# Google Chrome vulnerabilities Source: https://junglewise.ai/threats/technologies/chrome Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/chrome.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 3,930 vulnerabilities in Google Chrome: 92 in the last 7 days and 1,850 in the last 90 days, 218 of them critical and 72 exploited in the wild. The most recent, CVE-2026-126922, was published on 11 November 2026. 689 vulnerabilities in the last four weeks, up 51% on the four before (456). 8 critical against 34. ## Counts - Last 7 days: 92 - Last 30 days: 744 - Last 90 days: 1850 - All time: 3930 (218 critical, 72 exploited in the wild) ## About Google Chrome Web browser developed by Google. ## Latest Google Chrome vulnerabilities - [CVE-2026-126922: Google Chrome out of bounds read in Skia](https://junglewise.ai/threats/cve-2026-126922-out-of-bounds-read-in-skia-in-google-chrome-prior-to-157-0-8103) (info, published 11 Nov 2026) - [CVE-2026-126921: Google Chrome use after free in Accessibility](https://junglewise.ai/threats/cve-2026-126921-use-after-free-in-accessibility-in-google-chrome-prior-to-157-0) (info, published 11 Nov 2026) - [CVE-2026-126920: Google Chrome information leak in Skia](https://junglewise.ai/threats/cve-2026-126920-information-leak-in-skia-in-google-chrome-prior-to-157-0-8103-78) (info, published 11 Nov 2026) - [CVE-2026-126919: Google Chrome use-after-free in BrowserTag](https://junglewise.ai/threats/cve-2026-126919-use-after-free-in-browsertag-in-google-chrome-prior-to-157-0) (info, published 11 Nov 2026) - [CVE-2026-126918: Google Chrome use-after-free in Layout](https://junglewise.ai/threats/cve-2026-126918-use-after-free-in-layout-in-google-chrome-prior-to-157-0-8103-78) (info, published 11 Nov 2026) - [CVE-2026-126917: Google Chrome memory corruption in V8](https://junglewise.ai/threats/cve-2026-126917-memory-corruption-in-v8-in-google-chrome-prior-to-157-0-8103-78) (info, published 11 Nov 2026) - [CVE-2026-126916: Google Chrome integer overflow in V8](https://junglewise.ai/threats/cve-2026-126916-integer-overflow-in-v8-in-google-chrome-prior-to-157-0-8103-78) (info, published 11 Nov 2026) - [CVE-2026-126915: Google Chrome uninitialized variable in Skia on Android](https://junglewise.ai/threats/cve-2026-126915-use-of-uninitialized-variable-in-skia-in-google-chrome-on-on) (info, published 11 Nov 2026) - [CVE-2026-126914: Google Chrome uninitialized resource in Skia](https://junglewise.ai/threats/cve-2026-126914-uninitialized-resource-in-skia-in-google-chrome-prior-to-157-0) (info, published 11 Nov 2026) - [CVE-2026-126913: Google Chrome out-of-bounds read in Compositing](https://junglewise.ai/threats/cve-2026-126913-out-of-bounds-read-in-compositing-in-google-chrome-prior-to-157) (info, published 11 Nov 2026) - [CVE-2026-126912: Google Chrome buffer overflow in Skia](https://junglewise.ai/threats/cve-2026-126912-buffer-overflow-in-skia-in-google-chrome-prior-to-157-0-8103-78) (info, published 11 Nov 2026) - [CVE-2026-126911: Google Chrome use after free in Accessibility](https://junglewise.ai/threats/cve-2026-126911-use-after-free-in-accessibility-in-google-chrome-prior-to-157-0) (info, published 11 Nov 2026) - [CVE-2026-126910: Google Chrome type confusion in V8](https://junglewise.ai/threats/cve-2026-126910-type-confusion-in-v8-in-google-chrome-prior-to-157-0-8103-78) (info, published 11 Nov 2026) - [CVE-2026-126909: Google Chrome use after free in Passwords](https://junglewise.ai/threats/cve-2026-126909-use-after-free-in-passwords-in-google-chrome-prior-to-157-0-8103) (info, published 11 Nov 2026) - [CVE-2026-126908: Google Chrome type confusion in V8](https://junglewise.ai/threats/cve-2026-126908-type-confusion-in-v8-in-google-chrome-prior-to-157-0-8103-78) (info, published 11 Nov 2026) - [CVE-2026-126907: Google Chrome uninitialized resource in Media on Windows](https://junglewise.ai/threats/cve-2026-126907-uninitialized-resource-in-media-in-google-chrome-on-on-windows) (info, published 11 Nov 2026) - [CVE-2026-126906: Google Chrome race condition in Extensions on Mac](https://junglewise.ai/threats/cve-2026-126906-race-condition-in-extensions-in-google-chrome-on-on-mac-prior-to) (info, published 11 Nov 2026) - [CVE-2026-126905: Google Chrome incomplete cleanup in V8](https://junglewise.ai/threats/cve-2026-126905-incomplete-cleanup-in-v8-in-google-chrome-prior-to-157-0-8103-78) (info, published 11 Nov 2026) - [CVE-2026-126904: Google Chrome use-after-free in Compositing](https://junglewise.ai/threats/cve-2026-126904-use-after-free-in-compositing-in-google-chrome-prior-to-157-0) (info, published 11 Nov 2026) - [CVE-2026-126903: Google Chrome improper state validation in ANGLE on Windows](https://junglewise.ai/threats/cve-2026-126903-improper-state-validation-in-angle-in-google-chrome-on-on) (info, published 11 Nov 2026) - [CVE-2026-126902: Google Chrome incorrect reference resolution in Browser sandbox escape](https://junglewise.ai/threats/cve-2026-126902-incorrect-reference-resolution-in-browser-in-google-chrome-on-on) (info, published 11 Nov 2026) - [CVE-2026-126901: Google Chrome use-after-free in PDF](https://junglewise.ai/threats/cve-2026-126901-use-after-free-in-pdf-in-google-chrome-prior-to-157-0-8103-78) (info, published 11 Nov 2026) - [CVE-2026-126900: Google Chrome use after free in CSS](https://junglewise.ai/threats/cve-2026-126900-use-after-free-in-css-in-google-chrome-prior-to-157-0-8103-78) (info, published 11 Nov 2026) - [CVE-2026-126899: Google Chrome use after free in Elements](https://junglewise.ai/threats/cve-2026-126899-use-after-free-in-elements-in-google-chrome-prior-to-157-0-8103) (info, published 11 Nov 2026) - [CVE-2026-126898: Google Chrome uninitialized resource in Skia](https://junglewise.ai/threats/cve-2026-126898-uninitialized-resource-in-skia-in-google-chrome-prior-to-157-0) (info, published 11 Nov 2026) ## Most severe Google Chrome vulnerabilities - [CVE-2025-10585: Google Chrome type confusion in V8 engine](https://junglewise.ai/threats/cve-2025-10585-google-chrome-type-confusion-in-v8-engine) (critical, exploited in the wild, CVSS 9.8, published 24 Sep 2025) - [CVE-2020-16017: Use after free in CefSharp](https://junglewise.ai/threats/cve-2020-16017-google-chrome-use-after-free-vulnerability) (critical, exploited in the wild, CVSS 9.6, published 27 Nov 2020) - [CVE-2024-7971: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2024-7971-google-chromium-v8-type-confusion-vulnerability) (critical, exploited in the wild, CVSS 9.6, published 26 Aug 2024) - [CVE-2024-5274: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2024-5274-google-chromium-v8-type-confusion-vulnerability) (critical, exploited in the wild, CVSS 9.6, published 28 May 2024) - [CVE-2024-4947: Google Chromium V8 Type Confusion Vulnerability](https://junglewise.ai/threats/cve-2024-4947-google-chromium-v8-type-confusion-vulnerability) (critical, exploited in the wild, CVSS 9.6, published 20 May 2024) - [CVE-2024-4671: Google Chromium Visuals Use-After-Free Vulnerability](https://junglewise.ai/threats/cve-2024-4671-google-chromium-visuals-use-after-free-vulnerability) (critical, exploited in the wild, CVSS 9.6, published 13 May 2024) - [CVE-2023-6345: Google Skia Integer Overflow Vulnerability](https://junglewise.ai/threats/cve-2023-6345-google-skia-integer-overflow-vulnerability) (critical, exploited in the wild, CVSS 9.6, published 30 Nov 2023) - [CVE-2023-2136: Google Chrome Skia Integer Overflow Vulnerability](https://junglewise.ai/threats/cve-2023-2136-google-chrome-skia-integer-overflow-vulnerability) (critical, exploited in the wild, CVSS 9.6, published 21 Apr 2023) - [CVE-2022-3075: Google Chromium Mojo Insufficient Data Validation Vulnerability](https://junglewise.ai/threats/cve-2022-3075-google-chromium-mojo-insufficient-data-validation-vulnerability) (critical, exploited in the wild, CVSS 9.6, published 8 Sep 2022) - [CVE-2020-16010: Google Chrome for Android UI Heap Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2020-16010-google-chrome-for-android-ui-heap-buffer-overflow-vulnerability) (critical, exploited in the wild, CVSS 9.6, published 3 Nov 2021) ## Vulnerabilities per week 689 vulnerabilities in the last four weeks, up 51% on the four before (456). 8 critical against 34. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 22 | 2 | 0 | | 24 Aug 2026 | 327 | 44 | 0 | | 31 Aug 2026 | 37 | 11 | 1 | | 7 Sep 2026 | 227 | 34 | 1 | | 14 Sep 2026 | 57 | 10 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 152 | 24 | 0 | | 5 Oct 2026 | 247 | 0 | 0 | | 12 Oct 2026 | 47 | 7 | 0 | | 19 Oct 2026 | 353 | 0 | 0 | | 26 Oct 2026 | 74 | 0 | 0 | | 2 Nov 2026 | 215 | 1 | 0 | | 9 Nov 2026 | 92 | 1 | 1 | ## Other Google technologies - [Google Android](https://junglewise.ai/threats/technologies/android): 628 vulnerabilities - [Google Chrome for iOS](https://junglewise.ai/threats/technologies/chrome-for-ios): 79 vulnerabilities - [Google Pixel](https://junglewise.ai/threats/technologies/google-pixel): 72 vulnerabilities - [Google Cloud Platform](https://junglewise.ai/threats/technologies/google-cloud-platform): 43 vulnerabilities - [Google Chromium V8](https://junglewise.ai/threats/technologies/chromium-v8): 41 vulnerabilities - [Google Chromium](https://junglewise.ai/threats/technologies/chromium): 37 vulnerabilities - [Google TensorFlow](https://junglewise.ai/threats/technologies/tensorflow): 31 vulnerabilities - [Google Pixel Devices](https://junglewise.ai/threats/technologies/pixel-devices): 27 vulnerabilities - [Google Pixel Firmware](https://junglewise.ai/threats/technologies/pixel-firmware): 27 vulnerabilities - [Google Android Framework](https://junglewise.ai/threats/technologies/android-framework): 22 vulnerabilities - [Google Chrome for Android](https://junglewise.ai/threats/technologies/chrome-for-android): 21 vulnerabilities - [Google ChromeOS](https://junglewise.ai/threats/technologies/chromeos): 20 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Google Chrome vulnerabilities", https://junglewise.ai/threats/technologies/chrome, 13 November 2026.