Some of these vulnerabilities are listed as known exploited. Update to the latest stable version.
Version security report
Chromium 149 security vulnerabilities
These public CVE records overlap Chromium major version 149. Matching is based on disclosed version ranges, not an exploit test.
1499
public CVEs overlapping this major version
- Critical190
- High560
- Medium711
- Low38
CVE list
CVE-2026-11645 Known exploited
High CVSS 8.8
Out of bounds read and write in V8 in Google Chrome prior to 149.
Fixed in 149.0.7827.102
Critical CVSS 10.0
Use after free in Browser in Google Chrome prior to 150.
Fixed in 150.0.7871.46
Critical CVSS 9.8
Use after free in Chromoting in Google Chrome on Linux prior to 150.
Fixed in 150.0.7871.46
Critical CVSS 9.8
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.
Fixed in 150.0.7871.46
Critical CVSS 9.8
Type Confusion in Dawn in Google Chrome prior to 150.
Fixed in 150.0.7871.46
Critical CVSS 9.8
Use after free in GPU in Google Chrome prior to 150.
Fixed in 150.0.7871.46
Critical CVSS 9.6
Use after free in Payments in Google Chrome prior to 151.
Fixed in 151.0.7922.108
Critical CVSS 9.6
Use after free in Media in Google Chrome on Windows prior to 151.
Fixed in 151.0.7922.108
Critical CVSS 9.6
Use after free in WebGL in Google Chrome on Android prior to 151.
Fixed in 151.0.7922.108
Critical CVSS 9.6
Use after free in Web Authentication in Google Chrome prior to 151.
Fixed in 151.0.7922.108
Critical CVSS 9.6
Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.
Fixed in 151.0.7922.108
Critical CVSS 9.6
Out of bounds write in ANGLE in Google Chrome on Android prior to 151.
Fixed in 151.0.7922.108
Critical CVSS 9.6
Use after free in Aura in Google Chrome on Linux prior to 151.
Fixed in 151.0.7922.108
Critical CVSS 9.6
Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Insufficient validation of untrusted input in AI in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Use after free in WebSockets in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Use after free in DNS in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Inappropriate implementation in Network in Google Chrome on Mac prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Race in DevTools in Google Chrome on Mac prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Integer overflow in Codecs in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Use after free in ANGLE in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Use after free in Media in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Insufficient validation of untrusted input in Save to Drive in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Out of bounds read and write in ANGLE in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Heap buffer overflow in Dawn in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Out of bounds write in WebGL in Google Chrome on Android prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Integer overflow in WebGL in Google Chrome on Android prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Out of bounds write in ANGLE in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Use after free in ANGLE in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Integer overflow in ANGLE in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Race in Downloads in Google Chrome on Mac prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Race in Downloads in Google Chrome on Mac prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Use after free in Audio in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Use after free in ANGLE in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Type Confusion in ANGLE in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Use after free in DataTransfer in Google Chrome on Windows prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Use after free in Input in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Type Confusion in ANGLE in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Integer overflow in ANGLE in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Insufficient validation of untrusted input in Web Authentication in Google Chrome on Android prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Out of bounds write in ANGLE in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Integer overflow in QUIC in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Critical CVSS 9.6
Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 151.
Fixed in 151.0.7922.71
Showing the highest-severity 60 of 1499 records.