{"schema_version":1,"title":"Google ChromeOS vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 20 vulnerabilities in Google ChromeOS: 0 in the last 7 days and 8 in the last 90 days, 1 of them critical and 1 exploited in the wild. The most recent, CVE-2026-17680, was published on 30 July 2026.","url":"https://junglewise.ai/threats/technologies/chromeos","json_url":"https://junglewise.ai/threats/technologies/chromeos.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/chromeos","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":3,"all_time":20,"critical":1,"exploited":1,"last_7_days":0,"last_30_days":0,"last_90_days":8,"last_365_days":20},"latest":[{"cve":"CVE-2026-17680","slug":"cve-2026-17680-google-chromeos-heap-buffer-overflow-in-color-component","title":"Google ChromeOS heap buffer overflow in Color component","severity":"info","exploited":false,"published_at":"2026-07-30T01:16:30.217+00:00","url":"https://junglewise.ai/threats/cve-2026-17680-google-chromeos-heap-buffer-overflow-in-color-component"},{"cve":"CVE-2026-14421","cvss":4.3,"slug":"cve-2026-14421-google-chromeos-uninitialized-use-in-dawn","title":"Google ChromeOS uninitialized use in Dawn","severity":"info","exploited":false,"published_at":"2026-07-01T23:16:50.587+00:00","url":"https://junglewise.ai/threats/cve-2026-14421-google-chromeos-uninitialized-use-in-dawn"},{"cve":"CVE-2026-14103","cvss":0,"slug":"cve-2026-14103-google-chrome-on-chromeos-use-after-free-in-ssl","title":"Google Chrome on ChromeOS use after free in SSL","severity":"info","exploited":false,"published_at":"2026-06-30T23:17:22.207+00:00","url":"https://junglewise.ai/threats/cve-2026-14103-google-chrome-on-chromeos-use-after-free-in-ssl"},{"cve":"CVE-2026-14090","cvss":0,"slug":"cve-2026-14090-google-chromeos-out-of-bounds-read-in-cameracapture","title":"Google ChromeOS out of bounds read in CameraCapture","severity":"info","exploited":false,"published_at":"2026-06-30T23:17:21.05+00:00","url":"https://junglewise.ai/threats/cve-2026-14090-google-chromeos-out-of-bounds-read-in-cameracapture"},{"cve":"CVE-2026-14062","cvss":2.5,"slug":"cve-2026-14062-google-chrome-on-chromeos-information-disclosure-in-views","title":"Google Chrome on ChromeOS Information Disclosure in Views","severity":"info","exploited":false,"published_at":"2026-06-30T23:17:18.497+00:00","url":"https://junglewise.ai/threats/cve-2026-14062-google-chrome-on-chromeos-information-disclosure-in-views"},{"cve":"CVE-2026-13986","cvss":4.3,"slug":"cve-2026-13986-google-chromeos-ui-spoofing-in-media-ui","title":"Google ChromeOS UI spoofing in Media UI","severity":"info","exploited":false,"published_at":"2026-06-30T23:17:11.88+00:00","url":"https://junglewise.ai/threats/cve-2026-13986-google-chromeos-ui-spoofing-in-media-ui"},{"cve":"CVE-2026-13942","cvss":4.3,"slug":"cve-2026-13942-google-chrome-ui-spoofing-in-video-capture-on-chromeos","title":"Google Chrome UI spoofing in Video Capture on ChromeOS","severity":"info","exploited":false,"published_at":"2026-06-30T23:17:07.973+00:00","url":"https://junglewise.ai/threats/cve-2026-13942-google-chrome-ui-spoofing-in-video-capture-on-chromeos"},{"cve":"CVE-2026-13779","cvss":10,"slug":"cve-2026-13779-google-chromeos-use-after-free-in-chromoting","title":"Google ChromeOS use after free in Chromoting","severity":"info","exploited":false,"published_at":"2026-06-30T23:16:52.78+00:00","url":"https://junglewise.ai/threats/cve-2026-13779-google-chromeos-use-after-free-in-chromoting"},{"cve":"CVE-2026-12026","slug":"cve-2026-12026-google-chromeos-out-of-bounds-read-in-video-component","title":"Google ChromeOS out of bounds read in Video component","severity":"info","exploited":false,"published_at":"2026-06-11T22:16:55.147+00:00","url":"https://junglewise.ai/threats/cve-2026-12026-google-chromeos-out-of-bounds-read-in-video-component"},{"cve":"CVE-2026-11676","slug":"cve-2026-11676-google-chrome-improper-input-validation-in-dawn","title":"Google Chrome improper input validation in Dawn","severity":"info","exploited":false,"published_at":"2026-06-09T00:16:50.883+00:00","url":"https://junglewise.ai/threats/cve-2026-11676-google-chrome-improper-input-validation-in-dawn"},{"cve":"CVE-2026-11669","cvss":0,"slug":"cve-2026-11669-google-chrome-on-chromeos-out-of-bounds-read-in-media","title":"Google Chrome on ChromeOS out of bounds read in Media","severity":"info","exploited":false,"published_at":"2026-06-09T00:16:50.097+00:00","url":"https://junglewise.ai/threats/cve-2026-11669-google-chrome-on-chromeos-out-of-bounds-read-in-media"},{"cve":"CVE-2026-11668","slug":"cve-2026-11668-google-chrome-uninitialized-use-in-codecs","title":"Google Chrome uninitialized use in Codecs","severity":"info","exploited":false,"published_at":"2026-06-09T00:16:49.963+00:00","url":"https://junglewise.ai/threats/cve-2026-11668-google-chrome-uninitialized-use-in-codecs"},{"cve":"CVE-2026-11028","slug":"cve-2026-11028-google-chrome-use-after-free-in-media-component","title":"Google Chrome use after free in Media component","severity":"info","exploited":false,"published_at":"2026-06-04T23:17:06.813+00:00","url":"https://junglewise.ai/threats/cve-2026-11028-google-chrome-use-after-free-in-media-component"},{"cve":"CVE-2026-9985","cvss":8.8,"slug":"cve-2026-9985-google-chromeos-improper-input-validation-in-media","title":"Google ChromeOS improper input validation in Media","severity":"info","exploited":false,"published_at":"2026-05-28T23:16:56.74+00:00","url":"https://junglewise.ai/threats/cve-2026-9985-google-chromeos-improper-input-validation-in-media"},{"cve":"CVE-2026-9117","cvss":7.5,"slug":"cve-2026-9117-google-chrome-type-confusion-in-gfx","title":"Google Chrome type confusion in GFX","severity":"high","exploited":false,"published_at":"2026-05-20T20:16:43.02+00:00","url":"https://junglewise.ai/threats/cve-2026-9117-google-chrome-type-confusion-in-gfx"},{"cve":"CVE-2026-8576","cvss":4.3,"epss":0.0003,"slug":"cve-2026-8576-google-chrome-cors-data-leakage-on-linux-and-chromeos","title":"Google Chrome CORS data leakage on Linux and ChromeOS","severity":"medium","exploited":false,"published_at":"2026-05-14T20:17:19.967+00:00","url":"https://junglewise.ai/threats/cve-2026-8576-google-chrome-cors-data-leakage-on-linux-and-chromeos"},{"cve":"CVE-2026-8535","cvss":5.3,"epss":0.0003,"slug":"cve-2026-8535-google-chrome-out-of-bounds-read-in-media-component","title":"Google Chrome out of bounds read in Media component","severity":"medium","exploited":false,"published_at":"2026-05-14T20:17:14.35+00:00","url":"https://junglewise.ai/threats/cve-2026-8535-google-chrome-out-of-bounds-read-in-media-component"},{"cve":"CVE-2026-8534","cvss":8.3,"epss":0.0007,"slug":"cve-2026-8534-google-chrome-integer-overflow-in-gpu-component","title":"Google Chrome integer overflow in GPU component","severity":"high","exploited":false,"published_at":"2026-05-14T20:17:14.24+00:00","url":"https://junglewise.ai/threats/cve-2026-8534-google-chrome-integer-overflow-in-gpu-component"},{"cve":"CVE-2026-7363","cvss":8.8,"epss":0.0031,"slug":"cve-2026-7363-google-chrome-use-after-free-in-canvas","title":"Google Chrome use after free in Canvas","severity":"high","exploited":false,"published_at":"2026-04-28T23:16:23.773+00:00","url":"https://junglewise.ai/threats/cve-2026-7363-google-chrome-use-after-free-in-canvas"},{"cve":"CVE-2026-3909","cvss":8.8,"epss":0.0039,"slug":"cve-2026-3909-google-skia-out-of-bounds-write-in-google-chrome","title":"Google Skia out-of-bounds write in Google Chrome","severity":"critical","exploited":true,"published_at":"2026-03-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-3909-google-skia-out-of-bounds-write-in-google-chrome"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":7},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Google Chrome","slug":"chrome","vulnerabilities":2530,"url":"https://junglewise.ai/threats/technologies/chrome"},{"name":"Google Android","slug":"android","vulnerabilities":359,"url":"https://junglewise.ai/threats/technologies/android"},{"name":"Google Chrome for iOS","slug":"chrome-for-ios","vulnerabilities":79,"url":"https://junglewise.ai/threats/technologies/chrome-for-ios"},{"name":"Google Chromium V8","slug":"chromium-v8","vulnerabilities":41,"url":"https://junglewise.ai/threats/technologies/chromium-v8"},{"name":"Google Chromium","slug":"chromium","vulnerabilities":36,"url":"https://junglewise.ai/threats/technologies/chromium"},{"name":"Google TensorFlow","slug":"tensorflow","vulnerabilities":31,"url":"https://junglewise.ai/threats/technologies/tensorflow"},{"name":"Google Cloud Platform","slug":"google-cloud-platform","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/google-cloud-platform"},{"name":"Google Android Framework","slug":"android-framework","vulnerabilities":21,"url":"https://junglewise.ai/threats/technologies/android-framework"},{"name":"Google Chrome for Android","slug":"chrome-for-android","vulnerabilities":21,"url":"https://junglewise.ai/threats/technologies/chrome-for-android"},{"name":"Google Pixel Bootloader","slug":"pixel-bootloader","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/pixel-bootloader"},{"name":"Google WebView","slug":"webview","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/webview"},{"name":"Google A2ui\\","slug":"a2ui","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/a2ui"}],"technology":{"hub":true,"name":"Google ChromeOS","slug":"chromeos","vendor":{"name":"Google","slug":"google","url":"https://junglewise.ai/threats/vendors/google"},"aliases":[],"category":"operating-system","homepage":"https://www.google.com/chromebook/chrome-os/","description":"A Linux-based operating system designed by Google to work primarily with web applications.","url":"https://junglewise.ai/threats/technologies/chromeos"},"most_severe":[{"cve":"CVE-2026-3909","cvss":8.8,"epss":0.0039,"slug":"cve-2026-3909-google-skia-out-of-bounds-write-in-google-chrome","title":"Google Skia out-of-bounds write in Google Chrome","severity":"critical","exploited":true,"published_at":"2026-03-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-3909-google-skia-out-of-bounds-write-in-google-chrome"},{"cve":"CVE-2026-7363","cvss":8.8,"epss":0.0031,"slug":"cve-2026-7363-google-chrome-use-after-free-in-canvas","title":"Google Chrome use after free in Canvas","severity":"high","exploited":false,"published_at":"2026-04-28T23:16:23.773+00:00","url":"https://junglewise.ai/threats/cve-2026-7363-google-chrome-use-after-free-in-canvas"},{"cve":"CVE-2026-8534","cvss":8.3,"epss":0.0007,"slug":"cve-2026-8534-google-chrome-integer-overflow-in-gpu-component","title":"Google Chrome integer overflow in GPU component","severity":"high","exploited":false,"published_at":"2026-05-14T20:17:14.24+00:00","url":"https://junglewise.ai/threats/cve-2026-8534-google-chrome-integer-overflow-in-gpu-component"},{"cve":"CVE-2026-9117","cvss":7.5,"slug":"cve-2026-9117-google-chrome-type-confusion-in-gfx","title":"Google Chrome type confusion in GFX","severity":"high","exploited":false,"published_at":"2026-05-20T20:16:43.02+00:00","url":"https://junglewise.ai/threats/cve-2026-9117-google-chrome-type-confusion-in-gfx"},{"cve":"CVE-2026-8535","cvss":5.3,"epss":0.0003,"slug":"cve-2026-8535-google-chrome-out-of-bounds-read-in-media-component","title":"Google Chrome out of bounds read in Media component","severity":"medium","exploited":false,"published_at":"2026-05-14T20:17:14.35+00:00","url":"https://junglewise.ai/threats/cve-2026-8535-google-chrome-out-of-bounds-read-in-media-component"},{"cve":"CVE-2026-8576","cvss":4.3,"epss":0.0003,"slug":"cve-2026-8576-google-chrome-cors-data-leakage-on-linux-and-chromeos","title":"Google Chrome CORS data leakage on Linux and ChromeOS","severity":"medium","exploited":false,"published_at":"2026-05-14T20:17:19.967+00:00","url":"https://junglewise.ai/threats/cve-2026-8576-google-chrome-cors-data-leakage-on-linux-and-chromeos"},{"cve":"CVE-2026-13779","cvss":10,"slug":"cve-2026-13779-google-chromeos-use-after-free-in-chromoting","title":"Google ChromeOS use after free in Chromoting","severity":"info","exploited":false,"published_at":"2026-06-30T23:16:52.78+00:00","url":"https://junglewise.ai/threats/cve-2026-13779-google-chromeos-use-after-free-in-chromoting"},{"cve":"CVE-2026-9985","cvss":8.8,"slug":"cve-2026-9985-google-chromeos-improper-input-validation-in-media","title":"Google ChromeOS improper input validation in Media","severity":"info","exploited":false,"published_at":"2026-05-28T23:16:56.74+00:00","url":"https://junglewise.ai/threats/cve-2026-9985-google-chromeos-improper-input-validation-in-media"},{"cve":"CVE-2026-14421","cvss":4.3,"slug":"cve-2026-14421-google-chromeos-uninitialized-use-in-dawn","title":"Google ChromeOS uninitialized use in Dawn","severity":"info","exploited":false,"published_at":"2026-07-01T23:16:50.587+00:00","url":"https://junglewise.ai/threats/cve-2026-14421-google-chromeos-uninitialized-use-in-dawn"},{"cve":"CVE-2026-13986","cvss":4.3,"slug":"cve-2026-13986-google-chromeos-ui-spoofing-in-media-ui","title":"Google ChromeOS UI spoofing in Media UI","severity":"info","exploited":false,"published_at":"2026-06-30T23:17:11.88+00:00","url":"https://junglewise.ai/threats/cve-2026-13986-google-chromeos-ui-spoofing-in-media-ui"}],"generated_at":"2026-09-27T03:07:00.185062+00:00"}