# Google Chrome Dev 159.0.8144.0 Google Chrome Dev 159.0.8144.0, released October 30, 2026, fixes 174 CVEs in Google Chrome Dev. 3 of them are being exploited (CVE-2026-5281); 3 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/windows-app/google.chrome.dev-159.0.8144.0 - Platform: Windows apps - Released: Oct 30, 2026 - Priority: Patch now (Closes CVE-2026-5281, exploited (CISA KEV)) - CVEs: 174, exploited: 3, on CISA KEV: 3 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Google Chrome Dev](https://patchblox.com/security/data/product/windows-app/google-chrome-dev.md) | | 159.0.8144.0 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-5281](https://patchblox.com/security/data/cve/CVE-2026-5281.md) | Patch now | Chromium: CVE-2026-5281 Use after free in Dawn | 8.8 | 0.1374 | CISA KEV | | [CVE-2026-3910](https://patchblox.com/security/data/cve/CVE-2026-3910.md) | Patch now | Chromium: CVE-2026-3910 Inappropriate implementation in V8 | 8.8 | 0.0268 | CISA KEV | | [CVE-2026-3909](https://patchblox.com/security/data/cve/CVE-2026-3909.md) | Patch now | Chromium: CVE-2026-3909 Out of bounds write in Skia | 9.6 | 0.0233 | CISA KEV | | [CVE-2026-3916](https://patchblox.com/security/data/cve/CVE-2026-3916.md) | Urgent | Chromium: CVE-2026-3916 Out of bounds read in Web Speech | 9.6 | 0.0040 | | | [CVE-2026-5289](https://patchblox.com/security/data/cve/CVE-2026-5289.md) | Urgent | Chromium: CVE-2026-5289 Use after free in Navigation | 9.6 | 0.0035 | | | [CVE-2026-5288](https://patchblox.com/security/data/cve/CVE-2026-5288.md) | Urgent | Google Chrome: Use after free | 9.6 | 0.0032 | | | [CVE-2026-5290](https://patchblox.com/security/data/cve/CVE-2026-5290.md) | Urgent | Chromium: CVE-2026-5290 Use after free in Compositing | 9.6 | 0.0032 | | | [CVE-2026-5874](https://patchblox.com/security/data/cve/CVE-2026-5874.md) | Urgent | Chromium: CVE-2026-5874 Use after free in PrivateAI | 9.6 | 0.0026 | | | [CVE-2026-5902](https://patchblox.com/security/data/cve/CVE-2026-5902.md) | Urgent | Chromium: CVE-2026-5902 Race in Media | 9.8 | 0.0022 | | | [CVE-2026-5858](https://patchblox.com/security/data/cve/CVE-2026-5858.md) | High | Chromium: CVE-2026-5858 Heap buffer overflow in WebML | 8.8 | 0.0062 | | | [CVE-2026-5272](https://patchblox.com/security/data/cve/CVE-2026-5272.md) | High | Chromium: CVE-2026-5272 Heap buffer overflow in GPU | 8.8 | 0.0056 | | | [CVE-2026-6296](https://patchblox.com/security/data/cve/CVE-2026-6296.md) | High | Chromium: CVE-2026-6296 Heap buffer overflow in ANGLE | 9.6 | 0.0056 | | | [CVE-2026-5865](https://patchblox.com/security/data/cve/CVE-2026-5865.md) | High | Chromium: CVE-2026-5865 Type Confusion in V8 | 8.8 | 0.0052 | | | [CVE-2026-4673](https://patchblox.com/security/data/cve/CVE-2026-4673.md) | High | Chromium: CVE-2026-4673 Heap buffer overflow in WebAudio | 8.8 | 0.0051 | | | [CVE-2026-5287](https://patchblox.com/security/data/cve/CVE-2026-5287.md) | High | Chromium: CVE-2026-5287 Use after free in PDF | 8.8 | 0.0051 | | | [CVE-2026-5860](https://patchblox.com/security/data/cve/CVE-2026-5860.md) | High | Chromium: CVE-2026-5860 Use after free in WebRTC | 8.8 | 0.0050 | | | [CVE-2026-6298](https://patchblox.com/security/data/cve/CVE-2026-6298.md) | High | Chromium: CVE-2026-6298 Heap buffer overflow in Skia | 9.6 | 0.0047 | | | [CVE-2026-4674](https://patchblox.com/security/data/cve/CVE-2026-4674.md) | High | Chromium: CVE-2026-4674 Out of bounds read in CSS | 8.8 | 0.0046 | | | [CVE-2026-3913](https://patchblox.com/security/data/cve/CVE-2026-3913.md) | High | Chromium: CVE-2026-3913 Heap buffer overflow in WebML | 8.8 | 0.0046 | | | [CVE-2026-4677](https://patchblox.com/security/data/cve/CVE-2026-4677.md) | High | Chromium: CVE-2026-4677 Out of bounds read in WebAudio | 8.8 | 0.0046 | | | [CVE-2026-5275](https://patchblox.com/security/data/cve/CVE-2026-5275.md) | High | Chromium: CVE-2026-5275 Heap buffer overflow in ANGLE | 9.6 | 0.0045 | | | [CVE-2026-3915](https://patchblox.com/security/data/cve/CVE-2026-3915.md) | High | Chromium: CVE-2026-3915 Heap buffer overflow in WebML | 8.8 | 0.0044 | | | [CVE-2026-5279](https://patchblox.com/security/data/cve/CVE-2026-5279.md) | High | Chromium: CVE-2026-5279 Object corruption in V8 | 8.8 | 0.0044 | | | [CVE-2026-4443](https://patchblox.com/security/data/cve/CVE-2026-4443.md) | High | Chromium: CVE-2026-4443 Heap buffer overflow in WebAudio | 8.8 | 0.0043 | | | [CVE-2026-5274](https://patchblox.com/security/data/cve/CVE-2026-5274.md) | High | Chromium: CVE-2026-5274 Integer overflow in Codecs | 8.8 | 0.0043 | | | [CVE-2026-4680](https://patchblox.com/security/data/cve/CVE-2026-4680.md) | High | Chromium: CVE-2026-4680 Use after free in FedCM | 8.8 | 0.0043 | | | [CVE-2026-5278](https://patchblox.com/security/data/cve/CVE-2026-5278.md) | High | Google Chrome: Use after free | 8.8 | 0.0041 | | | [CVE-2026-4678](https://patchblox.com/security/data/cve/CVE-2026-4678.md) | High | Chromium: CVE-2026-4678 Use after free in WebGPU | 8.8 | 0.0040 | | | [CVE-2026-3914](https://patchblox.com/security/data/cve/CVE-2026-3914.md) | High | Chromium: CVE-2026-3914 Integer overflow in WebML | 8.8 | 0.0040 | | | [CVE-2026-3917](https://patchblox.com/security/data/cve/CVE-2026-3917.md) | High | Chromium: CVE-2026-3917 Use after free in Agents | 8.8 | 0.0040 | | | [CVE-2026-5285](https://patchblox.com/security/data/cve/CVE-2026-5285.md) | High | Chromium: CVE-2026-5285 Use after free in WebGL | 8.8 | 0.0040 | | | [CVE-2026-5873](https://patchblox.com/security/data/cve/CVE-2026-5873.md) | High | Chromium: CVE-2026-5873 Out of bounds read and write in V8 | 8.8 | 0.0039 | | | [CVE-2026-4675](https://patchblox.com/security/data/cve/CVE-2026-4675.md) | High | Chromium: CVE-2026-4675 Heap buffer overflow in WebGL | 8.8 | 0.0039 | | | [CVE-2026-5280](https://patchblox.com/security/data/cve/CVE-2026-5280.md) | High | Chromium: CVE-2026-5280 Use after free in WebCodecs | 8.8 | 0.0039 | | | [CVE-2026-5286](https://patchblox.com/security/data/cve/CVE-2026-5286.md) | High | Chromium: CVE-2026-5286 Use after free in Dawn | 8.8 | 0.0039 | | | [CVE-2026-3918](https://patchblox.com/security/data/cve/CVE-2026-3918.md) | High | Chromium: CVE-2026-3918 Use after free in WebMCP | 8.8 | 0.0038 | | | [CVE-2026-6301](https://patchblox.com/security/data/cve/CVE-2026-6301.md) | High | Chromium: CVE-2026-6301 Type Confusion in Turbofan | 8.8 | 0.0037 | | | [CVE-2026-6303](https://patchblox.com/security/data/cve/CVE-2026-6303.md) | High | Chromium: CVE-2026-6303 Use after free in Codecs | 8.8 | 0.0037 | | | [CVE-2026-4447](https://patchblox.com/security/data/cve/CVE-2026-4447.md) | High | Chromium: CVE-2026-4447 Inappropriate implementation in V8 | 8.8 | 0.0037 | | | [CVE-2026-4457](https://patchblox.com/security/data/cve/CVE-2026-4457.md) | High | Chromium: CVE-2026-4457 Type Confusion in V8 | 8.8 | 0.0037 | | | [CVE-2026-4676](https://patchblox.com/security/data/cve/CVE-2026-4676.md) | High | Chromium: CVE-2026-4676 Use after free in Dawn | 8.8 | 0.0037 | | | [CVE-2026-6307](https://patchblox.com/security/data/cve/CVE-2026-6307.md) | High | Chromium: CVE-2026-6307 Type Confusion in Turbofan | 8.8 | 0.0037 | | | [CVE-2026-3921](https://patchblox.com/security/data/cve/CVE-2026-3921.md) | High | Chromium: CVE-2026-3921 Use after free in TextEncoding | 8.8 | 0.0036 | | | [CVE-2026-5859](https://patchblox.com/security/data/cve/CVE-2026-5859.md) | High | Chromium: CVE-2026-5859 Integer overflow in WebML | 8.8 | 0.0036 | | | [CVE-2026-4439](https://patchblox.com/security/data/cve/CVE-2026-4439.md) | High | Google Chrome: Out-of-bounds Read | 8.8 | 0.0035 | | | [CVE-2026-5868](https://patchblox.com/security/data/cve/CVE-2026-5868.md) | High | Chromium: CVE-2026-5868 Heap buffer overflow in ANGLE | 9.6 | 0.0035 | | | [CVE-2026-5284](https://patchblox.com/security/data/cve/CVE-2026-5284.md) | High | Chromium: CVE-2026-5284 Use after free in Dawn | 7.5 | 0.0035 | | | [CVE-2026-4679](https://patchblox.com/security/data/cve/CVE-2026-4679.md) | High | Chromium: CVE-2026-4679 Integer overflow in Fonts | 8.8 | 0.0035 | | | [CVE-2026-5871](https://patchblox.com/security/data/cve/CVE-2026-5871.md) | High | Chromium: CVE-2026-5871 Type Confusion in V8 | 8.8 | 0.0034 | | | [CVE-2026-6299](https://patchblox.com/security/data/cve/CVE-2026-6299.md) | High | Chromium: CVE-2026-6299 Use after free in Prerender | 8.8 | 0.0034 | | | [CVE-2026-6300](https://patchblox.com/security/data/cve/CVE-2026-6300.md) | High | Chromium: CVE-2026-6300 Use after free in CSS | 8.8 | 0.0034 | | | [CVE-2026-6316](https://patchblox.com/security/data/cve/CVE-2026-6316.md) | High | Chromium: CVE-2026-6316 Use after free in Forms | 8.8 | 0.0034 | | | [CVE-2026-6317](https://patchblox.com/security/data/cve/CVE-2026-6317.md) | High | Chromium: CVE-2026-6317 Use after free in Cast | 8.8 | 0.0034 | | | [CVE-2026-3920](https://patchblox.com/security/data/cve/CVE-2026-3920.md) | High | Chromium: CVE-2026-3920 Out of bounds memory access in WebML | 8.8 | 0.0034 | | | [CVE-2026-4440](https://patchblox.com/security/data/cve/CVE-2026-4440.md) | High | Chromium: CVE-2026-4440 Out of bounds read and write in WebGL | 8.8 | 0.0034 | | | [CVE-2026-6305](https://patchblox.com/security/data/cve/CVE-2026-6305.md) | High | Chromium: CVE-2026-6305 Heap buffer overflow in PDFium | 8.8 | 0.0034 | | | [CVE-2026-6306](https://patchblox.com/security/data/cve/CVE-2026-6306.md) | High | Chromium: CVE-2026-6306 Heap buffer overflow in PDFium | 8.8 | 0.0034 | | | [CVE-2026-5277](https://patchblox.com/security/data/cve/CVE-2026-5277.md) | High | Chromium: CVE-2026-5277 Integer overflow in ANGLE | 9.6 | 0.0033 | | | [CVE-2026-4461](https://patchblox.com/security/data/cve/CVE-2026-4461.md) | High | Chromium: CVE-2026-4461 Inappropriate implementation in V8 | 8.8 | 0.0033 | | | [CVE-2026-6302](https://patchblox.com/security/data/cve/CVE-2026-6302.md) | High | Chromium: CVE-2026-6302 Use after free in Video | 8.8 | 0.0033 | | | [CVE-2026-6318](https://patchblox.com/security/data/cve/CVE-2026-6318.md) | High | Chromium: CVE-2026-6318 Use after free in Codecs | 8.8 | 0.0033 | | | [CVE-2026-5870](https://patchblox.com/security/data/cve/CVE-2026-5870.md) | High | Chromium: CVE-2026-5870 Integer overflow in Skia | 9.6 | 0.0033 | | | [CVE-2026-4441](https://patchblox.com/security/data/cve/CVE-2026-4441.md) | High | Chromium: CVE-2026-4441 Use after free in Base | 8.8 | 0.0033 | | | [CVE-2026-5292](https://patchblox.com/security/data/cve/CVE-2026-5292.md) | High | Chromium: CVE-2026-5292 Out of bounds read in WebCodecs | 8.8 | 0.0032 | | | [CVE-2026-3931](https://patchblox.com/security/data/cve/CVE-2026-3931.md) | High | Chromium: CVE-2026-3931 Heap buffer overflow in Skia | 9.6 | 0.0032 | | | [CVE-2026-5879](https://patchblox.com/security/data/cve/CVE-2026-5879.md) | High | Chromium: CVE-2026-5879 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-5861](https://patchblox.com/security/data/cve/CVE-2026-5861.md) | High | Chromium: CVE-2026-5861 Use after free in V8 | 8.8 | 0.0032 | | | [CVE-2026-5862](https://patchblox.com/security/data/cve/CVE-2026-5862.md) | High | Chromium: CVE-2026-5862 Inappropriate implementation in V8 | 8.8 | 0.0032 | | | [CVE-2026-5866](https://patchblox.com/security/data/cve/CVE-2026-5866.md) | High | Chromium: CVE-2026-5866 Use after free in Media | 8.8 | 0.0032 | | | [CVE-2026-5872](https://patchblox.com/security/data/cve/CVE-2026-5872.md) | High | Chromium: CVE-2026-5872 Use after free in Blink | 8.8 | 0.0032 | | | [CVE-2026-5877](https://patchblox.com/security/data/cve/CVE-2026-5877.md) | High | Chromium: CVE-2026-5877 Use after free in Navigation | 8.8 | 0.0032 | | | [CVE-2026-3922](https://patchblox.com/security/data/cve/CVE-2026-3922.md) | High | Chromium: CVE-2026-3922 Use after free in MediaStream | 8.8 | 0.0031 | | | [CVE-2026-3923](https://patchblox.com/security/data/cve/CVE-2026-3923.md) | High | Chromium: CVE-2026-3923 Use after free in WebMIDI | 8.8 | 0.0031 | | | [CVE-2026-3936](https://patchblox.com/security/data/cve/CVE-2026-3936.md) | High | Chromium: CVE-2026-3936 Use after free in WebView | 8.8 | 0.0031 | | | [CVE-2026-4463](https://patchblox.com/security/data/cve/CVE-2026-4463.md) | High | Chromium: CVE-2026-4463 Heap buffer overflow in WebRTC | 8.8 | 0.0031 | | | [CVE-2026-6361](https://patchblox.com/security/data/cve/CVE-2026-6361.md) | High | Chromium: CVE-2026-6361 Heap buffer overflow in PDFium | 8.3 | 0.0031 | | | [CVE-2026-3924](https://patchblox.com/security/data/cve/CVE-2026-3924.md) | High | Chromium: CVE-2026-3924 Use after free in WindowDialog | 7.5 | 0.0031 | | | [CVE-2026-5863](https://patchblox.com/security/data/cve/CVE-2026-5863.md) | High | Chromium: CVE-2026-5863 Inappropriate implementation in V8 | 8.8 | 0.0030 | | | [CVE-2026-3919](https://patchblox.com/security/data/cve/CVE-2026-3919.md) | High | Chromium: CVE-2026-3919 Use after free in Extensions | 8.8 | 0.0030 | | | [CVE-2026-4444](https://patchblox.com/security/data/cve/CVE-2026-4444.md) | High | Chromium: CVE-2026-4444 Stack buffer overflow in WebRTC | 8.8 | 0.0030 | | | [CVE-2026-5883](https://patchblox.com/security/data/cve/CVE-2026-5883.md) | High | Chromium: CVE-2026-5883 Use after free in Media | 8.8 | 0.0030 | | | [CVE-2026-5884](https://patchblox.com/security/data/cve/CVE-2026-5884.md) | High | Chromium: CVE-2026-5884 Insufficient validation of untrusted input in Media | 8.8 | 0.0030 | | | [CVE-2026-4448](https://patchblox.com/security/data/cve/CVE-2026-4448.md) | High | Chromium: CVE-2026-4448 Heap buffer overflow in ANGLE | 9.6 | 0.0030 | | | [CVE-2026-6308](https://patchblox.com/security/data/cve/CVE-2026-6308.md) | High | Chromium: CVE-2026-6308 Out of bounds read in Media | 7.5 | 0.0029 | | | [CVE-2026-4446](https://patchblox.com/security/data/cve/CVE-2026-4446.md) | High | Chromium: CVE-2026-4446 Use after free in WebRTC | 8.8 | 0.0029 | | | [CVE-2026-4450](https://patchblox.com/security/data/cve/CVE-2026-4450.md) | High | Chromium: CVE-2026-4450 Out of bounds write in V8 | 8.8 | 0.0029 | | | [CVE-2026-4459](https://patchblox.com/security/data/cve/CVE-2026-4459.md) | High | Chromium: CVE-2026-4459 Out of bounds read and write in WebAudio | 8.8 | 0.0029 | | | [CVE-2026-6363](https://patchblox.com/security/data/cve/CVE-2026-6363.md) | High | Chromium: CVE-2026-6363 Type Confusion in V8 | 8.8 | 0.0029 | | | [CVE-2026-4442](https://patchblox.com/security/data/cve/CVE-2026-4442.md) | High | Chromium: CVE-2026-4442 Heap buffer overflow in CSS | 8.8 | 0.0028 | | | [CVE-2026-4460](https://patchblox.com/security/data/cve/CVE-2026-4460.md) | High | Chromium: CVE-2026-4460 Out of bounds read in Skia | 9.6 | 0.0028 | | | [CVE-2026-4464](https://patchblox.com/security/data/cve/CVE-2026-4464.md) | High | Chromium: CVE-2026-4464 Integer overflow in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-6311](https://patchblox.com/security/data/cve/CVE-2026-6311.md) | High | Chromium: CVE-2026-6311 Uninitialized Use in Accessibility | 8.3 | 0.0027 | | | [CVE-2026-6314](https://patchblox.com/security/data/cve/CVE-2026-6314.md) | High | Chromium: CVE-2026-6314 Out of bounds write in GPU | 8.3 | 0.0027 | | | [CVE-2026-6359](https://patchblox.com/security/data/cve/CVE-2026-6359.md) | High | Chromium: CVE-2026-6359 Use after free in Video | 8.8 | 0.0027 | | | [CVE-2026-5283](https://patchblox.com/security/data/cve/CVE-2026-5283.md) | High | Chromium: CVE-2026-5283 Inappropriate implementation in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-4452](https://patchblox.com/security/data/cve/CVE-2026-4452.md) | High | Chromium: CVE-2026-4452 Integer overflow in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-4445](https://patchblox.com/security/data/cve/CVE-2026-4445.md) | High | Chromium: CVE-2026-4445 Use after free in WebRTC | 8.8 | 0.0026 | | | [CVE-2026-4449](https://patchblox.com/security/data/cve/CVE-2026-4449.md) | High | Chromium: CVE-2026-4449 Use after free in Blink | 8.8 | 0.0026 | | | [CVE-2026-4451](https://patchblox.com/security/data/cve/CVE-2026-4451.md) | High | Chromium: CVE-2026-4451 Insufficient validation of untrusted input in Navigation | 8.8 | 0.0026 | | | [CVE-2026-4454](https://patchblox.com/security/data/cve/CVE-2026-4454.md) | High | Chromium: CVE-2026-4454 Use after free in Network | 8.8 | 0.0026 | | | [CVE-2026-4456](https://patchblox.com/security/data/cve/CVE-2026-4456.md) | High | Chromium: CVE-2026-4456 Use after free in Digital Credentials API | 8.8 | 0.0026 | | | [CVE-2026-4462](https://patchblox.com/security/data/cve/CVE-2026-4462.md) | High | Chromium: CVE-2026-4462 Out of bounds read in Blink | 8.8 | 0.0026 | | | [CVE-2026-3926](https://patchblox.com/security/data/cve/CVE-2026-3926.md) | High | Chromium: CVE-2026-3926 Out of bounds read in V8 | 8.8 | 0.0026 | | | [CVE-2026-4455](https://patchblox.com/security/data/cve/CVE-2026-4455.md) | High | Chromium: CVE-2026-4455 Heap buffer overflow in PDFium | 8.8 | 0.0026 | | | [CVE-2026-6360](https://patchblox.com/security/data/cve/CVE-2026-6360.md) | High | Chromium: CVE-2026-6360 Use after free in FileSystem | 8.8 | 0.0025 | | | [CVE-2026-6304](https://patchblox.com/security/data/cve/CVE-2026-6304.md) | High | Chromium: CVE-2026-6304 Use after free in Graphite | 8.3 | 0.0025 | | | [CVE-2026-6309](https://patchblox.com/security/data/cve/CVE-2026-6309.md) | High | Chromium: CVE-2026-6309 Use after free in Viz | 8.3 | 0.0025 | | | [CVE-2026-6310](https://patchblox.com/security/data/cve/CVE-2026-6310.md) | High | Chromium: CVE-2026-6310 Use after free in Dawn | 8.3 | 0.0025 | | | [CVE-2026-6364](https://patchblox.com/security/data/cve/CVE-2026-6364.md) | High | Chromium: CVE-2026-6364 Out of bounds read in Skia | 9.6 | 0.0025 | | | [CVE-2026-5282](https://patchblox.com/security/data/cve/CVE-2026-5282.md) | High | Google Chrome: Out of bounds read | 8.1 | 0.0025 | | | [CVE-2026-5912](https://patchblox.com/security/data/cve/CVE-2026-5912.md) | High | Chromium: CVE-2026-5912 Integer overflow in WebRTC | 8.8 | 0.0022 | | | [CVE-2026-5913](https://patchblox.com/security/data/cve/CVE-2026-5913.md) | High | Chromium: CVE-2026-5913 Out of bounds read in Blink | 8.1 | 0.0021 | | | [CVE-2026-3932](https://patchblox.com/security/data/cve/CVE-2026-3932.md) | High | Chromium: CVE-2026-3932 Insufficient policy enforcement in PDF | 7.5 | 0.0021 | | | [CVE-2026-5908](https://patchblox.com/security/data/cve/CVE-2026-5908.md) | High | Chromium: CVE-2026-5908 Integer overflow in Media | 8.8 | 0.0020 | | | [CVE-2026-5909](https://patchblox.com/security/data/cve/CVE-2026-5909.md) | High | Chromium: CVE-2026-5909 Integer overflow in Media | 8.8 | 0.0020 | | | [CVE-2026-5910](https://patchblox.com/security/data/cve/CVE-2026-5910.md) | High | Chromium: CVE-2026-5910 Integer overflow in Media | 8.8 | 0.0020 | | | [CVE-2026-6297](https://patchblox.com/security/data/cve/CVE-2026-6297.md) | High | Chromium: CVE-2026-6297 Use after free in Proxy | 8.3 | 0.0020 | | | [CVE-2026-4458](https://patchblox.com/security/data/cve/CVE-2026-4458.md) | High | Chromium: CVE-2026-4458 Use after free in Extensions | 8.8 | 0.0020 | | | [CVE-2026-5915](https://patchblox.com/security/data/cve/CVE-2026-5915.md) | High | Chromium: CVE-2026-5915 Insufficient validation of untrusted input in WebML | 8.1 | 0.0020 | | | [CVE-2026-5907](https://patchblox.com/security/data/cve/CVE-2026-5907.md) | High | Chromium: CVE-2026-5907 Insufficient data validation in Media | 8.1 | 0.0020 | | | [CVE-2026-5914](https://patchblox.com/security/data/cve/CVE-2026-5914.md) | High | Chromium: CVE-2026-5914 Type Confusion in CSS | 8.8 | 0.0017 | | | [CVE-2026-5904](https://patchblox.com/security/data/cve/CVE-2026-5904.md) | High | Chromium: CVE-2026-5904 Use after free in V8 | 8.8 | n/a | | | [CVE-2026-5273](https://patchblox.com/security/data/cve/CVE-2026-5273.md) | Routine | Chromium: CVE-2026-5273 Use after free in CSS | 6.3 | 0.0036 | | | [CVE-2026-5867](https://patchblox.com/security/data/cve/CVE-2026-5867.md) | Routine | Chromium: CVE-2026-5867 Heap buffer overflow in WebML | 4.3 | 0.0030 | | | [CVE-2026-5903](https://patchblox.com/security/data/cve/CVE-2026-5903.md) | Routine | Chromium: CVE-2026-5903 Policy bypass in IFrameSandbox | 6.5 | 0.0027 | | | [CVE-2026-5888](https://patchblox.com/security/data/cve/CVE-2026-5888.md) | Routine | Chromium: CVE-2026-5888 Uninitialized Use in WebCodecs | 6.5 | 0.0027 | | | [CVE-2026-5876](https://patchblox.com/security/data/cve/CVE-2026-5876.md) | Routine | Chromium: CVE-2026-5876 Side-channel information leakage in Navigation | 6.5 | 0.0026 | | | [CVE-2026-5864](https://patchblox.com/security/data/cve/CVE-2026-5864.md) | Routine | Chromium: CVE-2026-5864 Heap buffer overflow in WebAudio | 4.3 | 0.0025 | | | [CVE-2026-5869](https://patchblox.com/security/data/cve/CVE-2026-5869.md) | Routine | Chromium: CVE-2026-5869 Heap buffer overflow in WebML | 4.3 | 0.0025 | | | [CVE-2026-5276](https://patchblox.com/security/data/cve/CVE-2026-5276.md) | Routine | Chromium: CVE-2026-5276 Insufficient policy enforcement in WebUSB | 6.5 | 0.0025 | | | [CVE-2026-5291](https://patchblox.com/security/data/cve/CVE-2026-5291.md) | Routine | Chromium: CVE-2026-5291 Inappropriate implementation in WebGL | 6.5 | 0.0025 | | | [CVE-2026-5885](https://patchblox.com/security/data/cve/CVE-2026-5885.md) | Routine | Chromium: CVE-2026-5885 Insufficient validation of untrusted input in WebML | 6.5 | 0.0025 | | | [CVE-2026-5886](https://patchblox.com/security/data/cve/CVE-2026-5886.md) | Routine | Chromium: CVE-2026-5886 Out of bounds read in WebAudio | 5.3 | 0.0023 | | | [CVE-2026-5881](https://patchblox.com/security/data/cve/CVE-2026-5881.md) | Routine | Chromium: CVE-2026-5881 Policy bypass in LocalNetworkAccess | 6.5 | 0.0023 | | | [CVE-2026-6312](https://patchblox.com/security/data/cve/CVE-2026-6312.md) | Routine | Chromium: CVE-2026-6312 Insufficient policy enforcement in Passwords | 3.1 | 0.0022 | | | [CVE-2026-6362](https://patchblox.com/security/data/cve/CVE-2026-6362.md) | Routine | Chromium: CVE-2026-6362 Use after free in Codecs | 4.3 | 0.0022 | | | [CVE-2026-6313](https://patchblox.com/security/data/cve/CVE-2026-6313.md) | Routine | Chromium: CVE-2026-6313 Insufficient policy enforcement in CORS | 3.1 | 0.0022 | | | [CVE-2026-5891](https://patchblox.com/security/data/cve/CVE-2026-5891.md) | Routine | Chromium: CVE-2026-5891 Insufficient policy enforcement in browser UI | 4.3 | 0.0021 | | | [CVE-2026-3937](https://patchblox.com/security/data/cve/CVE-2026-3937.md) | Routine | Chromium: CVE-2026-3937 Incorrect security UI in Downloads | 6.5 | 0.0021 | | | [CVE-2026-3934](https://patchblox.com/security/data/cve/CVE-2026-3934.md) | Routine | Chromium: CVE-2026-3934 Insufficient policy enforcement in ChromeDriver | 6.5 | 0.0021 | | | [CVE-2026-3927](https://patchblox.com/security/data/cve/CVE-2026-3927.md) | Routine | Chromium: CVE-2026-3927 Incorrect security UI in PictureInPicture | 4.3 | 0.0020 | | | [CVE-2026-3942](https://patchblox.com/security/data/cve/CVE-2026-3942.md) | Routine | Chromium: CVE-2026-3942 Incorrect security UI in PictureInPicture | 4.3 | 0.0020 | | | [CVE-2026-5919](https://patchblox.com/security/data/cve/CVE-2026-5919.md) | Routine | Chromium: CVE-2026-5919 Insufficient validation of untrusted input in WebSockets | 6.5 | 0.0020 | | | [CVE-2026-5878](https://patchblox.com/security/data/cve/CVE-2026-5878.md) | Routine | Chromium: CVE-2026-5878 Incorrect security UI in Blink | 4.3 | 0.0020 | | | [CVE-2026-5880](https://patchblox.com/security/data/cve/CVE-2026-5880.md) | Routine | Chromium: CVE-2026-5880 Incorrect security UI in browser UI | 4.3 | 0.0020 | | | [CVE-2026-5882](https://patchblox.com/security/data/cve/CVE-2026-5882.md) | Routine | Chromium: CVE-2026-5882 Incorrect security UI in Fullscreen | 4.3 | 0.0020 | | | [CVE-2026-3938](https://patchblox.com/security/data/cve/CVE-2026-3938.md) | Routine | Chromium: CVE-2026-3938 Insufficient policy enforcement in Clipboard | 4.3 | 0.0020 | | | [CVE-2026-5875](https://patchblox.com/security/data/cve/CVE-2026-5875.md) | Routine | Chromium: CVE-2026-5875 Policy bypass in Blink | 4.3 | 0.0020 | | | [CVE-2026-5887](https://patchblox.com/security/data/cve/CVE-2026-5887.md) | Routine | Chromium: CVE-2026-5887 Insufficient validation of untrusted input in Downloads | 4.3 | 0.0020 | | | [CVE-2026-5905](https://patchblox.com/security/data/cve/CVE-2026-5905.md) | Routine | Chromium: CVE-2026-5905 Incorrect security UI in Permissions | 6.5 | 0.0019 | | | [CVE-2026-3941](https://patchblox.com/security/data/cve/CVE-2026-3941.md) | Routine | Chromium: CVE-2026-3941 Insufficient policy enforcement in DevTools | 4.3 | 0.0019 | | | [CVE-2026-3929](https://patchblox.com/security/data/cve/CVE-2026-3929.md) | Routine | Chromium: CVE-2026-3929 Side-channel information leakage in ResourceTiming | 3.1 | 0.0019 | | | [CVE-2026-5890](https://patchblox.com/security/data/cve/CVE-2026-5890.md) | Routine | Chromium: CVE-2026-5890 Race in WebCodecs | 5.3 | 0.0019 | | | [CVE-2026-3935](https://patchblox.com/security/data/cve/CVE-2026-3935.md) | Routine | Chromium: CVE-2026-3935 Incorrect security UI in WebAppInstalls | 6.5 | 0.0019 | | | [CVE-2026-3930](https://patchblox.com/security/data/cve/CVE-2026-3930.md) | Routine | Chromium: CVE-2026-3930 Unsafe navigation in Navigation | 5.3 | 0.0018 | | | [CVE-2026-3940](https://patchblox.com/security/data/cve/CVE-2026-3940.md) | Routine | Chromium: CVE-2026-3940 Insufficient policy enforcement in DevTools | 5.3 | 0.0018 | | | [CVE-2026-4453](https://patchblox.com/security/data/cve/CVE-2026-4453.md) | Routine | Chromium: CVE-2026-4453 Integer overflow in Dawn | 4.3 | 0.0018 | | | [CVE-2026-5892](https://patchblox.com/security/data/cve/CVE-2026-5892.md) | Routine | Chromium: CVE-2026-5892 Insufficient policy enforcement in PWAs | 6.6 | 0.0018 | | | [CVE-2026-5898](https://patchblox.com/security/data/cve/CVE-2026-5898.md) | Routine | Chromium: CVE-2026-5898 Incorrect security UI in Omnibox | 4.3 | 0.0018 | | | [CVE-2026-3925](https://patchblox.com/security/data/cve/CVE-2026-3925.md) | Routine | Chromium: CVE-2026-3925 Incorrect security UI in LookalikeChecks | 4.3 | 0.0017 | | | [CVE-2026-5911](https://patchblox.com/security/data/cve/CVE-2026-5911.md) | Routine | Chromium: CVE-2026-5911 Policy bypass in ServiceWorkers | 4.3 | 0.0017 | | | [CVE-2026-3939](https://patchblox.com/security/data/cve/CVE-2026-3939.md) | Routine | Chromium: CVE-2026-3939 Use after free in WebView | 5.3 | 0.0017 | | | [CVE-2026-5906](https://patchblox.com/security/data/cve/CVE-2026-5906.md) | Routine | Chromium: CVE-2026-5906 Incorrect security UI in Omnibox | 4.3 | 0.0017 | | | [CVE-2026-5894](https://patchblox.com/security/data/cve/CVE-2026-5894.md) | Routine | Chromium: CVE-2026-5894 Inappropriate implementation in PDF | 4.3 | 0.0017 | | | [CVE-2026-5900](https://patchblox.com/security/data/cve/CVE-2026-5900.md) | Routine | Chromium: CVE-2026-5900 Policy bypass in Downloads | 4.3 | 0.0017 | | | [CVE-2026-5895](https://patchblox.com/security/data/cve/CVE-2026-5895.md) | Routine | Chromium: CVE-2026-5895 Incorrect security UI in Omnibox | 5.4 | 0.0016 | | | [CVE-2026-5918](https://patchblox.com/security/data/cve/CVE-2026-5918.md) | Routine | Chromium: CVE-2026-5918 Inappropriate implementation in Navigation | 4.3 | 0.0016 | | | [CVE-2026-5896](https://patchblox.com/security/data/cve/CVE-2026-5896.md) | Routine | Chromium: CVE-2026-5896 Policy bypass in Audio | 6.1 | 0.0016 | | | [CVE-2026-5897](https://patchblox.com/security/data/cve/CVE-2026-5897.md) | Routine | Chromium: CVE-2026-5897 Incorrect security UI in Downloads | 4.3 | 0.0016 | | | [CVE-2026-5893](https://patchblox.com/security/data/cve/CVE-2026-5893.md) | Routine | Chromium: CVE-2026-5893 Race in V8 | 6.8 | 0.0016 | | | [CVE-2026-5901](https://patchblox.com/security/data/cve/CVE-2026-5901.md) | Routine | Chromium: CVE-2026-5901 Policy bypass in DevTools | 6.5 | 0.0014 | | | [CVE-2026-3928](https://patchblox.com/security/data/cve/CVE-2026-3928.md) | Routine | Chromium: CVE-2026-3928 Insufficient policy enforcement in Extensions | 4.3 | 0.0014 | | | [CVE-2026-5899](https://patchblox.com/security/data/cve/CVE-2026-5899.md) | Routine | Chromium: CVE-2026-5899 Incorrect security UI in History Navigation | 6.1 | 0.0014 | | | [CVE-2026-5889](https://patchblox.com/security/data/cve/CVE-2026-5889.md) | Routine | Chromium: CVE-2026-5889 Cryptographic Flaw in PDFium | 4.3 | 0.0011 | | --- Data as of 2026-11-09T13:31:49Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.