Archive · Chrome
Release — Chrome · 2026-05-12
78 CVEs in this release · 78 mapped
· original advisory ↗
CVEs 78
| CVE | Component | Class | Severity | ITW | Fix | RCA |
|---|---|---|---|---|---|---|
| CVE-2026-8509 | WebML | OOB | Critical | — | ● | ✓ |
| CVE-2026-8510 | Skia | Integer Overflow | Critical | — | ● | ✓ |
| CVE-2026-8511 | UI | UAF | Critical | — | ● | ✓ |
| CVE-2026-8512 | FileSystem | UAF | Critical | — | ● | ✓ |
| CVE-2026-8513 | Input | UAF | Critical | — | ● | ✓ |
| CVE-2026-8514 | Aura | UAF | Critical | — | ● | ✓ |
| CVE-2026-8515 | HID | UAF | Critical | — | ● | ✓ |
| CVE-2026-8516 | DataTransfer | Input Validation | Critical | — | ● | ✓ |
| CVE-2026-8517 | WebShare | Logic Error | Critical | — | ● | ✓ |
| CVE-2026-8518 | Blink | UAF | Critical | — | ● | ✓ |
| CVE-2026-8519 | ANGLE | Integer Overflow | Critical | — | ● | ✓ |
| CVE-2026-8520 | Payments | Race | Critical | — | ● | ✓ |
| CVE-2026-8521 | Tab Groups | UAF | Critical | — | ● | ✓ |
| CVE-2026-8522 | Downloads | UAF | Critical | — | ● | ✓ |
| CVE-2026-8523 | Mojo | UAF | High | — | ● | ✓ |
| CVE-2026-8524 | WebAudio | OOB | High | — | ● | ✓ |
| CVE-2026-8525 | ANGLE | OOB | High | — | ● | ✓ |
| CVE-2026-8526 | WebRTC | OOB | High | — | ● | ✓ |
| CVE-2026-8527 | Downloads | Input Validation | High | — | ● | ✓ |
| CVE-2026-8528 | SiteIsolation | Input Validation | Medium | — | ● | ✓ |
| CVE-2026-8529 | Codecs | OOB | High | — | ● | ✓ |
| CVE-2026-8530 | Network | UAF | High | — | ● | ✓ |
| CVE-2026-8531 | WebML | OOB | High | — | ● | ✓ |
| CVE-2026-8532 | XML | Integer Overflow | High | — | ● | ✓ |
| CVE-2026-8533 | Accessibility | UAF | High | — | ● | ✓ |
| CVE-2026-8534 | GPU | Integer Overflow | High | — | ● | ✓ |
| CVE-2026-8535 | Media | OOB | High | — | ● | ✓ |
| CVE-2026-8536 | ReadingMode | Input Validation | High | — | ● | ✓ |
| CVE-2026-8537 | ViewTransitions | Policy Bypass | High | — | ● | ✓ |
| CVE-2026-8538 | GPU | Input Validation | High | — | ● | ✓ |
| CVE-2026-8539 | SanitizerAPI | Logic Error | High | — | ● | ✓ |
| CVE-2026-8540 | V8 | Type Confusion | High | — | ● | ✓ |
| CVE-2026-8541 | UI | OOB | High | — | ● | ✓ |
| CVE-2026-8542 | Core | UAF | High | — | ● | ✓ |
| CVE-2026-8543 | FileSystem | OOB | High | — | ● | ✓ |
| CVE-2026-8544 | Media | UAF | High | — | ● | ✓ |
| CVE-2026-8545 | Compositing | Logic Error | High | — | ● | ✓ |
| CVE-2026-8546 | GPU | OOB | High | — | ● | ✓ |
| CVE-2026-8547 | Passwords | Policy Bypass | High | — | ● | ✓ |
| CVE-2026-8548 | Media | OOB | High | — | ● | ✓ |
| CVE-2026-8549 | Media | UAF | High | — | ● | ✓ |
| CVE-2026-8550 | Google Lens | UAF | High | — | ● | ✓ |
| CVE-2026-8551 | Downloads | UAF | High | — | ● | ✓ |
| CVE-2026-8552 | GPU | OOB | High | — | ● | ✓ |
| CVE-2026-8553 | GPU | UAF | High | — | ● | ✓ |
| CVE-2026-8554 | ANGLE | Type Confusion | High | — | ● | ✓ |
| CVE-2026-8555 | GTK | UAF | High | — | ● | ✓ |
| CVE-2026-8556 | ANGLE | Logic Error | High | — | ● | ✓ |
| CVE-2026-8557 | Accessibility | UAF | High | — | ● | ✓ |
| CVE-2026-8558 | Fonts | OOB | High | — | ● | ✓ |
| CVE-2026-8559 | Internationalization | Integer Overflow | High | — | ● | ✓ |
| CVE-2026-8560 | SwiftShader | OOB | Medium | — | ● | ✓ |
| CVE-2026-8561 | Fullscreen | Spoofing | Medium | — | ● | ✓ |
| CVE-2026-8562 | Navigation | Info Disclosure | Medium | — | ● | — |
| CVE-2026-8563 | IFrame Sandbox | Sandbox Escape | Medium | — | ● | — |
| CVE-2026-8564 | Downloads | Spoofing | Medium | — | ● | ✓ |
| CVE-2026-8565 | Downloads | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-8566 | Payments | Policy Bypass | Medium | — | ● | ✓ |
| CVE-2026-8567 | ANGLE | Integer Overflow | Medium | — | ● | ✓ |
| CVE-2026-8569 | Codecs | OOB | Medium | — | ● | ✓ |
| CVE-2026-8570 | V8 | Type Confusion | Medium | — | ● | ✓ |
| CVE-2026-8571 | GPU | Policy Bypass | Medium | — | ● | ✓ |
| CVE-2026-8572 | Network | Policy Bypass | Medium | — | ● | ✓ |
| CVE-2026-8573 | Codecs | Integer Overflow | Medium | — | ● | ✓ |
| CVE-2026-8574 | Core | UAF | Medium | — | ● | ✓ |
| CVE-2026-8575 | UI | UAF | Medium | — | ● | ✓ |
| CVE-2026-8576 | CORS | Cross Origin | Medium | — | ● | ✓ |
| CVE-2026-8577 | Fonts | Integer Overflow | Medium | — | ● | ✓ |
| CVE-2026-8578 | GPU | OOB | Medium | — | ● | ✓ |
| CVE-2026-8579 | Skia | Input Validation | Medium | — | ● | ✓ |
| CVE-2026-8580 | Mojo | UAF | Medium | — | ● | ✓ |
| CVE-2026-8581 | GPU | UAF | Medium | — | ● | ✓ |
| CVE-2026-8582 | Dawn | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-8583 | WebXR | Policy Bypass | Medium | — | ● | ✓ |
| CVE-2026-8584 | Views | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-8585 | Media | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-8586 | Chromoting | Logic Error | Medium | — | ● | ✓ |
| CVE-2026-8587 | Extensions | UAF | Medium | — | ● | ✓ |