# OPENSUSE-SU-2026:21921-1: chromium security update OPENSUSE-SU-2026:21921-1, released November 7, 2026, fixes 288 CVEs in chromium (version 153.0.8010.52-bp160.1.1). One of them is being exploited (CVE-2026-87491); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/opensuse-su-2026-21921-1 - Platform: Linux - Released: Nov 7, 2026 - Priority: Patch now (Closes CVE-2026-87491, exploited (CISA KEV)) - CVEs: 288, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://osv.dev/vulnerability/openSUSE-SU-2026:21921-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [chromium](https://patchblox.com/security/data/product/linux/chromium.md) | opensuse-leap 16.0 | 153.0.8010.52-bp160.1.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-87491](https://patchblox.com/security/data/cve/CVE-2026-87491.md) | Patch now | Chromium CVE-2026-87491: Out of bounds write in V8 | 8.8 | 0.0351 | CISA KEV | | [CVE-2026-87464](https://patchblox.com/security/data/cve/CVE-2026-87464.md) | Urgent | Chromium CVE-2026-87464: Use after free in WebGL | 9.6 | 0.0058 | | | [CVE-2026-87512](https://patchblox.com/security/data/cve/CVE-2026-87512.md) | Urgent | Chromium CVE-2026-87512: Use after free in ANGLE | 9.6 | 0.0055 | | | [CVE-2026-87646](https://patchblox.com/security/data/cve/CVE-2026-87646.md) | Urgent | Chromium CVE-2026-87646: Use after free in Web Authentication | 9.6 | 0.0053 | | | [CVE-2026-87527](https://patchblox.com/security/data/cve/CVE-2026-87527.md) | Urgent | Chromium CVE-2026-87527: Buffer overflow in WebGL | 9.6 | 0.0051 | | | [CVE-2026-87529](https://patchblox.com/security/data/cve/CVE-2026-87529.md) | Urgent | Chromium CVE-2026-87529: Numeric truncation error in Media | 9.6 | 0.0050 | | | [CVE-2026-87547](https://patchblox.com/security/data/cve/CVE-2026-87547.md) | Urgent | Chromium CVE-2026-87547: Incorrect reference resolution in FileSystem | 9.6 | 0.0050 | | | [CVE-2026-87528](https://patchblox.com/security/data/cve/CVE-2026-87528.md) | Urgent | Chromium CVE-2026-87528: Type confusion in Rust | 9.6 | 0.0048 | | | [CVE-2026-87613](https://patchblox.com/security/data/cve/CVE-2026-87613.md) | Urgent | Chromium CVE-2026-87613: Incorrect reference resolution in Extensions | 9.0 | 0.0047 | | | [CVE-2026-87438](https://patchblox.com/security/data/cve/CVE-2026-87438.md) | Urgent | Chromium CVE-2026-87438: Out of bounds write in WebGL | 9.6 | 0.0046 | | | [CVE-2026-87448](https://patchblox.com/security/data/cve/CVE-2026-87448.md) | Urgent | Chromium CVE-2026-87448: Use after free in DevTools | 9.6 | 0.0046 | | | [CVE-2026-87455](https://patchblox.com/security/data/cve/CVE-2026-87455.md) | Urgent | Chromium CVE-2026-87455: Use after free in Aura | 9.6 | 0.0046 | | | [CVE-2026-87470](https://patchblox.com/security/data/cve/CVE-2026-87470.md) | Urgent | Chromium CVE-2026-87470: Improper quantity validation in Tint | 9.6 | 0.0046 | | | [CVE-2026-87474](https://patchblox.com/security/data/cve/CVE-2026-87474.md) | Urgent | Chromium CVE-2026-87474: Use after free in Payments | 9.6 | 0.0046 | | | [CVE-2026-87488](https://patchblox.com/security/data/cve/CVE-2026-87488.md) | Urgent | Chromium CVE-2026-87488: Use after free in WebGL | 9.6 | 0.0046 | | | [CVE-2026-87494](https://patchblox.com/security/data/cve/CVE-2026-87494.md) | Urgent | Chromium CVE-2026-87494: Use after free in Browser | 9.6 | 0.0046 | | | [CVE-2026-87520](https://patchblox.com/security/data/cve/CVE-2026-87520.md) | Urgent | Chromium CVE-2026-87520: Use after free in Dawn | 9.6 | 0.0046 | | | [CVE-2026-87558](https://patchblox.com/security/data/cve/CVE-2026-87558.md) | Urgent | Chromium CVE-2026-87558: Use after free in Payments | 9.6 | 0.0046 | | | [CVE-2026-87581](https://patchblox.com/security/data/cve/CVE-2026-87581.md) | Urgent | Chromium CVE-2026-87581: Use after free in Payments | 9.6 | 0.0046 | | | [CVE-2026-87607](https://patchblox.com/security/data/cve/CVE-2026-87607.md) | Urgent | Google Chrome: Use after free | 9.6 | 0.0046 | | | [CVE-2026-87634](https://patchblox.com/security/data/cve/CVE-2026-87634.md) | Urgent | Chromium CVE-2026-87634: Use after free in WebPackaging | 9.6 | 0.0046 | | | [CVE-2026-87637](https://patchblox.com/security/data/cve/CVE-2026-87637.md) | Urgent | Chromium CVE-2026-87637: Use after free in Extensions | 9.6 | 0.0046 | | | [CVE-2026-87638](https://patchblox.com/security/data/cve/CVE-2026-87638.md) | Urgent | Chromium CVE-2026-87638: Out of bounds write in Media | 9.6 | 0.0046 | | | [CVE-2026-87643](https://patchblox.com/security/data/cve/CVE-2026-87643.md) | Urgent | Chromium CVE-2026-87643: Integer overflow in GPU | 9.6 | 0.0046 | | | [CVE-2026-87650](https://patchblox.com/security/data/cve/CVE-2026-87650.md) | Urgent | Chromium CVE-2026-87650: Out of bounds read in WebGL | 9.6 | 0.0046 | | | [CVE-2026-87492](https://patchblox.com/security/data/cve/CVE-2026-87492.md) | Urgent | Chromium CVE-2026-87492: Incorrect authorization in DevTools | 9.6 | 0.0044 | | | [CVE-2026-93372](https://patchblox.com/security/data/cve/CVE-2026-93372.md) | Urgent | Chromium CVE-2026-93372: Buffer overflow in WebGL | 9.6 | 0.0043 | | | [CVE-2026-87504](https://patchblox.com/security/data/cve/CVE-2026-87504.md) | Urgent | Chromium CVE-2026-87504: Use after free in Core | 9.6 | 0.0043 | | | [CVE-2026-87526](https://patchblox.com/security/data/cve/CVE-2026-87526.md) | Urgent | Chromium CVE-2026-87526: Use after free in Passwords | 9.6 | 0.0043 | | | [CVE-2026-87609](https://patchblox.com/security/data/cve/CVE-2026-87609.md) | Urgent | Chromium CVE-2026-87609: Use after free in Sharing | 9.6 | 0.0043 | | | [CVE-2026-93374](https://patchblox.com/security/data/cve/CVE-2026-93374.md) | Urgent | Chromium CVE-2026-93374: Use after free in Dawn | 9.6 | 0.0042 | | | [CVE-2026-87595](https://patchblox.com/security/data/cve/CVE-2026-87595.md) | Urgent | Chromium CVE-2026-87595: Server-side request forgery in Mobile | 9.8 | 0.0042 | | | [CVE-2026-87654](https://patchblox.com/security/data/cve/CVE-2026-87654.md) | Urgent | Chromium CVE-2026-87654: Buffer overflow in ANGLE | 9.6 | 0.0040 | | | [CVE-2026-91721](https://patchblox.com/security/data/cve/CVE-2026-91721.md) | Urgent | Chromium CVE-2026-91721: Use after free | 8.8 | 0.0039 | | | [CVE-2026-91749](https://patchblox.com/security/data/cve/CVE-2026-91749.md) | Urgent | Chromium CVE-2026-91749: Use after free | 9.6 | 0.0038 | | | [CVE-2026-87500](https://patchblox.com/security/data/cve/CVE-2026-87500.md) | Urgent | Chromium CVE-2026-87500: Improper validation of array index in ANGLE | 9.6 | 0.0036 | | | [CVE-2026-87621](https://patchblox.com/security/data/cve/CVE-2026-87621.md) | Urgent | Chromium CVE-2026-87621: Out of bounds write in ANGLE | 9.6 | 0.0036 | | | [CVE-2026-87544](https://patchblox.com/security/data/cve/CVE-2026-87544.md) | Urgent | Chromium CVE-2026-87544: Incorrect authorization in Extensions | 9.8 | 0.0034 | | | [CVE-2026-93373](https://patchblox.com/security/data/cve/CVE-2026-93373.md) | Urgent | Chromium CVE-2026-93373: Use after free in Extensions | 9.6 | 0.0033 | | | [CVE-2026-87534](https://patchblox.com/security/data/cve/CVE-2026-87534.md) | Urgent | Chromium CVE-2026-87534: Missing authorization in WebView | 9.8 | 0.0029 | | | [CVE-2026-91726](https://patchblox.com/security/data/cve/CVE-2026-91726.md) | Urgent | Chromium CVE-2026-91726: Out of bounds read | 4.7 | 0.0027 | | | [CVE-2026-87430](https://patchblox.com/security/data/cve/CVE-2026-87430.md) | High | Chromium CVE-2026-87430: Buffer overflow in WebRTC | 8.8 | 0.0057 | | | [CVE-2026-87579](https://patchblox.com/security/data/cve/CVE-2026-87579.md) | High | Chromium CVE-2026-87579: Buffer overflow in WebRTC | 8.8 | 0.0057 | | | [CVE-2026-87612](https://patchblox.com/security/data/cve/CVE-2026-87612.md) | High | Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 8.8 | 0.0045 | | | [CVE-2026-87636](https://patchblox.com/security/data/cve/CVE-2026-87636.md) | High | Chromium CVE-2026-87636: Type confusion in XML | 8.8 | 0.0045 | | | [CVE-2026-91731](https://patchblox.com/security/data/cve/CVE-2026-91731.md) | High | Chromium CVE-2026-91731: Type confusion | 8.8 | 0.0044 | | | [CVE-2026-91741](https://patchblox.com/security/data/cve/CVE-2026-91741.md) | High | Chromium CVE-2026-91741: Type confusion | 8.8 | 0.0044 | | | [CVE-2026-87616](https://patchblox.com/security/data/cve/CVE-2026-87616.md) | High | Chromium CVE-2026-87616: Improper initialization in Views | 8.3 | 0.0044 | | | [CVE-2026-87618](https://patchblox.com/security/data/cve/CVE-2026-87618.md) | High | Chromium CVE-2026-87618: Incorrect reference resolution in Storage | 8.3 | 0.0044 | | | [CVE-2026-93377](https://patchblox.com/security/data/cve/CVE-2026-93377.md) | High | Chromium CVE-2026-93377: Type confusion in V8 | 8.8 | 0.0044 | | | [CVE-2026-87510](https://patchblox.com/security/data/cve/CVE-2026-87510.md) | High | Chromium CVE-2026-87510: Improper input validation in FileAPI | 8.3 | 0.0043 | | | [CVE-2026-87553](https://patchblox.com/security/data/cve/CVE-2026-87553.md) | High | Chromium CVE-2026-87553: Improper input validation in SiteIsolation | 8.3 | 0.0043 | | | [CVE-2026-87572](https://patchblox.com/security/data/cve/CVE-2026-87572.md) | High | Chromium CVE-2026-87572: Injection in DevTools | 8.3 | 0.0042 | | | [CVE-2026-87440](https://patchblox.com/security/data/cve/CVE-2026-87440.md) | High | Chromium CVE-2026-87440: Out of bounds read in Media | 8.8 | 0.0041 | | | [CVE-2026-87444](https://patchblox.com/security/data/cve/CVE-2026-87444.md) | High | Chromium CVE-2026-87444: Memory corruption in Codecs | 8.8 | 0.0041 | | | [CVE-2026-87460](https://patchblox.com/security/data/cve/CVE-2026-87460.md) | High | Chromium CVE-2026-87460: Use after free in Platform | 8.8 | 0.0041 | | | [CVE-2026-87536](https://patchblox.com/security/data/cve/CVE-2026-87536.md) | High | Chromium CVE-2026-87536: Use after free in V8 | 8.8 | 0.0041 | | | [CVE-2026-87542](https://patchblox.com/security/data/cve/CVE-2026-87542.md) | High | Chromium CVE-2026-87542: Use after free in Input | 8.8 | 0.0041 | | | [CVE-2026-87587](https://patchblox.com/security/data/cve/CVE-2026-87587.md) | High | Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 8.8 | 0.0041 | | | [CVE-2026-87588](https://patchblox.com/security/data/cve/CVE-2026-87588.md) | High | Chromium CVE-2026-87588: Use after free in Chromecast | 8.8 | 0.0041 | | | [CVE-2026-87617](https://patchblox.com/security/data/cve/CVE-2026-87617.md) | High | Chromium CVE-2026-87617: Use after free in DevTools | 8.8 | 0.0041 | | | [CVE-2026-87481](https://patchblox.com/security/data/cve/CVE-2026-87481.md) | High | Chromium CVE-2026-87481: Incorrect authorization in WebView | 8.3 | 0.0041 | | | [CVE-2026-91728](https://patchblox.com/security/data/cve/CVE-2026-91728.md) | High | Chromium CVE-2026-91728: Integer overflow | 9.6 | 0.0041 | | | [CVE-2026-91709](https://patchblox.com/security/data/cve/CVE-2026-91709.md) | High | Chromium CVE-2026-91709: Type confusion | 8.8 | 0.0041 | | | [CVE-2026-87537](https://patchblox.com/security/data/cve/CVE-2026-87537.md) | High | Chromium CVE-2026-87537: Missing authorization in Extensions | 8.1 | 0.0041 | | | [CVE-2026-87479](https://patchblox.com/security/data/cve/CVE-2026-87479.md) | High | Chromium CVE-2026-87479: Insufficient policy enforcement in Extensions | 8.3 | 0.0040 | | | [CVE-2026-87480](https://patchblox.com/security/data/cve/CVE-2026-87480.md) | High | Chromium CVE-2026-87480: Use after free in Printing | 8.3 | 0.0040 | | | [CVE-2026-87506](https://patchblox.com/security/data/cve/CVE-2026-87506.md) | High | Chromium CVE-2026-87506: Privilege elevation in WebUI | 8.3 | 0.0040 | | | [CVE-2026-87524](https://patchblox.com/security/data/cve/CVE-2026-87524.md) | High | Chromium CVE-2026-87524: Use after free in Core | 8.3 | 0.0040 | | | [CVE-2026-87639](https://patchblox.com/security/data/cve/CVE-2026-87639.md) | High | Chromium CVE-2026-87639: Use after free in WebPackaging | 8.3 | 0.0040 | | | [CVE-2026-87487](https://patchblox.com/security/data/cve/CVE-2026-87487.md) | High | Chromium CVE-2026-87487: Missing authorization in FileSystem | 8.3 | 0.0039 | | | [CVE-2026-87582](https://patchblox.com/security/data/cve/CVE-2026-87582.md) | High | Chromium CVE-2026-87582: Confused deputy in DataTransfer | 8.3 | 0.0039 | | | [CVE-2026-87644](https://patchblox.com/security/data/cve/CVE-2026-87644.md) | High | Chromium CVE-2026-87644: Incorrect authorization in Views | 8.3 | 0.0039 | | | [CVE-2026-93381](https://patchblox.com/security/data/cve/CVE-2026-93381.md) | High | Chromium CVE-2026-93381: Buffer overflow in PDFium | 8.8 | 0.0039 | | | [CVE-2026-87489](https://patchblox.com/security/data/cve/CVE-2026-87489.md) | High | Chromium CVE-2026-87489: Memory corruption in V8 | 8.8 | 0.0038 | | | [CVE-2026-87585](https://patchblox.com/security/data/cve/CVE-2026-87585.md) | High | Chromium CVE-2026-87585: Double free in PDFium | 8.8 | 0.0038 | | | [CVE-2026-87625](https://patchblox.com/security/data/cve/CVE-2026-87625.md) | High | Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium) | 8.8 | 0.0038 | | | [CVE-2026-93382](https://patchblox.com/security/data/cve/CVE-2026-93382.md) | High | Chromium CVE-2026-93382: Use after free in PDFium | 8.8 | 0.0037 | | | [CVE-2026-91745](https://patchblox.com/security/data/cve/CVE-2026-91745.md) | High | Chromium CVE-2026-91745: Use after free | 8.8 | 0.0036 | | | [CVE-2026-91729](https://patchblox.com/security/data/cve/CVE-2026-91729.md) | High | Chromium CVE-2026-91729: Use after free | 9.6 | 0.0034 | | | [CVE-2026-91736](https://patchblox.com/security/data/cve/CVE-2026-91736.md) | High | Chromium CVE-2026-91736: Use after free | 8.8 | 0.0034 | | | [CVE-2026-91737](https://patchblox.com/security/data/cve/CVE-2026-91737.md) | High | Chromium CVE-2026-91737: Use after free | 8.8 | 0.0034 | | | [CVE-2026-91724](https://patchblox.com/security/data/cve/CVE-2026-91724.md) | High | Chromium CVE-2026-91724: Use after free | 8.3 | 0.0034 | | | [CVE-2026-87569](https://patchblox.com/security/data/cve/CVE-2026-87569.md) | High | Chromium CVE-2026-87569: Missing authorization in Views | 8.8 | 0.0034 | | | [CVE-2026-91718](https://patchblox.com/security/data/cve/CVE-2026-91718.md) | High | Chromium CVE-2026-91718: Use after free | 9.6 | 0.0033 | | | [CVE-2026-91738](https://patchblox.com/security/data/cve/CVE-2026-91738.md) | High | Chromium CVE-2026-91738: Improper input validation | 9.6 | 0.0033 | | | [CVE-2026-91715](https://patchblox.com/security/data/cve/CVE-2026-91715.md) | High | Chromium CVE-2026-91715: Type confusion | 8.8 | 0.0033 | | | [CVE-2026-87431](https://patchblox.com/security/data/cve/CVE-2026-87431.md) | High | Chromium CVE-2026-87431: Missing authorization in Extensions | 7.5 | 0.0032 | | | [CVE-2026-87450](https://patchblox.com/security/data/cve/CVE-2026-87450.md) | High | Chromium CVE-2026-87450: Incorrect authorization in Permissions | 7.5 | 0.0032 | | | [CVE-2026-87604](https://patchblox.com/security/data/cve/CVE-2026-87604.md) | High | Chromium CVE-2026-87604: Out of bounds read in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-87471](https://patchblox.com/security/data/cve/CVE-2026-87471.md) | High | Chromium CVE-2026-87471: Incorrect authorization in ServiceWorker | 8.1 | 0.0032 | | | [CVE-2026-87499](https://patchblox.com/security/data/cve/CVE-2026-87499.md) | High | Chromium CVE-2026-87499: Incorrect authorization in Network | 8.1 | 0.0032 | | | [CVE-2026-87606](https://patchblox.com/security/data/cve/CVE-2026-87606.md) | High | Chromium CVE-2026-87606: Missing authorization in SiteIsolation | 8.1 | 0.0032 | | | [CVE-2026-91733](https://patchblox.com/security/data/cve/CVE-2026-91733.md) | High | Chromium CVE-2026-91733: Improper state validation | 9.6 | 0.0032 | | | [CVE-2026-87648](https://patchblox.com/security/data/cve/CVE-2026-87648.md) | High | Chromium CVE-2026-87648: Use after free in ANGLE | 9.6 | 0.0031 | | | [CVE-2026-91710](https://patchblox.com/security/data/cve/CVE-2026-91710.md) | High | Chromium CVE-2026-91710: Use after free | 9.6 | 0.0031 | | | [CVE-2026-91716](https://patchblox.com/security/data/cve/CVE-2026-91716.md) | High | Chromium CVE-2026-91716: Use after free | 9.6 | 0.0031 | | | [CVE-2026-91711](https://patchblox.com/security/data/cve/CVE-2026-91711.md) | High | Chromium CVE-2026-91711: Out of bounds write | 8.8 | 0.0031 | | | [CVE-2026-91722](https://patchblox.com/security/data/cve/CVE-2026-91722.md) | High | Chromium CVE-2026-91722: Use after free | 8.8 | 0.0031 | | | [CVE-2026-91735](https://patchblox.com/security/data/cve/CVE-2026-91735.md) | High | Chromium CVE-2026-91735: Incorrect authorization | 8.3 | 0.0031 | | | [CVE-2026-87570](https://patchblox.com/security/data/cve/CVE-2026-87570.md) | High | Chromium CVE-2026-87570: Incorrect authorization in SiteIsolation | 8.8 | 0.0031 | | | [CVE-2026-87601](https://patchblox.com/security/data/cve/CVE-2026-87601.md) | High | Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) | 7.5 | 0.0029 | | | [CVE-2026-87433](https://patchblox.com/security/data/cve/CVE-2026-87433.md) | High | Chromium CVE-2026-87433: Race condition in FileAPI | 8.8 | 0.0028 | | | [CVE-2026-87505](https://patchblox.com/security/data/cve/CVE-2026-87505.md) | High | Chromium CVE-2026-87505: Incorrect authorization in FileSystem | 8.1 | 0.0027 | | | [CVE-2026-91712](https://patchblox.com/security/data/cve/CVE-2026-91712.md) | High | Chromium CVE-2026-91712: Race condition | 8.3 | 0.0027 | | | [CVE-2026-91720](https://patchblox.com/security/data/cve/CVE-2026-91720.md) | High | Chromium CVE-2026-91720: Uninitialized resource | 9.6 | 0.0027 | | | [CVE-2026-91732](https://patchblox.com/security/data/cve/CVE-2026-91732.md) | High | Chromium CVE-2026-91732: Missing authorization | 8.1 | 0.0026 | | | [CVE-2026-87608](https://patchblox.com/security/data/cve/CVE-2026-87608.md) | High | Chromium CVE-2026-87608: Improper certificate validation in FedCM | 7.5 | 0.0026 | | | [CVE-2026-93387](https://patchblox.com/security/data/cve/CVE-2026-93387.md) | High | Chromium CVE-2026-93387: Improper state validation in Skia | 9.6 | 0.0025 | | | [CVE-2026-91743](https://patchblox.com/security/data/cve/CVE-2026-91743.md) | High | Chromium CVE-2026-91743: Race condition | 8.3 | 0.0025 | | | [CVE-2026-87586](https://patchblox.com/security/data/cve/CVE-2026-87586.md) | High | Chromium CVE-2026-87586: Out of bounds read in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-87596](https://patchblox.com/security/data/cve/CVE-2026-87596.md) | High | Chromium CVE-2026-87596: Out of bounds read in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-91740](https://patchblox.com/security/data/cve/CVE-2026-91740.md) | High | Chromium CVE-2026-91740: Uninitialized resource | 9.6 | 0.0025 | | | [CVE-2026-91747](https://patchblox.com/security/data/cve/CVE-2026-91747.md) | High | Chromium CVE-2026-91747: Use after free | 9.6 | 0.0025 | | | [CVE-2026-91719](https://patchblox.com/security/data/cve/CVE-2026-91719.md) | High | Chromium CVE-2026-91719: Code injection | 8.1 | 0.0023 | | | [CVE-2026-91748](https://patchblox.com/security/data/cve/CVE-2026-91748.md) | High | Chromium CVE-2026-91748: Race condition | 8.3 | 0.0023 | | | [CVE-2026-87578](https://patchblox.com/security/data/cve/CVE-2026-87578.md) | High | Chromium CVE-2026-87578: Use after free in Receiver | 8.3 | 0.0019 | | | [CVE-2026-87628](https://patchblox.com/security/data/cve/CVE-2026-87628.md) | High | Chromium CVE-2026-87628: Use after free in Cast | 8.3 | 0.0019 | | | [CVE-2026-87602](https://patchblox.com/security/data/cve/CVE-2026-87602.md) | High | Chromium CVE-2026-87602: Out of bounds read in ANGLE | 9.6 | 0.0016 | | | [CVE-2026-87633](https://patchblox.com/security/data/cve/CVE-2026-87633.md) | High | Chromium CVE-2026-87633: Use after free in Views | 8.6 | 0.0015 | | | [CVE-2026-87530](https://patchblox.com/security/data/cve/CVE-2026-87530.md) | High | Chromium CVE-2026-87530: Uncontrolled search path element in CredentialProvider | 8.1 | 0.0014 | | | [CVE-2026-87533](https://patchblox.com/security/data/cve/CVE-2026-87533.md) | High | Chromium CVE-2026-87533: Use after free in DevTools | 8.1 | 0.0014 | | | [CVE-2026-87514](https://patchblox.com/security/data/cve/CVE-2026-87514.md) | High | Chromium CVE-2026-87514: Use after free in Views | 8.1 | 0.0013 | | | [CVE-2026-87509](https://patchblox.com/security/data/cve/CVE-2026-87509.md) | High | Chromium CVE-2026-87509: Incorrect authorization in Updater | 8.1 | 0.0012 | | | [CVE-2026-91727](https://patchblox.com/security/data/cve/CVE-2026-91727.md) | High | Chromium CVE-2026-91727: Incorrect reference resolution | 8.1 | 0.0011 | | | [CVE-2026-91734](https://patchblox.com/security/data/cve/CVE-2026-91734.md) | High | Chromium CVE-2026-91734: Incorrect authorization | 7.4 | 0.0010 | | | [CVE-2026-93375](https://patchblox.com/security/data/cve/CVE-2026-93375.md) | High | Chromium CVE-2026-93375: Incorrect reference resolution in Tracing | 8.1 | 0.0010 | | | [CVE-2026-87457](https://patchblox.com/security/data/cve/CVE-2026-87457.md) | High | Chromium CVE-2026-87457: Race condition in Updater | 8.1 | 0.0010 | | | [CVE-2026-87467](https://patchblox.com/security/data/cve/CVE-2026-87467.md) | High | Chromium CVE-2026-87467: Race condition in Updater | 8.1 | 0.0010 | | | [CVE-2026-87554](https://patchblox.com/security/data/cve/CVE-2026-87554.md) | High | Chromium CVE-2026-87554: Race condition in Chromoting | 8.1 | 0.0010 | | | [CVE-2026-87549](https://patchblox.com/security/data/cve/CVE-2026-87549.md) | Routine | Chromium CVE-2026-87549: Incomplete cleanup in Downloads | 6.5 | 0.0037 | | | [CVE-2026-87535](https://patchblox.com/security/data/cve/CVE-2026-87535.md) | Routine | Chromium CVE-2026-87535: Information loss or omission in Safebrowsing | 6.5 | 0.0034 | | | [CVE-2026-87541](https://patchblox.com/security/data/cve/CVE-2026-87541.md) | Routine | Chromium CVE-2026-87541: Information leak in Navigation | 6.5 | 0.0032 | | | [CVE-2026-87437](https://patchblox.com/security/data/cve/CVE-2026-87437.md) | Routine | Chromium CVE-2026-87437: Information leak in Frames | 6.5 | 0.0032 | | | [CVE-2026-87454](https://patchblox.com/security/data/cve/CVE-2026-87454.md) | Routine | Chromium CVE-2026-87454: Information leak in Enterprise | 6.5 | 0.0032 | | | [CVE-2026-87459](https://patchblox.com/security/data/cve/CVE-2026-87459.md) | Routine | Chromium CVE-2026-87459: Observable discrepancy in Select | 6.5 | 0.0032 | | | [CVE-2026-87477](https://patchblox.com/security/data/cve/CVE-2026-87477.md) | Routine | Chromium CVE-2026-87477: Information leak in Core | 6.5 | 0.0032 | | | [CVE-2026-87478](https://patchblox.com/security/data/cve/CVE-2026-87478.md) | Routine | Chromium CVE-2026-87478: Observable discrepancy in Autofill | 6.5 | 0.0032 | | | [CVE-2026-87490](https://patchblox.com/security/data/cve/CVE-2026-87490.md) | Routine | Chromium CVE-2026-87490: Information leak in Transactions Platform | 6.5 | 0.0032 | | | [CVE-2026-87545](https://patchblox.com/security/data/cve/CVE-2026-87545.md) | Routine | Chromium CVE-2026-87545: Information leak in Mobile | 6.5 | 0.0032 | | | [CVE-2026-87565](https://patchblox.com/security/data/cve/CVE-2026-87565.md) | Routine | Chromium CVE-2026-87565: Information leak in Passwords | 6.5 | 0.0032 | | | [CVE-2026-87593](https://patchblox.com/security/data/cve/CVE-2026-87593.md) | Routine | Chromium CVE-2026-87593: Information leak in Editing | 6.5 | 0.0032 | | | [CVE-2026-87620](https://patchblox.com/security/data/cve/CVE-2026-87620.md) | Routine | Chromium CVE-2026-87620: Observable discrepancy in SVG | 6.5 | 0.0032 | | | [CVE-2026-87623](https://patchblox.com/security/data/cve/CVE-2026-87623.md) | Routine | Chromium CVE-2026-87623: Observable discrepancy in DOM | 6.5 | 0.0032 | | | [CVE-2026-87590](https://patchblox.com/security/data/cve/CVE-2026-87590.md) | Routine | Chromium CVE-2026-87590: Improper input validation in Passwords | 5.9 | 0.0032 | | | [CVE-2026-93385](https://patchblox.com/security/data/cve/CVE-2026-93385.md) | Routine | Chromium CVE-2026-93385: Information leak in Paint | 6.5 | 0.0031 | | | [CVE-2026-87436](https://patchblox.com/security/data/cve/CVE-2026-87436.md) | Routine | Chromium CVE-2026-87436: Incomplete cleanup in Browser | 6.5 | 0.0031 | | | [CVE-2026-87446](https://patchblox.com/security/data/cve/CVE-2026-87446.md) | Routine | Chromium CVE-2026-87446: Incomplete cleanup in Extensions | 6.5 | 0.0031 | | | [CVE-2026-87443](https://patchblox.com/security/data/cve/CVE-2026-87443.md) | Routine | Chromium CVE-2026-87443: Missing authorization in Actor | 6.5 | 0.0031 | | | [CVE-2026-87476](https://patchblox.com/security/data/cve/CVE-2026-87476.md) | Routine | Chromium CVE-2026-87476: Incorrect authorization in Loader | 6.5 | 0.0031 | | | [CVE-2026-87631](https://patchblox.com/security/data/cve/CVE-2026-87631.md) | Routine | Chromium CVE-2026-87631: Missing authorization in DOM | 6.5 | 0.0031 | | | [CVE-2026-87600](https://patchblox.com/security/data/cve/CVE-2026-87600.md) | Routine | Chromium CVE-2026-87600: Improper input validation in Safebrowsing | 6.5 | 0.0030 | | | [CVE-2026-87429](https://patchblox.com/security/data/cve/CVE-2026-87429.md) | Routine | Chromium CVE-2026-87429: Missing authorization in ServiceWorker | 6.5 | 0.0029 | | | [CVE-2026-87473](https://patchblox.com/security/data/cve/CVE-2026-87473.md) | Routine | Chromium CVE-2026-87473: Incorrect authorization in FileHandling | 6.5 | 0.0029 | | | [CVE-2026-87519](https://patchblox.com/security/data/cve/CVE-2026-87519.md) | Routine | Chromium CVE-2026-87519: Incorrect authorization in Safebrowsing | 6.5 | 0.0029 | | | [CVE-2026-87603](https://patchblox.com/security/data/cve/CVE-2026-87603.md) | Routine | Chromium CVE-2026-87603: Missing authorization in FileSystem | 6.5 | 0.0029 | | | [CVE-2026-87610](https://patchblox.com/security/data/cve/CVE-2026-87610.md) | Routine | Chromium CVE-2026-87610: Incorrect authorization in Omnibox | 6.5 | 0.0029 | | | [CVE-2026-87629](https://patchblox.com/security/data/cve/CVE-2026-87629.md) | Routine | Chromium CVE-2026-87629: Incorrect authorization in Sources | 6.5 | 0.0029 | | | [CVE-2026-87640](https://patchblox.com/security/data/cve/CVE-2026-87640.md) | Routine | Chromium CVE-2026-87640: Out of bounds read in WebView | 6.1 | 0.0028 | | | [CVE-2026-87435](https://patchblox.com/security/data/cve/CVE-2026-87435.md) | Routine | Chromium CVE-2026-87435: Information leak in ControlledFrame | 5.3 | 0.0028 | | | [CVE-2026-87439](https://patchblox.com/security/data/cve/CVE-2026-87439.md) | Routine | Chromium CVE-2026-87439: Information leak in ServiceWorker | 5.3 | 0.0028 | | | [CVE-2026-87518](https://patchblox.com/security/data/cve/CVE-2026-87518.md) | Routine | Chromium CVE-2026-87518: Observable discrepancy in Safebrowsing | 5.3 | 0.0028 | | | [CVE-2026-87566](https://patchblox.com/security/data/cve/CVE-2026-87566.md) | Routine | Chromium CVE-2026-87566: Observable discrepancy in Layout | 5.3 | 0.0028 | | | [CVE-2026-87483](https://patchblox.com/security/data/cve/CVE-2026-87483.md) | Routine | Chromium CVE-2026-87483: Incorrect authorization in Browser | 6.5 | 0.0028 | | | [CVE-2026-87580](https://patchblox.com/security/data/cve/CVE-2026-87580.md) | Routine | Chromium CVE-2026-87580: Incorrect authorization in WebAppInstalls | 6.5 | 0.0028 | | | [CVE-2026-87584](https://patchblox.com/security/data/cve/CVE-2026-87584.md) | Routine | Chromium CVE-2026-87584: Incorrect authorization in WebUI | 6.5 | 0.0028 | | | [CVE-2026-87555](https://patchblox.com/security/data/cve/CVE-2026-87555.md) | Routine | Chromium CVE-2026-87555: Uninitialized resource in GPU | 4.7 | 0.0028 | | | [CVE-2026-87564](https://patchblox.com/security/data/cve/CVE-2026-87564.md) | Routine | Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High) | 4.3 | 0.0028 | | | [CVE-2026-87642](https://patchblox.com/security/data/cve/CVE-2026-87642.md) | Routine | Chromium CVE-2026-87642: Uninitialized resource in WebGL | 4.3 | 0.0028 | | | [CVE-2026-87522](https://patchblox.com/security/data/cve/CVE-2026-87522.md) | Routine | Chromium CVE-2026-87522: Missing authorization in WebView | 6.5 | 0.0028 | | | [CVE-2026-87626](https://patchblox.com/security/data/cve/CVE-2026-87626.md) | Routine | Chromium CVE-2026-87626: Incorrect authorization in DeviceBoundSessionCredentials | 6.5 | 0.0028 | | | [CVE-2026-87503](https://patchblox.com/security/data/cve/CVE-2026-87503.md) | Routine | Chromium CVE-2026-87503: Inappropriate implementation in Downloads | 6.5 | 0.0028 | | | [CVE-2026-87532](https://patchblox.com/security/data/cve/CVE-2026-87532.md) | Routine | Chromium CVE-2026-87532: Improper state validation in Safebrowsing | 6.5 | 0.0028 | | | [CVE-2026-87627](https://patchblox.com/security/data/cve/CVE-2026-87627.md) | Routine | Chromium CVE-2026-87627: Interpretation conflict in Safebrowsing | 6.5 | 0.0027 | | | [CVE-2026-87453](https://patchblox.com/security/data/cve/CVE-2026-87453.md) | Routine | Chromium CVE-2026-87453: Confused deputy in BackgroundFetch | 5.3 | 0.0027 | | | [CVE-2026-87594](https://patchblox.com/security/data/cve/CVE-2026-87594.md) | Routine | Chromium CVE-2026-87594: Incorrect authorization in DataTransfer | 5.3 | 0.0027 | | | [CVE-2026-87605](https://patchblox.com/security/data/cve/CVE-2026-87605.md) | Routine | Chromium CVE-2026-87605: Missing authorization in Contacts | 5.3 | 0.0027 | | | [CVE-2026-87466](https://patchblox.com/security/data/cve/CVE-2026-87466.md) | Routine | Chromium CVE-2026-87466: Incorrect authorization in Workers | 4.3 | 0.0027 | | | [CVE-2026-87508](https://patchblox.com/security/data/cve/CVE-2026-87508.md) | Routine | Chromium CVE-2026-87508: Incorrect authorization in Loader | 4.3 | 0.0027 | | | [CVE-2026-87598](https://patchblox.com/security/data/cve/CVE-2026-87598.md) | Routine | Chromium CVE-2026-87598: Incorrect authorization in ServiceWorker | 4.3 | 0.0027 | | | [CVE-2026-87622](https://patchblox.com/security/data/cve/CVE-2026-87622.md) | Routine | Chromium CVE-2026-87622: Missing authorization in FedCM | 4.3 | 0.0027 | | | [CVE-2026-87468](https://patchblox.com/security/data/cve/CVE-2026-87468.md) | Routine | Chromium CVE-2026-87468: Incorrect authorization in Isolated | 6.5 | 0.0027 | | | [CVE-2026-87475](https://patchblox.com/security/data/cve/CVE-2026-87475.md) | Routine | Chromium CVE-2026-87475: Missing authorization in Omnibox | 6.5 | 0.0027 | | | [CVE-2026-87493](https://patchblox.com/security/data/cve/CVE-2026-87493.md) | Routine | Chromium CVE-2026-87493: Missing authorization in FileSystem | 6.5 | 0.0027 | | | [CVE-2026-87513](https://patchblox.com/security/data/cve/CVE-2026-87513.md) | Routine | Chromium CVE-2026-87513: Missing authorization in ControlledFrame | 6.5 | 0.0027 | | | [CVE-2026-87515](https://patchblox.com/security/data/cve/CVE-2026-87515.md) | Routine | Chromium CVE-2026-87515: Incorrect authorization in FileAPI | 6.5 | 0.0027 | | | [CVE-2026-87589](https://patchblox.com/security/data/cve/CVE-2026-87589.md) | Routine | Chromium CVE-2026-87589: Incorrect authorization in SiteIsolation | 6.5 | 0.0027 | | | [CVE-2026-87550](https://patchblox.com/security/data/cve/CVE-2026-87550.md) | Routine | Chromium CVE-2026-87550: Improper encoding or escaping of output in CSS | 4.3 | 0.0027 | | | [CVE-2026-87573](https://patchblox.com/security/data/cve/CVE-2026-87573.md) | Routine | Chromium CVE-2026-87573: Improper input validation in Network | 4.3 | 0.0027 | | | [CVE-2026-87632](https://patchblox.com/security/data/cve/CVE-2026-87632.md) | Routine | Chromium CVE-2026-87632: Cross-site scripting in SanitizerAPI | 4.3 | 0.0027 | | | [CVE-2026-87591](https://patchblox.com/security/data/cve/CVE-2026-87591.md) | Routine | Chromium CVE-2026-87591: Incorrect authorization in Extensions | 6.5 | 0.0026 | | | [CVE-2026-87597](https://patchblox.com/security/data/cve/CVE-2026-87597.md) | Routine | Chromium CVE-2026-87597: UI misrepresentation in CustomTabs | 4.8 | 0.0026 | | | [CVE-2026-87561](https://patchblox.com/security/data/cve/CVE-2026-87561.md) | Routine | Chromium CVE-2026-87561: Incorrect authorization in Web Authentication | 4.3 | 0.0026 | | | [CVE-2026-87497](https://patchblox.com/security/data/cve/CVE-2026-87497.md) | Routine | Chromium CVE-2026-87497: Uninitialized resource in Codecs | 4.3 | 0.0026 | | | [CVE-2026-87546](https://patchblox.com/security/data/cve/CVE-2026-87546.md) | Routine | Chromium CVE-2026-87546: Incorrect type conversion or cast in Safebrowsing | 4.3 | 0.0026 | | | [CVE-2026-87447](https://patchblox.com/security/data/cve/CVE-2026-87447.md) | Routine | Chromium CVE-2026-87447: Incorrect authorization in Network | 6.5 | 0.0026 | | | [CVE-2026-87495](https://patchblox.com/security/data/cve/CVE-2026-87495.md) | Routine | Chromium CVE-2026-87495: Information leak in Scroll | 4.3 | 0.0026 | | | [CVE-2026-87516](https://patchblox.com/security/data/cve/CVE-2026-87516.md) | Routine | Chromium CVE-2026-87516: Observable discrepancy in Navigation | 4.3 | 0.0026 | | | [CVE-2026-87574](https://patchblox.com/security/data/cve/CVE-2026-87574.md) | Routine | Chromium CVE-2026-87574: Information leak in ServiceWorker | 4.3 | 0.0026 | | | [CVE-2026-87592](https://patchblox.com/security/data/cve/CVE-2026-87592.md) | Routine | Chromium CVE-2026-87592: Out of bounds read in Tint | 4.3 | 0.0026 | | | [CVE-2026-87619](https://patchblox.com/security/data/cve/CVE-2026-87619.md) | Routine | Chromium CVE-2026-87619: Observable discrepancy in Prefetch | 4.3 | 0.0026 | | | [CVE-2026-87630](https://patchblox.com/security/data/cve/CVE-2026-87630.md) | Routine | Chromium CVE-2026-87630: Integer overflow in WebRTC | 4.3 | 0.0026 | | | [CVE-2026-87556](https://patchblox.com/security/data/cve/CVE-2026-87556.md) | Routine | Chromium CVE-2026-87556: Missing authorization in Browser | 4.3 | 0.0026 | | | [CVE-2026-87560](https://patchblox.com/security/data/cve/CVE-2026-87560.md) | Routine | Chromium CVE-2026-87560: Missing authorization in Browser | 4.3 | 0.0026 | | | [CVE-2026-87458](https://patchblox.com/security/data/cve/CVE-2026-87458.md) | Routine | Chromium CVE-2026-87458: UI misrepresentation in Geometry | 5.4 | 0.0026 | | | [CVE-2026-87462](https://patchblox.com/security/data/cve/CVE-2026-87462.md) | Routine | Chromium CVE-2026-87462: UI misrepresentation in FedCM | 5.4 | 0.0026 | | | [CVE-2026-87507](https://patchblox.com/security/data/cve/CVE-2026-87507.md) | Routine | Chromium CVE-2026-87507: UI misrepresentation in Downloads | 5.4 | 0.0026 | | | [CVE-2026-87583](https://patchblox.com/security/data/cve/CVE-2026-87583.md) | Routine | Chromium CVE-2026-87583: UI misrepresentation in Passwords | 5.4 | 0.0026 | | | [CVE-2026-87635](https://patchblox.com/security/data/cve/CVE-2026-87635.md) | Routine | Chromium CVE-2026-87635: UI misrepresentation in Payments | 5.4 | 0.0026 | | | [CVE-2026-87653](https://patchblox.com/security/data/cve/CVE-2026-87653.md) | Routine | Chromium CVE-2026-87653: UI misrepresentation in FullScreen | 5.4 | 0.0026 | | | [CVE-2026-93383](https://patchblox.com/security/data/cve/CVE-2026-93383.md) | Routine | Chromium CVE-2026-93383: Information leak in Permissions | 4.3 | 0.0025 | | | [CVE-2026-87577](https://patchblox.com/security/data/cve/CVE-2026-87577.md) | Routine | Chromium CVE-2026-87577: Incorrect authorization in Isolated | 4.3 | 0.0025 | | | [CVE-2026-87548](https://patchblox.com/security/data/cve/CVE-2026-87548.md) | Routine | Chromium CVE-2026-87548: Improper state validation in Installer | 4.3 | 0.0025 | | | [CVE-2026-93379](https://patchblox.com/security/data/cve/CVE-2026-93379.md) | Routine | Chromium CVE-2026-93379: Incorrect authorization in ORB | 4.3 | 0.0025 | | | [CVE-2026-87456](https://patchblox.com/security/data/cve/CVE-2026-87456.md) | Routine | Chromium CVE-2026-87456: Uninitialized resource in Media | 3.4 | 0.0025 | | | [CVE-2026-87576](https://patchblox.com/security/data/cve/CVE-2026-87576.md) | Routine | Chromium CVE-2026-87576: Uninitialized resource in GPU | 3.4 | 0.0025 | | | [CVE-2026-87647](https://patchblox.com/security/data/cve/CVE-2026-87647.md) | Routine | Chromium CVE-2026-87647: Uninitialized resource in GPU | 3.4 | 0.0025 | | | [CVE-2026-93386](https://patchblox.com/security/data/cve/CVE-2026-93386.md) | Routine | Chromium CVE-2026-93386: UI misrepresentation in WebAppInstalls | 5.4 | 0.0025 | | | [CVE-2026-87651](https://patchblox.com/security/data/cve/CVE-2026-87651.md) | Routine | Chromium CVE-2026-87651: Incorrect authorization in Paint | 4.3 | 0.0025 | | | [CVE-2026-87441](https://patchblox.com/security/data/cve/CVE-2026-87441.md) | Routine | Chromium CVE-2026-87441: Missing authorization in Downloads | 6.5 | 0.0025 | | | [CVE-2026-87655](https://patchblox.com/security/data/cve/CVE-2026-87655.md) | Routine | Chromium CVE-2026-87655: Clickjacking in Downloads | 5.4 | 0.0025 | | | [CVE-2026-93384](https://patchblox.com/security/data/cve/CVE-2026-93384.md) | Routine | chromium: Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacke... | 3.7 | 0.0025 | | | [CVE-2026-87434](https://patchblox.com/security/data/cve/CVE-2026-87434.md) | Routine | Chromium CVE-2026-87434: Missing authorization in CORS | 3.1 | 0.0024 | | | [CVE-2026-87442](https://patchblox.com/security/data/cve/CVE-2026-87442.md) | Routine | Chromium CVE-2026-87442: Confused deputy in Prerender | 3.1 | 0.0024 | | | [CVE-2026-87485](https://patchblox.com/security/data/cve/CVE-2026-87485.md) | Routine | Chromium CVE-2026-87485: Incorrect authorization in CORS | 3.1 | 0.0024 | | | [CVE-2026-87498](https://patchblox.com/security/data/cve/CVE-2026-87498.md) | Routine | Chromium CVE-2026-87498: Missing authorization in WebUI | 3.1 | 0.0024 | | | [CVE-2026-87614](https://patchblox.com/security/data/cve/CVE-2026-87614.md) | Routine | Chromium CVE-2026-87614: Incorrect authorization in ServiceWorker | 3.1 | 0.0024 | | | [CVE-2026-87652](https://patchblox.com/security/data/cve/CVE-2026-87652.md) | Routine | Chromium CVE-2026-87652: Incorrect authorization in PushAPI | 3.1 | 0.0024 | | | [CVE-2026-87543](https://patchblox.com/security/data/cve/CVE-2026-87543.md) | Routine | Chromium CVE-2026-87543: Missing authorization in Core | 4.3 | 0.0024 | | | [CVE-2026-87557](https://patchblox.com/security/data/cve/CVE-2026-87557.md) | Routine | Chromium CVE-2026-87557: Missing authorization in LocalNetworkAccess | 4.3 | 0.0024 | | | [CVE-2026-87461](https://patchblox.com/security/data/cve/CVE-2026-87461.md) | Routine | Chromium CVE-2026-87461: Information leak in Core | 4.3 | 0.0024 | | | [CVE-2026-87658](https://patchblox.com/security/data/cve/CVE-2026-87658.md) | Routine | Chromium CVE-2026-87658: Information leak in Extensions | 4.3 | 0.0024 | | | [CVE-2026-87472](https://patchblox.com/security/data/cve/CVE-2026-87472.md) | Routine | Chromium CVE-2026-87472: Improper input validation in FedCM | 4.2 | 0.0024 | | | [CVE-2026-87445](https://patchblox.com/security/data/cve/CVE-2026-87445.md) | Routine | Chromium CVE-2026-87445: UI misrepresentation in Session | 5.4 | 0.0024 | | | [CVE-2026-87484](https://patchblox.com/security/data/cve/CVE-2026-87484.md) | Routine | Chromium CVE-2026-87484: UI misrepresentation in Geometry | 5.4 | 0.0024 | | | [CVE-2026-87496](https://patchblox.com/security/data/cve/CVE-2026-87496.md) | Routine | Chromium CVE-2026-87496: UI misrepresentation in Browser | 5.4 | 0.0024 | | | [CVE-2026-87501](https://patchblox.com/security/data/cve/CVE-2026-87501.md) | Routine | Chromium CVE-2026-87501: UI misrepresentation in Passwords | 5.4 | 0.0024 | | | [CVE-2026-87599](https://patchblox.com/security/data/cve/CVE-2026-87599.md) | Routine | Chromium CVE-2026-87599: Improper input validation in Interstitials | 5.4 | 0.0024 | | | [CVE-2026-87523](https://patchblox.com/security/data/cve/CVE-2026-87523.md) | Routine | Chromium CVE-2026-87523: Race condition in DataTransfer | 5.3 | 0.0024 | | | [CVE-2026-91714](https://patchblox.com/security/data/cve/CVE-2026-91714.md) | Routine | Chromium CVE-2026-91714: Observable discrepancy | 5.3 | 0.0024 | | | [CVE-2026-91725](https://patchblox.com/security/data/cve/CVE-2026-91725.md) | Routine | Chromium CVE-2026-91725: Observable discrepancy | 5.3 | 0.0024 | | | [CVE-2026-87562](https://patchblox.com/security/data/cve/CVE-2026-87562.md) | Routine | Chromium CVE-2026-87562: Incorrect reference resolution in Accessibility | 4.3 | 0.0024 | | | [CVE-2026-87469](https://patchblox.com/security/data/cve/CVE-2026-87469.md) | Routine | Chromium CVE-2026-87469: Improper input validation in Extensions | 4.3 | 0.0023 | | | [CVE-2026-91744](https://patchblox.com/security/data/cve/CVE-2026-91744.md) | Routine | Chromium CVE-2026-91744: Race condition | 5.3 | 0.0023 | | | [CVE-2026-87511](https://patchblox.com/security/data/cve/CVE-2026-87511.md) | Routine | Chromium CVE-2026-87511: Missing authorization in DevTools | 4.3 | 0.0023 | | | [CVE-2026-87451](https://patchblox.com/security/data/cve/CVE-2026-87451.md) | Routine | Chromium CVE-2026-87451: Information leak in Downloads | 3.1 | 0.0023 | | | [CVE-2026-87521](https://patchblox.com/security/data/cve/CVE-2026-87521.md) | Routine | Chromium CVE-2026-87521: Information leak in WebMCP | 3.1 | 0.0023 | | | [CVE-2026-87531](https://patchblox.com/security/data/cve/CVE-2026-87531.md) | Routine | Chromium CVE-2026-87531: Information leak in CORS | 3.1 | 0.0023 | | | [CVE-2026-87657](https://patchblox.com/security/data/cve/CVE-2026-87657.md) | Routine | Chromium CVE-2026-87657: Use after free in V8 | 3.1 | 0.0023 | | | [CVE-2026-87539](https://patchblox.com/security/data/cve/CVE-2026-87539.md) | Routine | Chromium CVE-2026-87539: Observable discrepancy in Network | 3.1 | 0.0023 | | | [CVE-2026-87540](https://patchblox.com/security/data/cve/CVE-2026-87540.md) | Routine | Chromium CVE-2026-87540: Incorrect authorization in Isolated | 5.4 | 0.0023 | | | [CVE-2026-91746](https://patchblox.com/security/data/cve/CVE-2026-91746.md) | Routine | Chromium CVE-2026-91746: Integer overflow | 4.3 | 0.0023 | | | [CVE-2026-87645](https://patchblox.com/security/data/cve/CVE-2026-87645.md) | Routine | Chromium CVE-2026-87645: Improper state validation in Safebrowsing | 5.4 | 0.0023 | | | [CVE-2026-87649](https://patchblox.com/security/data/cve/CVE-2026-87649.md) | Routine | Chromium CVE-2026-87649: UI misrepresentation in Downloads | 5.4 | 0.0023 | | | [CVE-2026-87656](https://patchblox.com/security/data/cve/CVE-2026-87656.md) | Routine | Chromium CVE-2026-87656: Improper state validation in Safebrowsing | 5.4 | 0.0023 | | | [CVE-2026-91730](https://patchblox.com/security/data/cve/CVE-2026-91730.md) | Routine | Chromium CVE-2026-91730: Incomplete cleanup | 3.1 | 0.0023 | | | [CVE-2026-87559](https://patchblox.com/security/data/cve/CVE-2026-87559.md) | Routine | Chromium CVE-2026-87559: UI misrepresentation in UI | 4.2 | 0.0022 | | | [CVE-2026-87624](https://patchblox.com/security/data/cve/CVE-2026-87624.md) | Routine | Chromium CVE-2026-87624: UI misrepresentation in Passwords | 4.2 | 0.0022 | | | [CVE-2026-87452](https://patchblox.com/security/data/cve/CVE-2026-87452.md) | Routine | Chromium CVE-2026-87452: Incorrect authorization in GPU | 3.1 | 0.0022 | | | [CVE-2026-87611](https://patchblox.com/security/data/cve/CVE-2026-87611.md) | Routine | Chromium CVE-2026-87611: Missing authorization in FileSystem | 3.1 | 0.0022 | | | [CVE-2026-87449](https://patchblox.com/security/data/cve/CVE-2026-87449.md) | Routine | Chromium CVE-2026-87449: Cross-site request forgery in DeviceBoundSessionCredentials | 4.3 | 0.0022 | | | [CVE-2026-87575](https://patchblox.com/security/data/cve/CVE-2026-87575.md) | Routine | Chromium CVE-2026-87575: Incorrect authorization in Loader | 5.4 | 0.0022 | | | [CVE-2026-87432](https://patchblox.com/security/data/cve/CVE-2026-87432.md) | Routine | Chromium CVE-2026-87432: Incorrect authorization in Navigation | 4.2 | 0.0022 | | | [CVE-2026-87465](https://patchblox.com/security/data/cve/CVE-2026-87465.md) | Routine | Chromium CVE-2026-87465: Incorrect authorization in Downloads | 4.2 | 0.0022 | | | [CVE-2026-87502](https://patchblox.com/security/data/cve/CVE-2026-87502.md) | Routine | Chromium CVE-2026-87502: Confused deputy in Fullscreen | 4.2 | 0.0022 | | | [CVE-2026-87538](https://patchblox.com/security/data/cve/CVE-2026-87538.md) | Routine | Chromium CVE-2026-87538: Clickjacking in Input | 4.2 | 0.0022 | | | [CVE-2026-93378](https://patchblox.com/security/data/cve/CVE-2026-93378.md) | Routine | Chromium CVE-2026-93378: Missing authorization in Storage | 3.1 | 0.0022 | | | [CVE-2026-87563](https://patchblox.com/security/data/cve/CVE-2026-87563.md) | Routine | Chromium CVE-2026-87563: Origin validation error in Paint | 4.3 | 0.0021 | | | [CVE-2026-87567](https://patchblox.com/security/data/cve/CVE-2026-87567.md) | Routine | Chromium CVE-2026-87567: UI misrepresentation in UrlFormatting | 4.3 | 0.0020 | | | [CVE-2026-87568](https://patchblox.com/security/data/cve/CVE-2026-87568.md) | Routine | Chromium CVE-2026-87568: Improper input validation in Chromium | 4.3 | 0.0020 | | | [CVE-2026-93380](https://patchblox.com/security/data/cve/CVE-2026-93380.md) | Routine | Chromium CVE-2026-93380: Race condition in FileSystem | 3.1 | 0.0020 | | | [CVE-2026-91742](https://patchblox.com/security/data/cve/CVE-2026-91742.md) | Routine | Chromium CVE-2026-91742: Confused deputy | 4.8 | 0.0020 | | | [CVE-2026-87463](https://patchblox.com/security/data/cve/CVE-2026-87463.md) | Routine | Chromium CVE-2026-87463: Incorrect authorization in Certificate | 4.8 | 0.0019 | | | [CVE-2026-91739](https://patchblox.com/security/data/cve/CVE-2026-91739.md) | Routine | Chromium CVE-2026-91739: Missing authorization | 4.2 | 0.0019 | | | [CVE-2026-91713](https://patchblox.com/security/data/cve/CVE-2026-91713.md) | Routine | Chromium CVE-2026-91713: Missing authorization | 4.2 | 0.0019 | | | [CVE-2026-87517](https://patchblox.com/security/data/cve/CVE-2026-87517.md) | Routine | Chromium CVE-2026-87517: Race condition in Mobile | 3.1 | 0.0019 | | | [CVE-2026-87482](https://patchblox.com/security/data/cve/CVE-2026-87482.md) | Routine | Chromium CVE-2026-87482: Cleartext transmission of sensitive data in HttpsUpgrades | 5.9 | 0.0019 | | | [CVE-2026-87615](https://patchblox.com/security/data/cve/CVE-2026-87615.md) | Routine | Chromium CVE-2026-87615: Race condition in Payments | 5.4 | 0.0019 | | | [CVE-2026-87641](https://patchblox.com/security/data/cve/CVE-2026-87641.md) | Routine | Chromium CVE-2026-87641: Race condition in Browser | 4.2 | 0.0018 | | | [CVE-2026-87551](https://patchblox.com/security/data/cve/CVE-2026-87551.md) | Routine | Chromium CVE-2026-87551: Improper certificate validation in CORS | 4.3 | 0.0018 | | | [CVE-2026-91723](https://patchblox.com/security/data/cve/CVE-2026-91723.md) | Routine | Chromium CVE-2026-91723: Race condition | 4.2 | 0.0017 | | | [CVE-2026-87571](https://patchblox.com/security/data/cve/CVE-2026-87571.md) | Routine | Chromium CVE-2026-87571: Improper certificate validation in Loader | 5.4 | 0.0016 | | | [CVE-2026-91708](https://patchblox.com/security/data/cve/CVE-2026-91708.md) | Routine | Chromium CVE-2026-91708: Race condition | 3.1 | 0.0016 | | | [CVE-2026-87552](https://patchblox.com/security/data/cve/CVE-2026-87552.md) | Routine | Chromium CVE-2026-87552: Missing authorization in TrustedWebActivities | 5.5 | 0.0012 | | | [CVE-2026-93376](https://patchblox.com/security/data/cve/CVE-2026-93376.md) | Routine | Chromium CVE-2026-93376: Out of bounds read in DataTransfer | 6.3 | 0.0011 | | | [CVE-2026-87486](https://patchblox.com/security/data/cve/CVE-2026-87486.md) | Routine | Chromium CVE-2026-87486: Clickjacking in TrustedWebActivities | 4.0 | 0.0011 | | | [CVE-2026-87525](https://patchblox.com/security/data/cve/CVE-2026-87525.md) | Routine | Chromium CVE-2026-87525: Out of bounds read in Chromoting | 2.7 | 0.0011 | | | [CVE-2026-91717](https://patchblox.com/security/data/cve/CVE-2026-91717.md) | Routine | Chromium CVE-2026-91717: Missing authorization | 5.1 | 0.0009 | | --- Data as of 2026-11-10T20:03:11Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.