Some of these vulnerabilities are listed as known exploited. Update to the latest stable version.
Version security report
Chromium 137 security vulnerabilities
These public CVE records overlap Chromium major version 137. Matching is based on disclosed version ranges, not an exploit test.
2244
public CVEs overlapping this major version
- Critical221
- High1010
- Medium942
- Low71
CVE list
CVE-2025-10585 Known exploited
Critical CVSS 9.8
Type confusion in V8 in Google Chrome prior to 140.
Fixed in 140.0.7339.185
CVE-2026-5281 Known exploited
High CVSS 8.8
Use after free in Dawn in Google Chrome prior to 146.
Fixed in 146.0.7680.177
CVE-2026-3910 Known exploited
High CVSS 8.8
Inappropriate implementation in V8 in Google Chrome prior to 146.
Fixed in 146.0.7680.75
CVE-2026-3909 Known exploited
High CVSS 8.8
Out of bounds write in Skia in Google Chrome prior to 146.
Fixed in 146.0.7680.80
CVE-2026-2441 Known exploited
High CVSS 8.8
Use after free in CSS in Google Chrome prior to 145.
Fixed in 145.0.7632.75
CVE-2026-11645 Known exploited
High CVSS 8.8
Out of bounds read and write in V8 in Google Chrome prior to 149.
Fixed in 149.0.7827.102
CVE-2025-6558 Known exploited
High CVSS 8.8
Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.
Fixed in 138.0.7204.157
CVE-2025-5419 Known exploited
High CVSS 8.8
Out of bounds read and write in V8 in Google Chrome prior to 137.
Fixed in 137.0.7151.68
CVE-2025-14174 Known exploited
High CVSS 8.8
Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.
CVE-2025-13223 Known exploited
High CVSS 8.8
Type Confusion in V8 in Google Chrome prior to 142.
Fixed in 142.0.7444.175
CVE-2025-6554 Known exploited
High CVSS 8.1
Type confusion in V8 in Google Chrome prior to 138.
Fixed in 138.0.7204.96
Critical CVSS 10.0
Use after free in Browser in Google Chrome prior to 150.
Fixed in 150.0.7871.46
Critical CVSS 9.8
Race in Media in Google Chrome on Android prior to 147.
Fixed in 147.0.7727.55
Critical CVSS 9.8
Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.
Fixed in 145.0.7632.116
Critical CVSS 9.8
Use after free in Chromoting in Google Chrome on Linux prior to 150.
Fixed in 150.0.7871.46
Critical CVSS 9.8
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.
Fixed in 150.0.7871.46
Critical CVSS 9.8
Type Confusion in Dawn in Google Chrome prior to 150.
Fixed in 150.0.7871.46
Critical CVSS 9.8
Use after free in GPU in Google Chrome prior to 150.
Fixed in 150.0.7871.46
Critical CVSS 9.8
Incorrect security UI in Split View in Google Chrome prior to 144.
Fixed in 144.0.7559.59
Critical CVSS 9.8
Incorrect security UI in Google Chrome on Android prior to 144.
Fixed in 144.0.7559.59
Critical CVSS 9.8
Insufficient policy enforcement in Network in Google Chrome prior to 144.
Fixed in 144.0.7559.59
Critical CVSS 9.6
Out of bounds write in GPU in Google Chrome prior to 148.
Fixed in 148.0.7778.216
Critical CVSS 9.6
Inappropriate implementation in Tint in Google Chrome prior to 148.
Fixed in 148.0.7778.216
Critical CVSS 9.6
Use after free in Base in Google Chrome on Mac prior to 148.
Fixed in 148.0.7778.216
Critical CVSS 9.6
Use after free in WebGL in Google Chrome on Android prior to 148.
Fixed in 148.0.7778.216
Critical CVSS 9.6
Out of bounds read in WebGL in Google Chrome on Android prior to 148.
Fixed in 148.0.7778.216
Critical CVSS 9.6
Use after free in Dawn in Google Chrome prior to 148.
Fixed in 148.0.7778.216
Critical CVSS 9.6
Out of bounds write in GPU in Google Chrome on Android prior to 148.
Fixed in 148.0.7778.216
Critical CVSS 9.6
Use after free in Mojo in Google Chrome prior to 148.
Fixed in 148.0.7778.168
Critical CVSS 9.6
Use after free in UI in Google Chrome prior to 148.
Fixed in 148.0.7778.168
Critical CVSS 9.6
Use after free in Views in Google Chrome prior to 148.
Fixed in 148.0.7778.96
Critical CVSS 9.6
Use after free in Fullscreen in Google Chrome prior to 148.
Fixed in 148.0.7778.96
Critical CVSS 9.6
Use after free in GPU in Google Chrome prior to 147.
Fixed in 147.0.7727.138
Critical CVSS 9.6
Out of bounds read in GPU in Google Chrome on Android prior to 147.
Fixed in 147.0.7727.116
Critical CVSS 9.6
Use after free in DevTools in Google Chrome prior to 147.
Fixed in 147.0.7727.116
Critical CVSS 9.6
Heap buffer overflow in ANGLE in Google Chrome prior to 147.
Fixed in 147.0.7727.101
Critical CVSS 9.6
Use after free in PrivateAI in Google Chrome prior to 147.
Fixed in 147.0.7727.55
Critical CVSS 9.6
Use after free in Compositing in Google Chrome prior to 146.
Fixed in 146.0.7680.177
Critical CVSS 9.6
Use after free in Navigation in Google Chrome prior to 146.
Fixed in 146.0.7680.177
Critical CVSS 9.6
Use after free in WebView in Google Chrome on Android prior to 146.
Fixed in 146.0.7680.177
Critical CVSS 9.6
Out of bounds read in Web Speech in Google Chrome prior to 146.
Fixed in 146.0.7680.71
Critical CVSS 9.6
Insufficient data validation in Navigation in Google Chrome prior to 145.
Fixed in 145.0.7632.159
Critical CVSS 9.6
Use after free in Payments in Google Chrome prior to 151.
Fixed in 151.0.7922.108
Critical CVSS 9.6
Use after free in Media in Google Chrome on Windows prior to 151.
Fixed in 151.0.7922.108
Critical CVSS 9.6
Use after free in WebGL in Google Chrome on Android prior to 151.
Fixed in 151.0.7922.108
Critical CVSS 9.6
Use after free in Web Authentication in Google Chrome prior to 151.
Fixed in 151.0.7922.108
Critical CVSS 9.6
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.
Fixed in 151.0.7922.108
Critical CVSS 9.6
Out of bounds write in ANGLE in Google Chrome on Android prior to 151.
Fixed in 151.0.7922.108
Critical CVSS 9.6
Use after free in Aura in Google Chrome on Linux prior to 151.
Fixed in 151.0.7922.108
Critical CVSS 9.6
Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Insufficient validation of untrusted input in AI in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Use after free in WebSockets in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Use after free in DNS in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Inappropriate implementation in Network in Google Chrome on Mac prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Race in DevTools in Google Chrome on Mac prior to 151.
Fixed in 151.0.7922.71
Showing the highest-severity 60 of 2244 records.