Chromium

Source repositories

https://github.com/chromium/chromium

CVEs (1,414)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2021-30623	Chromium Chromium	Hig	0.58	8.8	0.04	Sep 3, 2021	Chromium: CVE-2021-30623 Use after free in Bookmarks
CVE-2021-30622	Chromium Chromium	Hig	0.58	8.8	0.04	Sep 3, 2021	Chromium: CVE-2021-30622 Use after free in WebApp Installs
CVE-2021-30620	Chromium Chromium	Hig	0.58	8.8	0.04	Sep 3, 2021	Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink
CVE-2021-30618	Chromium Chromium	Hig	0.58	8.8	0.04	Sep 3, 2021	Chromium: CVE-2021-30618 Inappropriate implementation in DevTools
CVE-2021-30616	Chromium Chromium	Hig	0.58	8.8	0.04	Sep 3, 2021	Chromium: CVE-2021-30616 Use after free in Media
CVE-2021-30614	Chromium Chromium	Hig	0.58	8.8	0.04	Sep 3, 2021	Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip
CVE-2021-30613	Chromium Chromium	Hig	0.58	8.8	0.04	Sep 3, 2021	Chromium: CVE-2021-30613 Use after free in Base internals
CVE-2021-30610	Chromium Chromium	Hig	0.58	8.8	0.04	Sep 3, 2021	Chromium: CVE-2021-30610 Use after free in Extensions API
CVE-2021-30609	Chromium Chromium	Hig	0.58	8.8	0.04	Sep 3, 2021	Chromium: CVE-2021-30609 Use after free in Sign-In
CVE-2021-30608	Chromium Chromium	Hig	0.58	8.8	0.04	Sep 3, 2021	Chromium: CVE-2021-30608 Use after free in Web Share
CVE-2021-30607	Chromium Chromium	Hig	0.58	8.8	0.04	Sep 3, 2021	Chromium: CVE-2021-30607 Use after free in Permissions
CVE-2021-30606	Chromium Chromium	Hig	0.58	8.8	0.04	Sep 3, 2021	Chromium: CVE-2021-30606 Use after free in Blink
CVE-2026-91745	Google Chrome	Hig	0.57	8.8	0.00	Sep 15, 2026	Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91741	Google Chrome	Hig	0.57	8.8	0.00	Sep 15, 2026	Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91736	Google Chrome	Hig	0.57	8.8	0.00	Sep 15, 2026	Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91731	Google Chrome	Hig	0.57	8.8	0.00	Sep 15, 2026	Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91721	Google Chrome	Hig	0.57	8.8	0.00	Sep 15, 2026	Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-91715	Google Chrome	Hig	0.57	8.8	0.00	Sep 15, 2026	Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87612	Google Chrome	Hig	0.57	8.8	0.00	Sep 9, 2026	Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87569	Google Chrome	Hig	0.57	8.8	0.00	Sep 9, 2026	Missing authorization in Views in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: High)

CVE-2021-30623HigSep 3, 2021
Chromium
Chromium
risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30623 Use after free in Bookmarks
CVE-2021-30622HigSep 3, 2021
Chromium
Chromium
risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30622 Use after free in WebApp Installs
CVE-2021-30620HigSep 3, 2021
Chromium
Chromium
risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink
CVE-2021-30618HigSep 3, 2021
Chromium
Chromium
risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30618 Inappropriate implementation in DevTools
CVE-2021-30616HigSep 3, 2021
Chromium
Chromium
risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30616 Use after free in Media
CVE-2021-30614HigSep 3, 2021
Chromium
Chromium
risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip
CVE-2021-30613HigSep 3, 2021
Chromium
Chromium
risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30613 Use after free in Base internals
CVE-2021-30610HigSep 3, 2021
Chromium
Chromium
risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30610 Use after free in Extensions API
CVE-2021-30609HigSep 3, 2021
Chromium
Chromium
risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30609 Use after free in Sign-In
CVE-2021-30608HigSep 3, 2021
Chromium
Chromium
risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30608 Use after free in Web Share
CVE-2021-30607HigSep 3, 2021
Chromium
Chromium
risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30607 Use after free in Permissions
CVE-2021-30606HigSep 3, 2021
Chromium
Chromium
risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30606 Use after free in Blink
CVE-2026-91745HigSep 15, 2026
Google
Chrome
risk 0.57cvss 8.8epss 0.00
Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91741HigSep 15, 2026
Google
Chrome
risk 0.57cvss 8.8epss 0.00
Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91736HigSep 15, 2026
Google
Chrome
risk 0.57cvss 8.8epss 0.00
Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91731HigSep 15, 2026
Google
Chrome
risk 0.57cvss 8.8epss 0.00
Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91721HigSep 15, 2026
Google
Chrome
risk 0.57cvss 8.8epss 0.00
Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-91715HigSep 15, 2026
Google
Chrome
risk 0.57cvss 8.8epss 0.00
Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87612HigSep 9, 2026
Google
Chrome
risk 0.57cvss 8.8epss 0.00
Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87569HigSep 9, 2026
Google
Chrome
risk 0.57cvss 8.8epss 0.00
Missing authorization in Views in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: High)

Page 6 of 71