BrowserShield

Version security report

Chromium 149 security vulnerabilities

These public CVE records overlap Chromium major version 149. Matching is based on disclosed version ranges, not an exploit test.

Some of these vulnerabilities are listed as known exploited. Update to the latest stable version.

2326

public CVEs overlapping this major version

CVE list

CVE-2026-87491 Known exploited

High CVSS 8.8

Out of bounds write in V8 in Google Chrome prior to 153.

Fixed in 153.0.8010.36

CVE-2026-85046 Known exploited

High CVSS 8.8

Type confusion in V8 in Google Chrome prior to 152.

Fixed in 152.0.7977.82

CVE-2026-11645 Known exploited

High CVSS 8.8

Out of bounds read and write in V8 in Google Chrome prior to 149.

Fixed in 149.0.7827.102

CVE-2026-13782

Critical CVSS 10.0

Use after free in Browser in Google Chrome prior to 150.

Fixed in 150.0.7871.46

CVE-2026-87595

Critical CVSS 9.8

Server-side request forgery in Mobile in Google Chrome prior to 153.

Fixed in 153.0.8010.36

CVE-2026-87544

Critical CVSS 9.8

Incorrect authorization in Extensions in Google Chrome prior to 153.

Fixed in 153.0.8010.36

CVE-2026-87534

Critical CVSS 9.8

Missing authorization in WebView in Google Chrome on on Android prior to 153.

Fixed in 153.0.8010.36

CVE-2026-84325

Critical CVSS 9.8

Improper input validation in DataTransfer in Google Chrome prior to 152.

Fixed in 152.0.7977.75

CVE-2026-79152

Critical CVSS 9.8

Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.

Fixed in 152.0.7977.64

CVE-2026-79090

Critical CVSS 9.8

Improper privilege management in Actor in Google Chrome prior to 152.

Fixed in 152.0.7977.64

CVE-2026-14121

Critical CVSS 9.8

Use after free in Chromoting in Google Chrome on Linux prior to 150.

Fixed in 150.0.7871.46

CVE-2026-14104

Critical CVSS 9.8

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.

Fixed in 150.0.7871.46

CVE-2026-13776

Critical CVSS 9.8

Type Confusion in Dawn in Google Chrome prior to 150.

Fixed in 150.0.7871.46

CVE-2026-13775

Critical CVSS 9.8

Use after free in GPU in Google Chrome prior to 150.

Fixed in 150.0.7871.46

CVE-2026-95357

Critical CVSS 9.6

Out of bounds write in GPU in Google Chrome on on Android prior to 154.

Fixed in 154.0.8037.57

CVE-2026-95356

Critical CVSS 9.6

Use after free in WindowDialog in Google Chrome prior to 154.

Fixed in 154.0.8037.57

CVE-2026-95350

Critical CVSS 9.6

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.

Fixed in 154.0.8037.57

CVE-2026-95349

Critical CVSS 9.6

Buffer overflow in WebGL in Google Chrome on on Android prior to 154.

Fixed in 154.0.8037.57

CVE-2026-95347

Critical CVSS 9.6

Use after free in Updater in Google Chrome on on Mac prior to 154.

Fixed in 154.0.8037.57

CVE-2026-95339

Critical CVSS 9.6

Use after free in ServiceWorker in Google Chrome prior to 154.

Fixed in 154.0.8037.57

CVE-2026-95331

Critical CVSS 9.6

Out of bounds write in ANGLE in Google Chrome prior to 154.

Fixed in 154.0.8037.57

CVE-2026-95329

Critical CVSS 9.6

Out of bounds write in WebGL in Google Chrome on on Android prior to 154.

Fixed in 154.0.8037.57

CVE-2026-95325

Critical CVSS 9.6

Use after free in ANGLE in Google Chrome prior to 154.

Fixed in 154.0.8037.57

CVE-2026-95318

Critical CVSS 9.6

Buffer overflow in Video in Google Chrome prior to 154.

Fixed in 154.0.8037.57

CVE-2026-95313

Critical CVSS 9.6

Use after free in Fullscreen in Google Chrome prior to 154.

Fixed in 154.0.8037.57

CVE-2026-95311

Critical CVSS 9.6

Free of non-heap memory in Fonts in Google Chrome prior to 154.

Fixed in 154.0.8037.57

CVE-2026-95310

Critical CVSS 9.6

Use after free in AdFilter in Google Chrome prior to 154.

Fixed in 154.0.8037.57

CVE-2026-95299

Critical CVSS 9.6

Use after free in GPU in Google Chrome prior to 154.

Fixed in 154.0.8037.57

CVE-2026-95284

Critical CVSS 9.6

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.

Fixed in 154.0.8037.57

CVE-2026-95283

Critical CVSS 9.6

Buffer overflow in Tint in Google Chrome on on Android prior to 154.

Fixed in 154.0.8037.57

CVE-2026-95281

Critical CVSS 9.6

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.

Fixed in 154.0.8037.57

CVE-2026-95277

Critical CVSS 9.6

Use after free in Views in Google Chrome prior to 154.

Fixed in 154.0.8037.57

CVE-2026-93374

Critical CVSS 9.6

Use after free in Dawn in Google Chrome on on Android prior to 153.

Fixed in 153.0.8010.52

CVE-2026-93373

Critical CVSS 9.6

Use after free in Extensions in Google Chrome prior to 153.

Fixed in 153.0.8010.52

CVE-2026-93372

Critical CVSS 9.6

Buffer overflow in WebGL in Google Chrome on on Android prior to 153.

Fixed in 153.0.8010.52

CVE-2026-91749

Critical CVSS 9.6

Use after free in Workers in Google Chrome prior to 153.

Fixed in 153.0.8010.47

CVE-2026-91738

Critical CVSS 9.6

Improper input validation in ANGLE in Google Chrome prior to 153.

Fixed in 153.0.8010.47

CVE-2026-91729

Critical CVSS 9.6

Use after free in DigitalCredentials in Google Chrome prior to 153.

Fixed in 153.0.8010.47

CVE-2026-91728

Critical CVSS 9.6

Integer overflow in V8 in Google Chrome prior to 153.

Fixed in 153.0.8010.47

CVE-2026-91718

Critical CVSS 9.6

Use after free in Core in Google Chrome prior to 153.

Fixed in 153.0.8010.47

CVE-2026-91716

Critical CVSS 9.6

Use after free in Auth in Google Chrome prior to 153.

Fixed in 153.0.8010.47

CVE-2026-91710

Critical CVSS 9.6

Use after free in WebAppInstalls in Google Chrome prior to 153.

Fixed in 153.0.8010.47

CVE-2026-87654

Critical CVSS 9.6

Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.

Fixed in 153.0.8010.36

CVE-2026-87650

Critical CVSS 9.6

Out of bounds read in WebGL in Google Chrome prior to 153.

Fixed in 153.0.8010.36

CVE-2026-87646

Critical CVSS 9.6

Use after free in Web Authentication in Google Chrome prior to 153.

Fixed in 153.0.8010.36

CVE-2026-87643

Critical CVSS 9.6

Integer overflow in GPU in Google Chrome on on Android prior to 153.

Fixed in 153.0.8010.36

CVE-2026-87638

Critical CVSS 9.6

Out of bounds write in Media in Google Chrome prior to 153.

Fixed in 153.0.8010.36

CVE-2026-87637

Critical CVSS 9.6

Use after free in Extensions in Google Chrome on on Mac prior to 153.

Fixed in 153.0.8010.36

CVE-2026-87634

Critical CVSS 9.6

Use after free in WebPackaging in Google Chrome prior to 153.

Fixed in 153.0.8010.36

CVE-2026-87621

Critical CVSS 9.6

Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.

Fixed in 153.0.8010.36

CVE-2026-87609

Critical CVSS 9.6

Use after free in Sharing in Google Chrome on on iOS prior to 153.

Fixed in 153.0.8010.36

CVE-2026-87607

Critical CVSS 9.6

Use after free in Device in Google Chrome on on Mac prior to 153.

Fixed in 153.0.8010.36

CVE-2026-87581

Critical CVSS 9.6

Use after free in Payments in Google Chrome prior to 153.

Fixed in 153.0.8010.36

CVE-2026-87558

Critical CVSS 9.6

Use after free in Payments in Google Chrome on on Mac prior to 153.

Fixed in 153.0.8010.36

CVE-2026-87547

Critical CVSS 9.6

Incorrect reference resolution in FileSystem in Google Chrome prior to 153.

Fixed in 153.0.8010.36

CVE-2026-87529

Critical CVSS 9.6

Numeric truncation error in Media in Google Chrome prior to 153.

Fixed in 153.0.8010.36

CVE-2026-87528

Critical CVSS 9.6

Type confusion in Rust in Google Chrome on on Windows prior to 153.

Fixed in 153.0.8010.36

CVE-2026-87527

Critical CVSS 9.6

Buffer overflow in WebGL in Google Chrome prior to 153.

Fixed in 153.0.8010.36

CVE-2026-87526

Critical CVSS 9.6

Use after free in Passwords in Google Chrome prior to 153.

Fixed in 153.0.8010.36

CVE-2026-87520

Critical CVSS 9.6

Use after free in Dawn in Google Chrome on on Android prior to 153.

Fixed in 153.0.8010.36

Showing the highest-severity 60 of 2326 records.

Check my browser