BugRater
Early access: this site has moved to bugrater.com.

Security releases

Google Chrome

Stable Channel Update for Desktop — 151.0.7922.71/.72

151.0.7922.71/.72 Jul 29, 2026 Source: Vendor

Imported by the Chrome release catcher from https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html. 370 security entries listed. Draft — review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

372 lines
All 372 CVEs 372 Additional recognition 0 Unclaimed only
Showing 201–250 of 372 · page 5 of 8
CVE-2026-17849 BR2026-0000-002018 Chrome for iOS unclaimed
Medium — Inappropriate implementation in Chrome for iOS (reported 2026-06-01)
Credited as Google
CVE-2026-17850 BR2026-0000-002019 Permissions unclaimed
Medium — Inappropriate implementation in Permissions (reported 2026-06-02)
Credited as Tech Division (@taiphung) - Mobifone Digital Payment
CVE-2026-17851 BR2026-0000-002020 Autofill unclaimed
Medium — Side-channel information leakage in Autofill (reported 2026-06-02)
Credited as Google
CVE-2026-17852 BR2026-0000-002021 Media Router unclaimed
Medium — Inappropriate implementation in Media Router (reported 2026-06-03)
Credited as Google
CVE-2026-17853 BR2026-0000-002022 DevTools unclaimed
Medium — Inappropriate implementation in DevTools (reported 2026-06-03)
Credited as Orange Tsai (@orange_8361) of DEVCORE Research Team
CVE-2026-17854 BR2026-0000-002023 WebMCP unclaimed
Medium — Insufficient policy enforcement in WebMCP (reported 2026-06-03)
Credited as Google
CVE-2026-17855 BR2026-0000-002024 DevTools unclaimed
Medium — Race in DevTools (reported 2026-06-04)
Credited as Google
CVE-2026-17856 BR2026-0000-002025 Network unclaimed
Medium — Inappropriate implementation in Network (reported 2026-06-04)
Credited as Google
CVE-2026-17857 BR2026-0000-002026 Network unclaimed
Medium — Inappropriate implementation in Network (reported 2026-06-05)
Credited as Google
CVE-2026-17858 BR2026-0000-002027 WebNN unclaimed
Medium — Uninitialized Use in WebNN (reported 2026-06-05)
Credited as Google
CVE-2026-17859 BR2026-0000-002028 Favicons unclaimed
Medium — Side-channel information leakage in Favicons (reported 2026-06-05)
Credited as Google
CVE-2026-17860 BR2026-0000-002029 Mobile unclaimed
Medium — Insufficient validation of untrusted input in Mobile (reported 2026-06-05)
Credited as Google
CVE-2026-17861 BR2026-0000-002030 Updater unclaimed
Medium — Insufficient validation of untrusted input in Updater (reported 2026-06-05)
Credited as Google
CVE-2026-17862 BR2026-0000-002031 Tracing unclaimed
Medium — Use after free in Tracing (reported 2026-06-05)
Credited as Google
CVE-2026-17863 BR2026-0000-002032 Browser unclaimed
Medium — Inappropriate implementation in Browser (reported 2026-06-05)
Credited as Google
CVE-2026-17864 BR2026-0000-002033 Updater unclaimed
Medium — Inappropriate implementation in Updater (reported 2026-06-05)
Credited as Google
CVE-2026-17865 BR2026-0000-002034 Crypto unclaimed
Medium — Inappropriate implementation in Crypto (reported 2026-06-05)
Credited as Google
CVE-2026-17866 BR2026-0000-002035 Tab unclaimed
Medium — Type Confusion in Tab (reported 2026-06-05)
Credited as Google
CVE-2026-17867 BR2026-0000-002036 Dawn unclaimed
Medium — Insufficient validation of untrusted input in Dawn (reported 2026-06-05)
Credited as Google
CVE-2026-17868 BR2026-0000-002037 USB unclaimed
Medium — Insufficient policy enforcement in USB (reported 2026-06-06)
Credited as Ariel Simon
CVE-2026-17869 BR2026-0000-002038 WebXR unclaimed
Medium — Out of bounds read in WebXR (reported 2026-06-09)
Credited as Google
CVE-2026-17870 BR2026-0000-002039 Cast unclaimed
Medium — Insufficient validation of untrusted input in Cast (reported 2026-06-09)
Credited as Google
CVE-2026-17871 BR2026-0000-002040 Passwords unclaimed
Medium — Inappropriate implementation in Passwords (reported 2026-06-09)
Credited as Google
CVE-2026-17872 BR2026-0000-002041 WebAppInstalls unclaimed
Medium — Cryptographic Flaw in WebAppInstalls (reported 2026-06-09)
Credited as Google
CVE-2026-17873 BR2026-0000-002042 Chrome for iOS unclaimed
Medium — Insufficient policy enforcement in Chrome for iOS (reported 2026-06-10)
Credited as Google
CVE-2026-17874 BR2026-0000-002043 Chrome for iOS unclaimed
Medium — Inappropriate implementation in Chrome for iOS (reported 2026-06-10)
Credited as Google
CVE-2026-17875 BR2026-0000-002044 PDFium unclaimed
Medium — Use after free in PDFium (reported 2026-06-10)
Credited as Google
CVE-2026-17876 BR2026-0000-002045 Payments unclaimed
Medium — Inappropriate implementation in Payments (reported 2026-06-10)
Credited as Google
CVE-2026-17877 BR2026-0000-002046 Chromoting unclaimed
Medium — Inappropriate implementation in Chromoting (reported 2026-06-10)
Credited as Google
CVE-2026-17878 BR2026-0000-002047 CSS unclaimed
Medium — Inappropriate implementation in CSS (reported 2026-06-11)
Credited as Google
CVE-2026-17879 BR2026-0000-002048 Autofill unclaimed
Medium — Inappropriate implementation in Autofill (reported 2026-06-11)
Credited as Google
CVE-2026-17880 BR2026-0000-002049 Autofill unclaimed
Medium — Inappropriate implementation in Autofill (reported 2026-06-12)
Credited as Google
CVE-2026-17881 BR2026-0000-002050 WebXR unclaimed
Medium — Use after free in WebXR (reported 2026-06-13)
Credited as Google
CVE-2026-17882 BR2026-0000-002051 Extensions unclaimed
Medium — Policy bypass in Extensions (reported 2026-06-13)
Credited as Google
CVE-2026-17883 BR2026-0000-002052 Headless unclaimed
Medium — Inappropriate implementation in Headless (reported 2026-06-13)
Credited as Google
CVE-2026-17884 BR2026-0000-002053 WebRTC unclaimed
Medium — Object lifecycle issue in WebRTC (reported 2026-06-13)
Credited as Google
CVE-2026-17885 BR2026-0000-002054 Paint unclaimed
Medium — Inappropriate implementation in Paint (reported 2026-06-13)
Credited as Google
CVE-2026-17886 BR2026-0000-002055 Enterprise unclaimed
Medium — Use after free in Enterprise (reported 2026-06-14)
Credited as Google
CVE-2026-17887 BR2026-0000-002056 TabStrip unclaimed
Medium — Use after free in TabStrip (reported 2026-06-14)
Credited as Google
CVE-2026-17888 BR2026-0000-002057 WebUI unclaimed
Medium — Insufficient validation of untrusted input in WebUI (reported 2026-06-14)
Credited as Google
CVE-2026-17889 BR2026-0000-002058 WebXR unclaimed
Medium — Uninitialized Use in WebXR (reported 2026-06-14)
Credited as Google
CVE-2026-17890 BR2026-0000-002059 DevTools unclaimed
Medium — Insufficient validation of untrusted input in DevTools (reported 2026-06-15)
Credited as Google
CVE-2026-17891 BR2026-0000-002060 ANGLE unclaimed
Medium — Use after free in ANGLE (reported 2026-06-16)
Credited as Google
CVE-2026-17892 BR2026-0000-002061 WebXR unclaimed
Medium — Inappropriate implementation in WebXR (reported 2026-06-17)
Credited as Google
CVE-2026-17893 BR2026-0000-002062 Updater unclaimed
Medium — Insufficient validation of untrusted input in Updater (reported 2026-06-17)
Credited as Google
CVE-2026-17894 BR2026-0000-002063 Views unclaimed
Medium — Use after free in Views (reported 2026-06-17)
Credited as Google
CVE-2026-17895 BR2026-0000-002064 DataTransfer unclaimed
Medium — Inappropriate implementation in DataTransfer (reported 2026-06-17)
Credited as hongan@calif.io
CVE-2026-17896 BR2026-0000-002065 DevTools unclaimed
Medium — Use after free in DevTools (reported 2026-06-18)
Credited as Google
CVE-2026-17897 BR2026-0000-002066 ORB unclaimed
Medium — Inappropriate implementation in ORB (reported 2026-06-25)
Credited as Sharkkcode
CVE-2026-17898 BR2026-0000-002067 DevTools unclaimed
Low — Use after free in DevTools (reported 2026-04-24)
Credited as Syn4pse