# Google ChromeOS vulnerabilities Source: https://junglewise.ai/threats/technologies/chromeos Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/chromeos.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 20 vulnerabilities in Google ChromeOS: 0 in the last 7 days and 0 in the last 90 days, 1 of them critical and 1 exploited in the wild. The most recent, CVE-2026-17680, was published on 30 July 2026. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 0 - All time: 20 (1 critical, 1 exploited in the wild) ## About Google ChromeOS Google operating system for Chromebooks and Chrome devices. ## Latest Google ChromeOS vulnerabilities - [CVE-2026-17680: Google ChromeOS heap buffer overflow in Color component](https://junglewise.ai/threats/cve-2026-17680-google-chromeos-heap-buffer-overflow-in-color-component) (info, published 30 Jul 2026) - [CVE-2026-14421: Google ChromeOS uninitialized use in Dawn](https://junglewise.ai/threats/cve-2026-14421-google-chromeos-uninitialized-use-in-dawn) (info, CVSS 4.3, published 1 Jul 2026) - [CVE-2026-14103: Google Chrome on ChromeOS use after free in SSL](https://junglewise.ai/threats/cve-2026-14103-google-chrome-on-chromeos-use-after-free-in-ssl) (info, CVSS 0, published 30 Jun 2026) - [CVE-2026-14090: Google ChromeOS out of bounds read in CameraCapture](https://junglewise.ai/threats/cve-2026-14090-google-chromeos-out-of-bounds-read-in-cameracapture) (info, CVSS 0, published 30 Jun 2026) - [CVE-2026-14062: Google Chrome on ChromeOS Information Disclosure in Views](https://junglewise.ai/threats/cve-2026-14062-google-chrome-on-chromeos-information-disclosure-in-views) (info, CVSS 2.5, published 30 Jun 2026) - [CVE-2026-13986: Google ChromeOS UI spoofing in Media UI](https://junglewise.ai/threats/cve-2026-13986-google-chromeos-ui-spoofing-in-media-ui) (info, CVSS 4.3, published 30 Jun 2026) - [CVE-2026-13942: Google Chrome UI spoofing in Video Capture on ChromeOS](https://junglewise.ai/threats/cve-2026-13942-google-chrome-ui-spoofing-in-video-capture-on-chromeos) (info, CVSS 4.3, published 30 Jun 2026) - [CVE-2026-13779: Google ChromeOS use after free in Chromoting](https://junglewise.ai/threats/cve-2026-13779-google-chromeos-use-after-free-in-chromoting) (info, CVSS 10, published 30 Jun 2026) - [CVE-2026-12026: Google ChromeOS out of bounds read in Video component](https://junglewise.ai/threats/cve-2026-12026-google-chromeos-out-of-bounds-read-in-video-component) (info, published 11 Jun 2026) - [CVE-2026-11676: Google Chrome improper input validation in Dawn](https://junglewise.ai/threats/cve-2026-11676-google-chrome-improper-input-validation-in-dawn) (info, published 9 Jun 2026) - [CVE-2026-11669: Google Chrome on ChromeOS out of bounds read in Media](https://junglewise.ai/threats/cve-2026-11669-google-chrome-on-chromeos-out-of-bounds-read-in-media) (info, CVSS 0, published 9 Jun 2026) - [CVE-2026-11668: Google Chrome uninitialized use in Codecs](https://junglewise.ai/threats/cve-2026-11668-google-chrome-uninitialized-use-in-codecs) (info, published 9 Jun 2026) - [CVE-2026-11028: Google Chrome use after free in Media component](https://junglewise.ai/threats/cve-2026-11028-google-chrome-use-after-free-in-media-component) (info, published 4 Jun 2026) - [CVE-2026-9985: Google ChromeOS improper input validation in Media](https://junglewise.ai/threats/cve-2026-9985-google-chromeos-improper-input-validation-in-media) (info, CVSS 8.8, published 28 May 2026) - [CVE-2026-9117: Google Chrome type confusion in GFX](https://junglewise.ai/threats/cve-2026-9117-google-chrome-type-confusion-in-gfx) (high, CVSS 7.5, published 20 May 2026) - [CVE-2026-8576: Google Chrome CORS data leakage on Linux and ChromeOS](https://junglewise.ai/threats/cve-2026-8576-google-chrome-cors-data-leakage-on-linux-and-chromeos) (medium, CVSS 4.3, published 14 May 2026) - [CVE-2026-8535: Google Chrome out of bounds read in Media component](https://junglewise.ai/threats/cve-2026-8535-google-chrome-out-of-bounds-read-in-media-component) (medium, CVSS 5.3, published 14 May 2026) - [CVE-2026-8534: Google Chrome integer overflow in GPU component](https://junglewise.ai/threats/cve-2026-8534-google-chrome-integer-overflow-in-gpu-component) (high, CVSS 8.3, published 14 May 2026) - [CVE-2026-7363: Google Chrome use after free in Canvas](https://junglewise.ai/threats/cve-2026-7363-google-chrome-use-after-free-in-canvas) (high, CVSS 8.8, published 28 Apr 2026) - [CVE-2026-3909: Google Skia out-of-bounds write in Google Chrome](https://junglewise.ai/threats/cve-2026-3909-google-skia-out-of-bounds-write-in-google-chrome) (critical, exploited in the wild, CVSS 8.8, published 13 Mar 2026) ## Most severe Google ChromeOS vulnerabilities - [CVE-2026-3909: Google Skia out-of-bounds write in Google Chrome](https://junglewise.ai/threats/cve-2026-3909-google-skia-out-of-bounds-write-in-google-chrome) (critical, exploited in the wild, CVSS 8.8, published 13 Mar 2026) - [CVE-2026-7363: Google Chrome use after free in Canvas](https://junglewise.ai/threats/cve-2026-7363-google-chrome-use-after-free-in-canvas) (high, CVSS 8.8, published 28 Apr 2026) - [CVE-2026-8534: Google Chrome integer overflow in GPU component](https://junglewise.ai/threats/cve-2026-8534-google-chrome-integer-overflow-in-gpu-component) (high, CVSS 8.3, published 14 May 2026) - [CVE-2026-9117: Google Chrome type confusion in GFX](https://junglewise.ai/threats/cve-2026-9117-google-chrome-type-confusion-in-gfx) (high, CVSS 7.5, published 20 May 2026) - [CVE-2026-8535: Google Chrome out of bounds read in Media component](https://junglewise.ai/threats/cve-2026-8535-google-chrome-out-of-bounds-read-in-media-component) (medium, CVSS 5.3, published 14 May 2026) - [CVE-2026-8576: Google Chrome CORS data leakage on Linux and ChromeOS](https://junglewise.ai/threats/cve-2026-8576-google-chrome-cors-data-leakage-on-linux-and-chromeos) (medium, CVSS 4.3, published 14 May 2026) - [CVE-2026-13779: Google ChromeOS use after free in Chromoting](https://junglewise.ai/threats/cve-2026-13779-google-chromeos-use-after-free-in-chromoting) (info, CVSS 10, published 30 Jun 2026) - [CVE-2026-9985: Google ChromeOS improper input validation in Media](https://junglewise.ai/threats/cve-2026-9985-google-chromeos-improper-input-validation-in-media) (info, CVSS 8.8, published 28 May 2026) - [CVE-2026-14421: Google ChromeOS uninitialized use in Dawn](https://junglewise.ai/threats/cve-2026-14421-google-chromeos-uninitialized-use-in-dawn) (info, CVSS 4.3, published 1 Jul 2026) - [CVE-2026-13986: Google ChromeOS UI spoofing in Media UI](https://junglewise.ai/threats/cve-2026-13986-google-chromeos-ui-spoofing-in-media-ui) (info, CVSS 4.3, published 30 Jun 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Google technologies - [Google Chrome](https://junglewise.ai/threats/technologies/chrome): 3,930 vulnerabilities - [Google Android](https://junglewise.ai/threats/technologies/android): 628 vulnerabilities - [Google Chrome for iOS](https://junglewise.ai/threats/technologies/chrome-for-ios): 79 vulnerabilities - [Google Pixel](https://junglewise.ai/threats/technologies/google-pixel): 72 vulnerabilities - [Google Cloud Platform](https://junglewise.ai/threats/technologies/google-cloud-platform): 43 vulnerabilities - [Google Chromium V8](https://junglewise.ai/threats/technologies/chromium-v8): 41 vulnerabilities - [Google Chromium](https://junglewise.ai/threats/technologies/chromium): 37 vulnerabilities - [Google TensorFlow](https://junglewise.ai/threats/technologies/tensorflow): 31 vulnerabilities - [Google Pixel Devices](https://junglewise.ai/threats/technologies/pixel-devices): 27 vulnerabilities - [Google Pixel Firmware](https://junglewise.ai/threats/technologies/pixel-firmware): 27 vulnerabilities - [Google Android Framework](https://junglewise.ai/threats/technologies/android-framework): 22 vulnerabilities - [Google Chrome for Android](https://junglewise.ai/threats/technologies/chrome-for-android): 21 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Google ChromeOS vulnerabilities", https://junglewise.ai/threats/technologies/chromeos, 12 November 2026.