BrowserShield

Version security report

Google Chrome 147 security vulnerabilities

These public CVE records overlap Google Chrome major version 147. Matching is based on disclosed version ranges, not an exploit test.

Some of these vulnerabilities are listed as known exploited. Update to the latest stable version.

1990

public CVEs overlapping this major version

CVE list

CVE-2026-11645 Known exploited

High CVSS 8.8

Out of bounds read and write in V8 in Google Chrome prior to 149.

Fixed in 149.0.7827.102

CVE-2026-13782

Critical CVSS 10.0

Use after free in Browser in Google Chrome prior to 150.

Fixed in 150.0.7871.46

CVE-2026-5902

Critical CVSS 9.8

Race in Media in Google Chrome on Android prior to 147.

Fixed in 147.0.7727.55

CVE-2026-14121

Critical CVSS 9.8

Use after free in Chromoting in Google Chrome on Linux prior to 150.

Fixed in 150.0.7871.46

CVE-2026-14104

Critical CVSS 9.8

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.

Fixed in 150.0.7871.46

CVE-2026-13776

Critical CVSS 9.8

Type Confusion in Dawn in Google Chrome prior to 150.

Fixed in 150.0.7871.46

CVE-2026-13775

Critical CVSS 9.8

Use after free in GPU in Google Chrome prior to 150.

Fixed in 150.0.7871.46

CVE-2026-9967

Critical CVSS 9.6

Out of bounds write in GPU in Google Chrome prior to 148.

Fixed in 148.0.7778.216

CVE-2026-9918

Critical CVSS 9.6

Inappropriate implementation in Tint in Google Chrome prior to 148.

Fixed in 148.0.7778.216

CVE-2026-9886

Critical CVSS 9.6

Use after free in Base in Google Chrome on Mac prior to 148.

Fixed in 148.0.7778.216

CVE-2026-9876

Critical CVSS 9.6

Use after free in WebGL in Google Chrome on Android prior to 148.

Fixed in 148.0.7778.216

CVE-2026-9875

Critical CVSS 9.6

Out of bounds read in WebGL in Google Chrome on Android prior to 148.

Fixed in 148.0.7778.216

CVE-2026-9874

Critical CVSS 9.6

Use after free in Dawn in Google Chrome prior to 148.

Fixed in 148.0.7778.216

CVE-2026-9872

Critical CVSS 9.6

Out of bounds write in GPU in Google Chrome on Android prior to 148.

Fixed in 148.0.7778.216

CVE-2026-8580

Critical CVSS 9.6

Use after free in Mojo in Google Chrome prior to 148.

Fixed in 148.0.7778.168

CVE-2026-8511

Critical CVSS 9.6

Use after free in UI in Google Chrome prior to 148.

Fixed in 148.0.7778.168

CVE-2026-7910

Critical CVSS 9.6

Use after free in Views in Google Chrome prior to 148.

Fixed in 148.0.7778.96

CVE-2026-7908

Critical CVSS 9.6

Use after free in Fullscreen in Google Chrome prior to 148.

Fixed in 148.0.7778.96

CVE-2026-7333

Critical CVSS 9.6

Use after free in GPU in Google Chrome prior to 147.

Fixed in 147.0.7727.138

CVE-2026-6920

Critical CVSS 9.6

Out of bounds read in GPU in Google Chrome on Android prior to 147.

Fixed in 147.0.7727.116

CVE-2026-6919

Critical CVSS 9.6

Use after free in DevTools in Google Chrome prior to 147.

Fixed in 147.0.7727.116

CVE-2026-6296

Critical CVSS 9.6

Heap buffer overflow in ANGLE in Google Chrome prior to 147.

Fixed in 147.0.7727.101

CVE-2026-5874

Critical CVSS 9.6

Use after free in PrivateAI in Google Chrome prior to 147.

Fixed in 147.0.7727.55

CVE-2026-19175

Critical CVSS 9.6

Use after free in Payments in Google Chrome prior to 151.

Fixed in 151.0.7922.108

CVE-2026-19171

Critical CVSS 9.6

Use after free in Media in Google Chrome on Windows prior to 151.

Fixed in 151.0.7922.108

CVE-2026-19170

Critical CVSS 9.6

Use after free in WebGL in Google Chrome on Android prior to 151.

Fixed in 151.0.7922.108

CVE-2026-19166

Critical CVSS 9.6

Use after free in Web Authentication in Google Chrome prior to 151.

Fixed in 151.0.7922.108

CVE-2026-19164

Critical CVSS 9.6

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.

Fixed in 151.0.7922.108

CVE-2026-19157

Critical CVSS 9.6

Out of bounds write in ANGLE in Google Chrome on Android prior to 151.

Fixed in 151.0.7922.108

CVE-2026-19149

Critical CVSS 9.6

Use after free in Aura in Google Chrome on Linux prior to 151.

Fixed in 151.0.7922.108

CVE-2026-18015

Critical CVSS 9.6

Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.

Fixed in 151.0.7922.71

CVE-2026-18002

Critical CVSS 9.6

Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17991

Critical CVSS 9.6

Insufficient validation of untrusted input in AI in Google Chrome prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17990

Critical CVSS 9.6

Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17987

Critical CVSS 9.6

Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17947

Critical CVSS 9.6

Use after free in WebSockets in Google Chrome prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17940

Critical CVSS 9.6

Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17924

Critical CVSS 9.6

Use after free in DNS in Google Chrome prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17865

Critical CVSS 9.6

Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17856

Critical CVSS 9.6

Inappropriate implementation in Network in Google Chrome on Mac prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17855

Critical CVSS 9.6

Race in DevTools in Google Chrome on Mac prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17848

Critical CVSS 9.6

Integer overflow in Codecs in Google Chrome prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17847

Critical CVSS 9.6

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17837

Critical CVSS 9.6

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17834

Critical CVSS 9.6

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17832

Critical CVSS 9.6

Use after free in ANGLE in Google Chrome prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17804

Critical CVSS 9.6

Use after free in Media in Google Chrome prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17803

Critical CVSS 9.6

Insufficient validation of untrusted input in Save to Drive in Google Chrome prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17801

Critical CVSS 9.6

Out of bounds read and write in ANGLE in Google Chrome prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17768

Critical CVSS 9.6

Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17758

Critical CVSS 9.6

Heap buffer overflow in Dawn in Google Chrome prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17749

Critical CVSS 9.6

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17738

Critical CVSS 9.6

Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17727

Critical CVSS 9.6

Out of bounds write in WebGL in Google Chrome on Android prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17726

Critical CVSS 9.6

Integer overflow in WebGL in Google Chrome on Android prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17721

Critical CVSS 9.6

Out of bounds write in ANGLE in Google Chrome prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17718

Critical CVSS 9.6

Use after free in ANGLE in Google Chrome prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17717

Critical CVSS 9.6

Integer overflow in ANGLE in Google Chrome prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17711

Critical CVSS 9.6

Race in Downloads in Google Chrome on Mac prior to 151.

Fixed in 151.0.7922.71

CVE-2026-17710

Critical CVSS 9.6

Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.

Fixed in 151.0.7922.71

Showing the highest-severity 60 of 1990 records.

Check my browser