on 2026-06-17

[$TBD] [524825209] Medium CVE-2026-17894 Use after free in Views on 2026-06-16

[$TBD] [524822998] Medium CVE-2026-17892 Inappropriate implementation in WebXR on 2026-06-16

[$TBD] [524029061] Medium CVE-2026-17890 Insufficient validation of untrusted input in DevTools on 2026-06-14

[$TBD] [523735357] Medium CVE-2026-17889 Uninitialized Use in WebXR on 2026-06-13

[$TBD] [523731236] Low CVE-2026-18017 Use after free in Dawn on 2026-06-13

[$TBD] [523725277] Critical CVE-2026-17656 Use after free in Ozone on 2026-06-13

[$TBD] [523720529] Medium CVE-2026-17888 Insufficient validation of untrusted input in WebUI on 2026-06-13

[$TBD] [523717010] Medium CVE-2026-17887 Use after free in TabStrip on 2026-06-13

[$TBD] [523708527] Low CVE-2026-18016 Insufficient policy enforcement in Chrome for iOS on 2026-06-13

[$TBD] [523698038] Medium CVE-2026-17885 Inappropriate implementation in Paint on 2026-06-13

[$TBD] [523692228] Medium CVE-2026-17884 Object lifecycle issue in WebRTC on 2026-06-13

[$TBD] [523639090] Medium CVE-2026-17883 Inappropriate implementation in Headless on 2026-06-13

[$TBD] [523637452] Medium CVE-2026-17882 Policy bypass in Extensions on 2026-06-13

[$TBD] [523495723] High CVE-2026-17721 Out of bounds write in ANGLE on 2026-06-12

[$TBD] [523477987] Medium CVE-2026-17881 Use after free in WebXR on 2026-06-12

[$TBD] [523248021] Low CVE-2026-18014 Insufficient validation of untrusted input in DevTools on 2026-06-12

[$TBD] [523229759] Medium CVE-2026-17880 Inappropriate implementation in Autofill on 2026-06-12

[$1000.0] [523030583] High CVE-2026-17658 Use after free in V8 on 2026-06-11

[$TBD] [522938824] Low CVE-2026-18012 Use after free in PDFium on 2026-06-11

[$TBD] [522878450] Medium CVE-2026-17879 Inappropriate implementation in Autofill on 2026-06-11

[$TBD] [522781838] Medium CVE-2026-17878 Inappropriate implementation in CSS on 2026-06-11

[$TBD] [522556145] Critical CVE-2026-17655 Insufficient validation of untrusted input in ANGLE on 2026-06-10

[$TBD] [522545249] High CVE-2026-17720 Insufficient policy enforcement in Passwords on 2026-06-10

[$TBD] [522426086] Medium CVE-2026-17877 Inappropriate implementation in Chromoting on 2026-06-10

[$TBD] [522425471] Medium CVE-2026-17876 Inappropriate implementation in Payments on 2026-06-10

[$TBD] [522419718] Low CVE-2026-18009 Insufficient validation of untrusted input in Passwords on 2026-06-10

[$TBD] [522419819] Low CVE-2026-18010 Inappropriate implementation in Passwords on 2026-06-10

[$TBD] [522412676] Low CVE-2026-18008 Inappropriate implementation in Settings on 2026-06-10

[$TBD] [522404101] Low CVE-2026-18007 Inappropriate implementation in Input on 2026-06-10

[$TBD] [522396262] Low CVE-2026-18006 Inappropriate implementation in Google Lens on 2026-06-10

[$TBD] [522304853] High CVE-2026-17719 Use after free in Input on 2026-06-10

[$TBD] [522300211] Low Inappropriate implementation in WebXR on 2026-06-10

[$TBD] [522299155] Medium CVE-2026-17875 Use after free in PDFium on 2026-06-10

[$TBD] [522280805] Low CVE-2026-18004 Insufficient policy enforcement in Speech on 2026-06-10

[$TBD] [522079372] High CVE-2026-17718 Use after free in ANGLE on 2026-06-09

[$TBD] [522063116] High CVE-2026-17717 Integer overflow in ANGLE on 2026-06-09

[$TBD] [521938924] Medium CVE-2026-17871 Inappropriate implementation in Passwords on 2026-06-09

[$TBD] [521864362] Low CVE-2026-18002 Insufficient validation of untrusted input in Google Lens on 2026-06-09

[$TBD] [521784856] Medium CVE-2026-17870 Insufficient validation of untrusted input in Cast on 2026-06-09

[$TBD] [521759269] Medium CVE-2026-17869 Out of bounds read in WebXR on 2026-06-09

[$TBD] [521757779] Low CVE-2026-18001 Inappropriate implementation in WebGL on 2026-06-09

[$TBD] [521623907] Low CVE-2026-18000 Insufficient policy enforcement in USB on 2026-06-08

[$TBD] [521601450] Low CVE-2026-17998 Incorrect security UI in Extensions on 2026-06-08

[$TBD] [521491778] High CVE-2026-17715 Inappropriate implementation in Passwords on 2026-06-08

[$TBD] [521476960] Low CVE-2026-17997 Inappropriate implementation in Passwords on 2026-06-08

[$TBD] [521293438] High CVE-2026-17714 Uninitialized Use in ANGLE on 2026-06-08

[$TBD] [520972775] Low CVE-2026-17995 Out of bounds read in Dawn on 2026-06-07

[$500.0] [520656237] Medium CVE-2026-17729 Use after free in V8 on 2026-06-06

[$TBD] [520743499] Medium CVE-2026-17868 Insufficient policy enforcement in USB on 2026-06-06

[$TBD] [520527496] Medium CVE-2026-17867 Insufficient validation of untrusted input in Dawn on 2026-06-05

[$TBD] [520516655] Medium CVE-2026-17865 Inappropriate implementation in Crypto on 2026-06-05

[$TBD] [520514458] Critical CVE-2026-17653 Use after free in Skia on 2026-06-05

[$TBD] [520191468] Medium CVE-2026-17858 Uninitialized Use in WebNN on 2026-06-04

[$TBD] [520186620] Medium CVE-2026-17857 Inappropriate implementation in Network on 2026-06-04

[$TBD] [520110535] Low CVE-2026-17991 Insufficient validation of untrusted input in AI on 2026-06-04

[$TBD] [520018012] Low CVE-2026-17990 Insufficient validation of untrusted input in WebAuthn on 2026-06-04

[$TBD] [520017306] Low CVE-2026-17989 Type Confusion in V8 on 2026-06-04

[$TBD] [520005624] Low CVE-2026-17988 Insufficient validation of untrusted input in Navigation on 2026-06-04

[$TBD] [519988071] Low CVE-2026-17987 Insufficient validation of untrusted input in Notifications on 2026-06-04

[$TBD] [519981896] Low CVE-2026-17986 Insufficient policy enforcement in Bluetooth on 2026-06-04

[$TBD] [519981430] Low CVE-2026-17985 Insufficient policy enforcement in Speech on 2026-06-04

[$TBD] [519665978] High CVE-2026-17705 Integer overflow in libxml on 2026-06-04

[$TBD] [519664497] Low CVE-2026-17979 Race in V8 on 2026-06-03

[$TBD] [519744561] Low CVE-2026-17983 Incorrect security UI in Global Media Controls on 2026-06-03

[$TBD] [519735808] Low CVE-2026-17982 Insufficient validation of untrusted input in Cast on 2026-06-03

[$TBD] [519719512] Low CVE-2026-17981 Inappropriate implementation in Blink on 2026-06-03

[$TBD] [519500882] Medium CVE-2026-17854 Insufficient policy enforcement in WebMCP on 2026-06-03

[$TBD] [519610845] Low Side-channel information leakage in WebCodecs on 2026-06-03

[$TBD] [519603552] Low CVE-2026-17977 Policy bypass in CSS on 2026-06-03

[$TBD] [519472272] Medium CVE-2026-17853 Inappropriate implementation in DevTools on 2026-06-03

[$TBD] [519455164] Low CVE-2026-17976 Policy bypass in Extensions on 2026-06-03

[$TBD] [519348818] Medium CVE-2026-17852 Inappropriate implementation in Media Router on 2026-06-02

[$TBD] [519262990] Critical CVE-2026-17652 Use after free in Views on 2026-06-02

[$TBD] [519259107] High CVE-2026-17704 Use after free in ANGLE on 2026-06-02

[$TBD] [519243927] Medium CVE-2026-17851 Side-channel information leakage in Autofill on 2026-06-02

[$TBD] [519232592] Low CVE-2026-17974 Insufficient policy enforcement in DevTools on 2026-06-02

[$TBD] [519078527] Medium CVE-2026-17850 Inappropriate implementation in Permissions on 2026-06-02

[$TBD] [518815075] Low CVE-2026-17971 Inappropriate implementation in Frame on 2026-06-01

[$TBD] [518814464] Low CVE-2026-17970 Insufficient validation of untrusted input in Passwords on 2026-06-01

[$TBD] [518812295] Low CVE-2026-17969 Inappropriate implementation in Passwords on 2026-06-01

[$TBD] [518284253] Medium CVE-2026-17848 Insufficient validation of untrusted input in Codecs on 2026-05-31

[$TBD] [518337516] Low CVE-2026-17968 Uninitialized Use in WebXR on 2026-05-30

[$TBD] [518243653] Medium CVE-2026-17847 Insufficient validation of untrusted input in ANGLE on 2026-05-30

[$TBD] [518112775] Medium CVE-2026-17845 Inappropriate implementation in CSS on 2026-05-30

[$TBD] [518111542] Medium CVE-2026-17844 Insufficient validation of untrusted input in Cast on 2026-05-30

[$TBD] [518103887] Medium CVE-2026-17843 Inappropriate implementation in CSS on 2026-05-29

[$TBD] [517972812] Medium CVE-2026-17836 Use after free in V8 on 2026-05-29

[$TBD] [518082162] Medium CVE-2026-17840 Incorrect security UI in Passwords on 2026-05-29

[$TBD] [518049812] Low CVE-2026-17965 Incorrect security UI in Chrome for iOS on 2026-05-29

[$TBD] [517978932] Medium CVE-2026-17837 Insufficient validation of untrusted input in DevTools on 2026-05-29

[$TBD] [517973093] High CVE-2026-17702 Inappropriate implementation in Skia on 2026-05-29

[$TBD] [517793801] Medium CVE-2026-17834 Inappropriate implementation in Passwords on 2026-05-29

[$TBD] [517789833] High CVE-2026-17700 Insufficient validation of untrusted input in Actor on 2026-05-29

[$TBD] [517785292] High CVE-2026-17699 Use after free in Views on 2026-05-29

[$TBD] [517779123] Medium CVE-2026-17833 Inappropriate implementation in Passwords on 2026-05-29

[$TBD] [517759257] Low CVE-2026-17963 Inappropriate implementation in SVG on 2026-05-28

[$TBD] [517757268] Low CVE-2026-17962 Inappropriate implementation in Blink on 2026-05-28

[$TBD] [517723319] Medium CVE-2026-17832 Use after free in ANGLE on 2026-05-28

[$TBD] [517714728] Medium CVE-2026-17831 Insufficient validation of untrusted input in Passwords on 2026-05-28

[$TBD] [517705103] Medium CVE-2026-17829 Insufficient policy enforcement in Passwords on 2026-05-28

[$TBD] [517693726] Medium CVE-2026-17827 Inappropriate implementation in CSS on 2026-05-28

[$TBD] [517655543] Medium CVE-2026-17824 Insufficient policy enforcement in ServiceWorker on 2026-05-28

[$TBD] [517628043] Medium CVE-2026-17823 Insufficient policy enforcement in WebXR on 2026-05-28

[$TBD] [517607890] Low CVE-2026-17959 Inappropriate implementation in Network on 2026-05-28

[$TBD] [517597914] Medium CVE-2026-17821 Insufficient policy enforcement in Extensions on 2026-05-28

[$TBD] [517550034] High CVE-2026-17696 Side-channel information leakage in Media on 2026-05-28

[$TBD] [517538206] Low CVE-2026-17958 Inappropriate implementation in Views on 2026-05-28

[$TBD] [517511796] High CVE-2026-17694 Use after free in DOM on 2026-05-28

[$TBD] [517493101] Medium CVE-2026-17820 Insufficient policy enforcement in Autofill on 2026-05-28

[$TBD] [517487028] Medium CVE-2026-17819 Inappropriate implementation in WebAppInstalls on 2026-05-28

[$TBD] [517476342] Low CVE-2026-17957 Inappropriate implementation in CORS on 2026-05-28

[$TBD] [517466133] Medium CVE-2026-17818 Inappropriate implementation in Network on 2026-05-28

[$TBD] [517461759] Medium CVE-2026-17817 Inappropriate implementation in ReportingAndNEL on 2026-05-28

[$TBD] [517448723] High CVE-2026-17693 Inappropriate implementation in FileSystem on 2026-05-28

[$TBD] [517436171] Low CVE-2026-17956 Inappropriate implementation in Scheduling on 2026-05-28

[$TBD] [517429672] Medium CVE-2026-17816 Inappropriate implementation in Speech on 2026-05-28

[$TBD] [517427352] Medium CVE-2026-17815 Insufficient policy enforcement in GuestView on 2026-05-28

[$TBD] [517385072] Low CVE-2026-17955 Insufficient validation of untrusted input in Payments on 2026-05-28

[$TBD] [517383492] Low CVE-2026-17954 Policy bypass in MHTML on 2026-05-27

[$TBD] [517350808] High CVE-2026-17692 Use after free in DataTransfer on 2026-05-27

[$TBD] [517316174] Low CVE-2026-17952 Inappropriate implementation in V8 on 2026-05-27

[$TBD] [517307966] Critical CVE-2026-17651 Insufficient validation of untrusted input in Dawn on 2026-05-27

[$TBD] [517180511] Low CVE-2026-17951 Heap buffer overflow in WebRTC on 2026-05-27

[$TBD] [517101596] Medium CVE-2026-17812 Inappropriate implementation in DigitalCredentials on 2026-05-27

[$TBD] [517045160] High CVE-2026-17689 Uninitialized Use in ANGLE on 2026-05-27

[$TBD] [516985726] High CVE-2026-17687 Type Confusion in ANGLE on 2026-05-26

[$TBD] [516917065] High CVE-2026-17686 Insufficient validation of untrusted input in Passwords on 2026-05-26

[$TBD] [516910278] High CVE-2026-17685 Use after free in Autofill on 2026-05-26

[$TBD] [516887576] High CVE-2026-17683 Inappropriate implementation in ANGLE on 2026-05-26

[$TBD] [516849257] Low CVE-2026-17948 Type Confusion in V8 on 2026-05-26

[$TBD] [516837126] High CVE-2026-17682 Integer overflow in ANGLE on 2026-05-26

[$TBD] [516813184] High CVE-2026-17681 Insufficient validation of untrusted input in Web Authentication on 2026-05-26

[$TBD] [516813317] Medium CVE-2026-17809 Insufficient validation of untrusted input in Extensions on 2026-05-26

[$TBD] [516778390] Medium CVE-2026-17808 Uninitialized Use in WebGL on 2026-05-26

[$TBD] [516763884] Medium CVE-2026-17807 Use after free in V8 on 2026-05-26

[$TBD] [516486611] High CVE-2026-17680 Heap buffer overflow in Color on 2026-05-25

[$TBD] [516433058] Medium CVE-2026-17806 Insufficient validation of untrusted input in Extensions on 2026-05-25

[$TBD] [516430649] High CVE-2026-17679 Insufficient validation of untrusted input in Print Preview on 2026-05-25

[$TBD] [515452019] High CVE-2026-17678 Out of bounds read in ANGLE on 2026-05-21

[$TBD] [515448947] Medium CVE-2026-17804 Use after free in Media on 2026-05-21

[$TBD] [515438919] Medium CVE-2026-17803 Insufficient validation of untrusted input in Save to Drive on 2026-05-21

[$TBD] [515438256] Low CVE-2026-17947 Use after free in WebSockets on 2026-05-21

[$TBD] [515437522] Low CVE-2026-17946 Uninitialized Use in Dawn on 2026-05-21

[$TBD] [514519203] Low CVE-2026-17945 Inappropriate implementation in Navigation on 2026-05-18

[$TBD] [514512198] Medium CVE-2026-17802 Side-channel information leakage in GPU on 2026-05-18

[$TBD] [514482938] Medium CVE-2026-17801 Out of bounds memory access in ANGLE on 2026-05-18

[$TBD] [514480948] Medium CVE-2026-17800 Side-channel information leakage in MediaRecording on 2026-05-18

[$TBD] [514461031] Medium CVE-2026-17799 Insufficient validation of untrusted input in Safe Browsing on 2026-05-18

[$TBD] [514460133] Medium CVE-2026-17798 Inappropriate implementation in Cast on 2026-05-18

[$TBD] [514442821] Critical CVE-2026-17650 Use after free in Compositing on 2026-05-18

[$TBD] [514441966] Medium CVE-2026-17797 Inappropriate implementation in CSS on 2026-05-18

[$TBD] [514427844] Medium CVE-2026-17796 Side-channel information leakage in WebXR on 2026-05-18

[$TBD] [514424283] Low CVE-2026-17943 Inappropriate implementation in Parser on 2026-05-18

[$TBD] [514406198] Low CVE-2026-17942 Side-channel information leakage in SVG on 2026-05-18

[$TBD] [514242889] Medium CVE-2026-17795 Insufficient validation of untrusted input in GetUserMedia on 2026-05-18

[$TBD] [514060089] Low CVE-2026-17939 Inappropriate implementation in Passwords on 2026-05-17

[$TBD] [514006959] Medium CVE-2026-17791 Insufficient validation of untrusted input in Payments on 2026-05-17

[$TBD] [513920258] High CVE-2026-17675 Out of bounds write in ANGLE on 2026-05-16

[$TBD] [513920298] High CVE-2026-17676 Inappropriate implementation in ANGLE on 2026-05-16

[$TBD] [513866380] Low CVE-2026-17937 Inappropriate implementation in DevTools on 2026-05-16

[$TBD] [513864014] Low CVE-2026-17936 Inappropriate implementation in DevTools on 2026-05-16

[$TBD] [513863267] Low CVE-2026-17935 Heap buffer overflow in Codecs on 2026-05-16

[$TBD] [513838421] Low CVE-2026-17934 Insufficient validation of untrusted input in DevTools on 2026-05-16

[$TBD] [513824957] Medium CVE-2026-17788 Inappropriate implementation in Blink on 2026-05-16

[$TBD] [513822044] Low CVE-2026-17933 Inappropriate implementation in DOMStorage on 2026-05-16

[$TBD] [513791232] High CVE-2026-17674 Inappropriate implementation in HTML on 2026-05-16

[$TBD] [513783632] Medium CVE-2026-17787 Inappropriate implementation in DevTools on 2026-05-16

[$TBD] [513781245] Low CVE-2026-17931 Inappropriate implementation in DevTools on 2026-05-16

[$TBD] [513770449] Medium CVE-2026-17786 Insufficient validation of untrusted input in DevTools on 2026-05-16

[$TBD] [513769898] Medium CVE-2026-17785 Uninitialized Use in ANGLE on 2026-05-16

[$TBD] [513769158] Low CVE-2026-17930 Insufficient validation of untrusted input in Extensions on 2026-05-16

[$TBD] [513768645] Low CVE-2026-17929 Insufficient validation of untrusted input in DevTools on 2026-05-16

[$TBD] [513762372] Low CVE-2026-17928 Inappropriate implementation in DataTransfer on 2026-05-16

[$TBD] [513754837] Low CVE-2026-17927 Insufficient policy enforcement in DevTools on 2026-05-15

[$TBD] [513735900] Low CVE-2026-17926 Insufficient validation of untrusted input in DevTools on 2026-05-15

[$TBD] [513735177] High CVE-2026-17673 Integer overflow in QUIC on 2026-05-15

[$TBD] [513714124] Low CVE-2026-17924 Use after free in DNS on 2026-05-15

[$TBD] [513612928] Low CVE-2026-17923 Policy bypass in Enterprise on 2026-05-15

[$TBD] [513611659] Low CVE-2026-17922 Inappropriate implementation in Enterprise on 2026-05-15

[$TBD] [513532735] Medium CVE-2026-17783 Inappropriate implementation in Loader on 2026-05-15

[$TBD] [513503197] Low CVE-2026-17921 Insufficient validation of untrusted input in Navigation on 2026-05-15

[$TBD] [513502990] Medium CVE-2026-17781 Inappropriate implementation in Extensions on 2026-05-15

[$TBD] [513485951] Medium CVE-2026-17780 Inappropriate implementation in Isolated Web Apps on 2026-05-15

[$TBD] [513478933] Medium CVE-2026-17779 Inappropriate implementation in Site Isolation on 2026-05-15

[$TBD] [513467993] Medium CVE-2026-17778 Use after free in Extensions on 2026-05-15

[$TBD] [513462236] Medium CVE-2026-17777 Inappropriate implementation in Autofill on 2026-05-15

[$TBD] [513413942] Low CVE-2026-17920 Use after free in V8 on 2026-05-14

[$TBD] [513404032] Medium CVE-2026-17776 Policy bypass in Receiver on 2026-05-14

[$TBD] [513375270] High CVE-2026-17672 Insufficient validation of untrusted input in Chromecast on 2026-05-14

[$TBD] [513363822] Medium CVE-2026-17775 Inappropriate implementation in PresentationAPI on 2026-05-14

[$TBD] [513323066] Medium CVE-2026-17774 Insufficient validation of untrusted input in Variations on 2026-05-14

[$TBD] [513257423] High CVE-2026-17671 Insufficient validation of untrusted input in ANGLE on 2026-05-14

[$TBD] [513232523] Medium CVE-2026-17773 Insufficient validation of untrusted input in Cast on 2026-05-14

[$TBD] [513228974] High CVE-2026-17670 Use after free in Views on 2026-05-14

[$TBD] [513197846] Medium CVE-2026-17772 Out of bounds read in WebGL on 2026-05-14

[$TBD] [513160525] Medium CVE-2026-17771 Uninitialized Use in Skia on 2026-05-14

[$TBD] [513134019] High CVE-2026-17668 Uninitialized Use in ANGLE on 2026-05-14

[$TBD] [513127137] Low CVE-2026-17918 Use after free in Sync on 2026-05-14

[$TBD] [513043537] High CVE-2026-17667 Uninitialized Use in ANGLE on 2026-05-13

[$TBD] [513022076] Medium CVE-2026-17769 Insufficient validation of untrusted input in Cast on 2026-05-13

[$TBD] [512999037] Medium CVE-2026-17768 Insufficient validation of untrusted input in WebSockets on 2026-05-13

[$TBD] [511765328] Medium CVE-2026-17765 Inappropriate implementation in WebProtect on 2026-05-10

[$TBD] [511761758] High CVE-2026-17666 Cryptographic Flaw in Enterprise on 2026-05-10

[$TBD] [511754400] Medium CVE-2026-17764 Inappropriate implementation in FedCM on 2026-05-10

[$TBD] [511277457] High CVE-2026-17665 Use after free in V8 on 2026-05-08

[$TBD] [510808598] Low CVE-2026-17916 Insufficient policy enforcement in Settings on 2026-05-07

[$TBD] [506473189] Medium CVE-2026-17760 Side-channel information leakage in NoStatePrefetch on 2026-04-25

[$TBD] [506377118] Low CVE-2026-17914 Side-channel information leakage in Skia on 2026-04-25

[$3000.0] [506193577] Low CVE-2026-17898 Use after free in DevTools on 2026-04-24

[$TBD] [504650654] Medium CVE-2026-17759 Uninitialized Use in Codecs on 2026-04-20

[$5000.0] [503801946] Medium CVE-2026-17758 Heap buffer overflow in Dawn Reported by [Hyeonjun Ahn (@_deayzl)] on 2026-04-18

[$TBD] [502505715] Low CVE-2026-17911 Insufficient policy enforcement in SVG on 2026-04-14

[$36000.0] [502293787] High CVE-2026-17657 Use after free in Navigation on 2026-04-13

[$TBD] [502351526] Medium CVE-2026-17757 Uninitialized Use in Skia on 2026-04-13

[$TBD] [501980797] Medium CVE-2026-17756 Insufficient policy enforcement in Presentation on 2026-04-12

[$TBD] [501854535] Medium CVE-2026-17755 Incorrect security UI in Extensions on 2026-04-12

[$TBD] [501749600] Low CVE-2026-17910 Insufficient policy enforcement in NFC on 2026-04-11

[$TBD] [501693236] Low CVE-2026-17909 Insufficient validation of untrusted input in Isolated Web Apps on 2026-04-11

[$TBD] [501675996] Medium CVE-2026-17754 Inappropriate implementation in Blink on 2026-04-11

[$TBD] [501628355] Medium CVE-2026-17753 Inappropriate implementation in Autofill on 2026-04-11

[$TBD] [501591293] Medium CVE-2026-17751 Inappropriate implementation in AdFilter on 2026-04-10

[$TBD] [500560234] Medium CVE-2026-17750 Use after free in ANGLE on 2026-04-07

[$TBD] [500554346] High CVE-2026-17664 Insufficient validation of untrusted input in Loader on 2026-04-07

[$TBD] [500526602] Medium CVE-2026-17749 Insufficient validation of untrusted input in Extensions on 2026-04-07

[$TBD] [500494349] Medium CVE-2026-17748 Inappropriate implementation in Extensions on 2026-04-07

[$TBD] [500472958] Medium CVE-2026-17747 Insufficient validation of untrusted input in Payments on 2026-04-07

[$TBD] [500172224] Medium CVE-2026-17745 Out of bounds read in Skia on 2026-04-06

[$TBD] [500137309] Medium CVE-2026-17744 Inappropriate implementation in File Input on 2026-04-06

[$TBD] [499204022] Medium CVE-2026-17743 Insufficient policy enforcement in ControlledFrame on 2026-04-03

[$TBD] [499003233] Medium CVE-2026-17742 Insufficient policy enforcement in Payments on 2026-04-02

[$TBD] [498827800] Medium CVE-2026-17740 Uninitialized Use in ANGLE on 2026-04-01

[$TBD] [498353463] Medium CVE-2026-17739 Insufficient policy enforcement in Extensions on 2026-03-31

[$TBD] [498079379] Medium CVE-2026-17738 Insufficient validation of untrusted input in Payments on 2026-03-31

[$TBD] [497837927] Low CVE-2026-17907 Side-channel information leakage in Network on 2026-03-30

[$TBD] [497654761] Low CVE-2026-17906 Insufficient validation of untrusted input in Bluetooth on 2026-03-29

[$TBD] [497491557] High CVE-2026-17662 Insufficient policy enforcement in Prefetch on 2026-03-29

[$TBD] [497451790] High CVE-2026-17661 Use after free in Loader on 2026-03-29

[$TBD] [497428001] High CVE-2026-17660 Insufficient validation of untrusted input in Network on 2026-03-29

[$TBD] [497366217] Low CVE-2026-17905 Inappropriate implementation in SurfaceCapture on 2026-03-28

[$TBD] [497337759] Low CVE-2026-17904 Insufficient policy enforcement in NFC on 2026-03-28

[$TBD] [497277880] Low CVE-2026-17903 Insufficient policy enforcement in Chromecast on 2026-03-28

[$TBD] [497251066] Low CVE-2026-17902 Inappropriate implementation in Editing on 2026-03-28

[$TBD] [496715442] Medium CVE-2026-17736 Insufficient validation of untrusted input in WebView on 2026-03-26

[$TBD] [496569497] Medium CVE-2026-17735 Insufficient validation of untrusted input in BFCache on 2026-03-26

[$TBD] [496304083] Medium CVE-2026-17734 Inappropriate implementation in Autofill on 2026-03-25

[$TBD] [495793059] Medium CVE-2026-17733 Inappropriate implementation in QUIC on 2026-03-24

[$TBD] [495463654] High CVE-2026-17659 Inappropriate implementation in SiteIsolation on 2026-03-23

[$2000.0] [476646486] Medium CVE-2026-17732 Inappropriate implementation in SVG Reported by [Lyra Rebane (rebane2001)] on 2026-01-17

[$10000.0] [461167648] Medium CVE-2026-17728 Inappropriate implementation in Extensions on 2025-11-16

[$1000.0] [375959766] Low CVE-2026-17899 Insufficient policy enforcement in DevTools on 2024-10-28

[$TBD] [40057032] Medium CVE-2026-17730 Side-channel information leakage in Autofill Reported by [Dominic Battre (battre@chromium.org) ] on 2021-08-26

[$TBD] [540289900] Low CVE-2026-19177 Insufficient validation of untrusted input in UI on 2026-07-29

[$500.0] [540157141] High CVE-2026-19176 Use after free in Skia Reported by [WinD39 - Huynh Dinh Vu] on 2026-07-29

[$TBD] [540138836] High CVE-2026-19175 Use after free in Payments on 2026-07-28

[$1000.0] [538332338] High CVE-2026-19173 Out of bounds write in Skia on 2026-07-24

[$2500.0] [538378084] High CVE-2026-19174 Integer overflow in V8 Reported by [Seunghyun Lee (@0x10n) of QED Audit (qedaudit.io)] on 2026-07-23

[$TBD] [537838324] Critical CVE-2026-19172 Use after free in Views on 2026-07-22

[$TBD] [537729021] Critical CVE-2026-19170 Use after free in WebGL on 2026-07-22

[$5000.0] [537390933] High CVE-2026-19169 Insufficient validation of untrusted input in Contextual Tasks Reported by [] on 2026-07-21

[$500.0] [536945254] High CVE-2026-19168 Inappropriate implementation in V8 Reported by [Found by XBOW and triaged by Andrés Luksenberg] on 2026-07-20

[$TBD] [536584251] Low CVE-2026-19166 Use after free in Web Authentication Reported by [h3ee] on 2026-07-20

[$TBD] [536666274] High CVE-2026-19167 Integer overflow in GPU on 2026-07-19

[$500.0] [536512612] High CVE-2026-19165 Use after free in Extensions on 2026-07-19

[$TBD] [536470854] High CVE-2026-19164 Insufficient validation of untrusted input in Codecs on 2026-07-18

[$TBD] [536271629] High CVE-2026-19162 Out of bounds write in V8 on 2026-07-18

[$TBD] [536165038] High CVE-2026-19161 Uninitialized Use in Skia on 2026-07-17

[$TBD] [536068737] High CVE-2026-19160 Uninitialized Use in Skia on 2026-07-17

[$TBD] [536067175] High CVE-2026-19159 Use after free in Views on 2026-07-17

[$TBD] [534903095] Critical CVE-2026-19157 Out of bounds write in ANGLE on 2026-07-14

[$TBD] [533331920] High CVE-2026-19156 Heap buffer overflow in Base Reported by [Viktoria Zlatinova] on 2026-07-10

[$TBD] [533053621] High CVE-2026-19155 Use after free in Payments on 2026-07-09

[$TBD] [532939327] High CVE-2026-19153 Insufficient validation of untrusted input in Workers on 2026-07-09

[$TBD] [531165110] High CVE-2026-19152 Inappropriate implementation in Navigation on 2026-07-04

[$TBD] [530663440] High CVE-2026-19151 Use after free in V8 on 2026-07-02

[$TBD] [526380803] High CVE-2026-19150 Inappropriate implementation in V8 on 2026-06-22

[$TBD] [524824288] Critical CVE-2026-19149 Use after free in Aura on 2026-06-16

[$TBD] [524460000] High CVE-2026-19148 Out of bounds write in GPU on 2026-06-15

[$TBD] [524439798] High CVE-2026-19147 Use after free in Aura on 2026-06-15

[$TBD] [521878431] High CVE-2026-19145 Use after free in Translate on 2026-06-09

[$TBD] [520167277] High CVE-2026-19144 Use after free in HTML on 2026-06-04

[$TBD] [515428251] High CVE-2026-19142 Use after free in Views on 2026-05-21

[$TBD] [513602949] High CVE-2026-19141 Use after free in Resources on 2026-05-15

[$TBD] [513044017] High CVE-2026-19140 Use after free in GPU on 2026-05-13

[$TBD] [500097298] High CVE-2026-19138 Heap buffer overflow in CrashReporting on 2026-04-06

[$32000.0] [499602793] Critical CVE-2026-19137 Use after free in WebGL on 2026-04-04

[$TBD] [540482895] High CVE-2026-19560 Use after free in Blink Reported by [WinD39 - Huynh Dinh Vu] on 2026-07-30

[$TBD] [540100588] High CVE-2026-19559 Use after free in HTML on 2026-07-28

[$TBD] [536676756] High CVE-2026-19558 Use after free in Extensions on 2026-07-19

[$500.0] [535000102] High CVE-2026-19556 Use after free in V8 on 2026-07-14

Chrome Releases

Long Term Support Channel Update for ChromeOS

Stable Channel Update for ChromeOS / ChromeOS Flex

Beta Channel Update for ChromeOS / ChromeOS Flex

Long Term Support Channel Update for ChromeOS

Stable Channel Update for ChromeOS / ChromeOS Flex

Beta Channel Update for ChromeOS / ChromeOS Flex

Beta Channel Update for ChromeOS / ChromeOS Flex

Stable Channel Update for ChromeOS / ChromeOS Flex

Labels

Archive