VuXML: chromium -- security fixes

VuXML ID	20683bca-e344-4348-a033-db862123615d
Discovery	2026-07-29
Entry	2026-07-30

Chrome Releases reports:

This update includes 370 security fixes:

[514442821] Critical CVE-2026-17650: Use after free in Compositing.

[517307966] Critical CVE-2026-17651: Insufficient validation of untrusted input in Dawn.

[519262990] Critical CVE-2026-17652: Use after free in Views.

[520514458] Critical CVE-2026-17653: Use after free in Skia.

[522314940] Critical CVE-2026-17654: Race in Updater.

[522556145] Critical CVE-2026-17655: Insufficient validation of untrusted input in ANGLE.

[523725277] Critical CVE-2026-17656: Use after free in Ozone.

[502293787] High CVE-2026-17657: Use after free in Navigation.

[523030583] High CVE-2026-17658: Use after free in V8.

[495463654] High CVE-2026-17659: Inappropriate implementation in SiteIsolation.

[497428001] High CVE-2026-17660: Insufficient validation of untrusted input in Network.

[497451790] High CVE-2026-17661: Use after free in Loader.

[497491557] High CVE-2026-17662: Insufficient policy enforcement in Prefetch.

[500225310] High CVE-2026-17663: Insufficient validation of untrusted input in GPU.

[500554346] High CVE-2026-17664: Insufficient validation of untrusted input in Loader.

[511277457] High CVE-2026-17665: Use after free in V8.

[511761758] High CVE-2026-17666: Cryptographic Flaw in Enterprise.

[513043537] High CVE-2026-17667: Uninitialized Use in ANGLE.

[513134019] High CVE-2026-17668: Uninitialized Use in ANGLE.

[513142464] High CVE-2026-17669: Inappropriate implementation in Chrome for iOS.

[513228974] High CVE-2026-17670: Use after free in Views.

[513257423] High CVE-2026-17671: Insufficient validation of untrusted input in ANGLE.

[513375270] High CVE-2026-17672: Insufficient validation of untrusted input in Chromecast.

[513735177] High CVE-2026-17673: Integer overflow in QUIC.

[513791232] High CVE-2026-17674: Inappropriate implementation in HTML.

[513920258] High CVE-2026-17675: Out of bounds write in ANGLE.

[513920298] High CVE-2026-17676: Inappropriate implementation in ANGLE.

[513921488] High CVE-2026-17677: Inappropriate implementation in ANGLE.

[515452019] High CVE-2026-17678: Out of bounds read in ANGLE.

[516430649] High CVE-2026-17679: Insufficient validation of untrusted input in Print Preview.

[516486611] High CVE-2026-17680: Heap buffer overflow in Color.

[516813184] High CVE-2026-17681: Insufficient validation of untrusted input in Web Authentication.

[516837126] High CVE-2026-17682: Integer overflow in ANGLE.

[516887576] High CVE-2026-17683: Inappropriate implementation in ANGLE.

[516894682] High CVE-2026-17684: Insufficient validation of untrusted input in Chrome for iOS.

[516910278] High CVE-2026-17685: Use after free in Autofill.

[516917065] High CVE-2026-17686: Insufficient validation of untrusted input in Passwords.

[516985726] High CVE-2026-17687: Type Confusion in ANGLE.

[517016413] High CVE-2026-17688: Use after free in Input.

[517045160] High CVE-2026-17689: Uninitialized Use in ANGLE.

[517129282] High CVE-2026-17690: Insufficient validation of untrusted input in PDF.

[517321292] High CVE-2026-17691: Out of bounds write in ANGLE.

[517350808] High CVE-2026-17692: Use after free in DataTransfer.

[517448723] High CVE-2026-17693: Inappropriate implementation in FileSystem.

[517511796] High CVE-2026-17694: Use after free in DOM.

[517543052] High CVE-2026-17695: Inappropriate implementation in ANGLE.

[517550034] High CVE-2026-17696: Side-channel information leakage in Media.

[517575864] High CVE-2026-17697: Type Confusion in ANGLE.

[517670731] High CVE-2026-17698: Insufficient validation of untrusted input in UI.

[517785292] High CVE-2026-17699: Use after free in Views.

[517789833] High CVE-2026-17700: Insufficient validation of untrusted input in Actor.

[517972648] High CVE-2026-17701: Out of bounds read in ANGLE.

[517973093] High CVE-2026-17702: Inappropriate implementation in Skia.

[518051499] High CVE-2026-17703: Policy bypass in Chrome for iOS.

[519259107] High CVE-2026-17704: Use after free in ANGLE.

[519665978] High CVE-2026-17705: Integer overflow in libxml.

[519693032] High CVE-2026-17706: Insufficient validation of untrusted input in Media.

[519701233] High CVE-2026-17707: Uninitialized Use in Media.

[519738647] High CVE-2026-17708: Use after free in Audio.

[519981494] High CVE-2026-17709: Race in Downloads.

[519991712] High CVE-2026-17710: Inappropriate implementation in MHTML.

[519996040] High CVE-2026-17711: Race in Downloads.

[520535595] High CVE-2026-17712: Race in Skia.

[520572766] High CVE-2026-17713: Insufficient validation of untrusted input in Accessibility.

[521293438] High CVE-2026-17714: Uninitialized Use in ANGLE.

[521491778] High CVE-2026-17715: Inappropriate implementation in Passwords.

[521866061] High CVE-2026-17716: Use after free in Updater.

[522063116] High CVE-2026-17717: Integer overflow in ANGLE.

[522079372] High CVE-2026-17718: Use after free in ANGLE.

[522304853] High CVE-2026-17719: Use after free in Input.

[522545249] High CVE-2026-17720: Insufficient policy enforcement in Passwords.

[523495723] High CVE-2026-17721: Out of bounds write in ANGLE.

[523592755] High CVE-2026-17722: Object lifecycle issue in WebView.

[523718303] High CVE-2026-17723: Use after free in Media.

[523720739] High CVE-2026-17724: Race in Chrome for iOS.

[528501127] High CVE-2026-17725: Type Confusion in V8.

[529867799] High CVE-2026-17726: Integer overflow in WebGL.

[529932631] High CVE-2026-17727: Out of bounds write in WebGL.

[461167648] Medium CVE-2026-17728: Inappropriate implementation in Extensions.

[503801946] Medium CVE-2026-17758: Heap buffer overflow in Dawn.

[476646486] Medium CVE-2026-17732: Inappropriate implementation in SVG.

[520656237] Medium CVE-2026-17729: Use after free in V8.

[40057032] Medium CVE-2026-17730: Side-channel information leakage in Autofill.

[463551850] Medium CVE-2026-17731: Inappropriate implementation in Autofill.

[495793059] Medium CVE-2026-17733: Inappropriate implementation in QUIC.

[496304083] Medium CVE-2026-17734: Inappropriate implementation in Autofill.

[496569497] Medium CVE-2026-17735: Insufficient validation of untrusted input in BFCache.

[496715442] Medium CVE-2026-17736: Insufficient validation of untrusted input in WebView.

[498000415] Medium CVE-2026-17737: Use after free in Bluetooth.

[498079379] Medium CVE-2026-17738: Insufficient validation of untrusted input in Payments.

[498353463] Medium CVE-2026-17739: Insufficient policy enforcement in Extensions.

[498827800] Medium CVE-2026-17740: Uninitialized Use in ANGLE.

[498877660] Medium CVE-2026-17741: Insufficient validation of untrusted input in WebView.

[499003233] Medium CVE-2026-17742: Insufficient policy enforcement in Payments.

[499204022] Medium CVE-2026-17743: Insufficient policy enforcement in ControlledFrame.

[500137309] Medium CVE-2026-17744: Inappropriate implementation in File Input.

[500172224] Medium CVE-2026-17745: Out of bounds read in Skia.

[500390256] Medium CVE-2026-17746: Use after free in GPU.

[500472958] Medium CVE-2026-17747: Insufficient validation of untrusted input in Payments.

[500494349] Medium CVE-2026-17748: Inappropriate implementation in Extensions.

[500526602] Medium CVE-2026-17749: Insufficient validation of untrusted input in Extensions.

[500560234] Medium CVE-2026-17750: Use after free in ANGLE.

[501591293] Medium CVE-2026-17751: Inappropriate implementation in AdFilter.

[501619207] Medium CVE-2026-17752: Use after free in Views.

[501628355] Medium CVE-2026-17753: Inappropriate implementation in Autofill.

[501675996] Medium CVE-2026-17754: Inappropriate implementation in Blink.

[501854535] Medium CVE-2026-17755: Incorrect security UI in Extensions.

[501980797] Medium CVE-2026-17756: Insufficient policy enforcement in Presentation.

[502351526] Medium CVE-2026-17757: Uninitialized Use in Skia.

[504650654] Medium CVE-2026-17759: Uninitialized Use in Codecs.

[506473189] Medium CVE-2026-17760: Side-channel information leakage in NoStatePrefetch.

[508249524] Medium CVE-2026-17761: Insufficient validation of untrusted input in Chrome for iOS.

[508251844] Medium CVE-2026-17762: Inappropriate implementation in Chrome for iOS.

[511738693] Medium CVE-2026-17763: Inappropriate implementation in GPU.

[511754400] Medium CVE-2026-17764: Inappropriate implementation in FedCM.

[511765328] Medium CVE-2026-17765: Inappropriate implementation in WebProtect.

[511799537] Medium CVE-2026-17766: Insufficient validation of untrusted input in Clipboard.

[511822402] Medium CVE-2026-17767: Insufficient validation of untrusted input in WebView.

[512999037] Medium CVE-2026-17768: Insufficient validation of untrusted input in WebSockets.

[513022076] Medium CVE-2026-17769: Insufficient validation of untrusted input in Cast.

[513103345] Medium CVE-2026-17770: Out of bounds read in Media.

[513160525] Medium CVE-2026-17771: Uninitialized Use in Skia.

[513197846] Medium CVE-2026-17772: Out of bounds read in WebGL.

[513232523] Medium CVE-2026-17773: Insufficient validation of untrusted input in Cast.

[513323066] Medium CVE-2026-17774: Insufficient validation of untrusted input in Variations.

[513363822] Medium CVE-2026-17775: Inappropriate implementation in PresentationAPI.

[513404032] Medium CVE-2026-17776: Policy bypass in Receiver.

[513462236] Medium CVE-2026-17777: Inappropriate implementation in Autofill.

[513467993] Medium CVE-2026-17778: Use after free in Extensions.

[513478933] Medium CVE-2026-17779: Inappropriate implementation in Site Isolation.

[513485951] Medium CVE-2026-17780: Inappropriate implementation in Isolated Web Apps.

[513502990] Medium CVE-2026-17781: Inappropriate implementation in Extensions.

[513507830] Medium CVE-2026-17782: Incorrect security UI in Chrome for iOS.

[513532735] Medium CVE-2026-17783: Inappropriate implementation in Loader.

[513694032] Medium CVE-2026-17784: Use after free in Audio.

[513769898] Medium CVE-2026-17785: Uninitialized Use in ANGLE.

[513770449] Medium CVE-2026-17786: Insufficient validation of untrusted input in DevTools.

[513783632] Medium CVE-2026-17787: Inappropriate implementation in DevTools.

[513824957] Medium CVE-2026-17788: Inappropriate implementation in Blink.

[513855922] Medium CVE-2026-17789: Insufficient validation of untrusted input in Chrome for iOS.

[513919931] Medium CVE-2026-17790: Uninitialized Use in ANGLE.

[514006959] Medium CVE-2026-17791: Insufficient validation of untrusted input in Payments.

[514019823] Medium CVE-2026-17792: Inappropriate implementation in Credential Management.

[514063859] Medium CVE-2026-17793: Inappropriate implementation in Messages.

[514067070] Medium CVE-2026-17794: Insufficient validation of untrusted input in Mobile.

[514242889] Medium CVE-2026-17795: Insufficient validation of untrusted input in GetUserMedia.

[514427844] Medium CVE-2026-17796: Side-channel information leakage in WebXR.

[514441966] Medium CVE-2026-17797: Inappropriate implementation in CSS.

[514460133] Medium CVE-2026-17798: Inappropriate implementation in Cast.

[514461031] Medium CVE-2026-17799: Insufficient validation of untrusted input in Safe Browsing.

[514480948] Medium CVE-2026-17800: Side-channel information leakage in MediaRecording.

[514482938] Medium CVE-2026-17801: Out of bounds memory access in ANGLE.

[514512198] Medium CVE-2026-17802: Side-channel information leakage in GPU.

[515438919] Medium CVE-2026-17803: Insufficient validation of untrusted input in Save to Drive.

[515448947] Medium CVE-2026-17804: Use after free in Media.

[516420806] Medium CVE-2026-17805: Insufficient policy enforcement in Glic.

[516433058] Medium CVE-2026-17806: Insufficient validation of untrusted input in Extensions.

[516763884] Medium CVE-2026-17807: Use after free in V8.

[516778390] Medium CVE-2026-17808: Uninitialized Use in WebGL.

[516813317] Medium CVE-2026-17809: Insufficient validation of untrusted input in Extensions.

[516882109] Medium CVE-2026-17810: Uninitialized Use in Dawn.

[516954622] Medium CVE-2026-17811: Use after free in ANGLE.

[517101596] Medium CVE-2026-17812: Inappropriate implementation in DigitalCredentials.

[517184957] Medium CVE-2026-17813: Insufficient policy enforcement in Chrome for iOS.

[517312048] Medium CVE-2026-17814: Insufficient validation of untrusted input in Chrome for iOS.

[517427352] Medium CVE-2026-17815: Insufficient policy enforcement in GuestView.

[517429672] Medium CVE-2026-17816: Inappropriate implementation in Speech.

[517461759] Medium CVE-2026-17817: Inappropriate implementation in ReportingAndNEL.

[517466133] Medium CVE-2026-17818: Inappropriate implementation in Network.

[517487028] Medium CVE-2026-17819: Inappropriate implementation in WebAppInstalls.

[517493101] Medium CVE-2026-17820: Insufficient policy enforcement in Autofill.

[517597914] Medium CVE-2026-17821: Insufficient policy enforcement in Extensions.

[517621178] Medium CVE-2026-17822: Inappropriate implementation in Chrome for iOS.

[517628043] Medium CVE-2026-17823: Insufficient policy enforcement in WebXR.

[517655543] Medium CVE-2026-17824: Insufficient policy enforcement in ServiceWorker.

[517675979] Medium CVE-2026-17825: Insufficient policy enforcement in Passwords.

[517690521] Medium CVE-2026-17826: Inappropriate implementation in Chrome for iOS.

[517693726] Medium CVE-2026-17827: Inappropriate implementation in CSS.

[517702279] Medium CVE-2026-17828: Inappropriate implementation in Chrome for iOS.

[517705103] Medium CVE-2026-17829: Insufficient policy enforcement in Passwords.

[517710397] Medium CVE-2026-17830: Inappropriate implementation in Chrome for iOS.

[517714728] Medium CVE-2026-17831: Insufficient validation of untrusted input in Passwords.

[517723319] Medium CVE-2026-17832: Use after free in ANGLE.

[517779123] Medium CVE-2026-17833: Inappropriate implementation in Passwords.

[517793801] Medium CVE-2026-17834: Inappropriate implementation in Passwords.

[517801739] Medium CVE-2026-17835: Inappropriate implementation in Chrome for iOS.

[517972812] Medium CVE-2026-17836: Use after free in V8.

[517978932] Medium CVE-2026-17837: Insufficient validation of untrusted input in DevTools.

[518075952] Medium CVE-2026-17838: Incorrect security UI in Chrome for iOS.

[518080978] Medium CVE-2026-17839: Inappropriate implementation in Chrome for iOS.

[518082162] Medium CVE-2026-17840: Incorrect security UI in Passwords.

[518088219] Medium CVE-2026-17841: Race in Chrome for iOS.

[518089997] Medium CVE-2026-17842: Inappropriate implementation in Chrome for iOS.

[518103887] Medium CVE-2026-17843: Inappropriate implementation in CSS.

[518111542] Medium CVE-2026-17844: Insufficient validation of untrusted input in Cast.

[518112775] Medium CVE-2026-17845: Inappropriate implementation in CSS.

[518121320] Medium CVE-2026-17846: Inappropriate implementation in Media.

[518243653] Medium CVE-2026-17847: Insufficient validation of untrusted input in ANGLE.

[518284253] Medium CVE-2026-17848: Insufficient validation of untrusted input in Codecs.

[518812672] Medium CVE-2026-17849: Inappropriate implementation in Chrome for iOS.

[519078527] Medium CVE-2026-17850: Inappropriate implementation in Permissions.

[519243927] Medium CVE-2026-17851: Side-channel information leakage in Autofill.

[519348818] Medium CVE-2026-17852: Inappropriate implementation in Media Router.

[519472272] Medium CVE-2026-17853: Inappropriate implementation in DevTools.

[519500882] Medium CVE-2026-17854: Insufficient policy enforcement in WebMCP.

[519982572] Medium CVE-2026-17855: Race in DevTools.

[519991751] Medium CVE-2026-17856: Inappropriate implementation in Network.

[520186620] Medium CVE-2026-17857: Inappropriate implementation in Network.

[520191468] Medium CVE-2026-17858: Uninitialized Use in WebNN.

[520196753] Medium CVE-2026-17859: Side-channel information leakage in Favicons.

[520407381] Medium CVE-2026-17860: Insufficient validation of untrusted input in Mobile.

[520417861] Medium CVE-2026-17861: Insufficient validation of untrusted input in Updater.

[520426287] Medium CVE-2026-17862: Use after free in Tracing.

[520468718] Medium CVE-2026-17863: Inappropriate implementation in Browser.

[520494861] Medium CVE-2026-17864: Inappropriate implementation in Updater.

[520516655] Medium CVE-2026-17865: Inappropriate implementation in Crypto.

[520525732] Medium CVE-2026-17866: Type Confusion in Tab.

[520527496] Medium CVE-2026-17867: Insufficient validation of untrusted input in Dawn.

[520743499] Medium CVE-2026-17868: Insufficient policy enforcement in USB.

[521759269] Medium CVE-2026-17869: Out of bounds read in WebXR.

[521784856] Medium CVE-2026-17870: Insufficient validation of untrusted input in Cast.

[521938924] Medium CVE-2026-17871: Inappropriate implementation in Passwords.

[521963740] Medium CVE-2026-17872: Cryptographic Flaw in WebAppInstalls.

[522074033] Medium CVE-2026-17873: Insufficient policy enforcement in Chrome for iOS.

[522074154] Medium CVE-2026-17874: Inappropriate implementation in Chrome for iOS.

[522299155] Medium CVE-2026-17875: Use after free in PDFium.

[522425471] Medium CVE-2026-17876: Inappropriate implementation in Payments.

[522426086] Medium CVE-2026-17877: Inappropriate implementation in Chromoting.

[522781838] Medium CVE-2026-17878: Inappropriate implementation in CSS.

[522878450] Medium CVE-2026-17879: Inappropriate implementation in Autofill.

[523229759] Medium CVE-2026-17880: Inappropriate implementation in Autofill.

[523477987] Medium CVE-2026-17881: Use after free in WebXR.

[523637452] Medium CVE-2026-17882: Policy bypass in Extensions.

[523639090] Medium CVE-2026-17883: Inappropriate implementation in Headless.

[523692228] Medium CVE-2026-17884: Object lifecycle issue in WebRTC.

[523698038] Medium CVE-2026-17885: Inappropriate implementation in Paint.

[523715964] Medium CVE-2026-17886: Use after free in Enterprise.

[523717010] Medium CVE-2026-17887: Use after free in TabStrip.

[523720529] Medium CVE-2026-17888: Insufficient validation of untrusted input in WebUI.

[523735357] Medium CVE-2026-17889: Uninitialized Use in WebXR.

[524029061] Medium CVE-2026-17890: Insufficient validation of untrusted input in DevTools.

[524639223] Medium CVE-2026-17891: Use after free in ANGLE.

[524822998] Medium CVE-2026-17892: Inappropriate implementation in WebXR.

[524824730] Medium CVE-2026-17893: Insufficient validation of untrusted input in Updater.

[524825209] Medium CVE-2026-17894: Use after free in Views.

[524931675] Medium CVE-2026-17895: Inappropriate implementation in DataTransfer.

[525331547] Medium CVE-2026-17896: Use after free in DevTools.

[527665262] Medium CVE-2026-17897: Inappropriate implementation in ORB.

[506193577] Low CVE-2026-17898: Use after free in DevTools.

[375959766] Low CVE-2026-17899: Insufficient policy enforcement in DevTools.

[496195854] Low CVE-2026-17900: Inappropriate implementation in Enterprise.

[496271098] Low CVE-2026-17901: Inappropriate implementation in Sharing.

[497251066] Low CVE-2026-17902: Inappropriate implementation in Editing.

[497277880] Low CVE-2026-17903: Insufficient policy enforcement in Chromecast.

[497337759] Low CVE-2026-17904: Insufficient policy enforcement in NFC.

[497366217] Low CVE-2026-17905: Inappropriate implementation in SurfaceCapture.

[497654761] Low CVE-2026-17906: Insufficient validation of untrusted input in Bluetooth.

[497837927] Low CVE-2026-17907: Side-channel information leakage in Network.

[499062890] Low CVE-2026-17908: Insufficient validation of untrusted input in Printing.

[501693236] Low CVE-2026-17909: Insufficient validation of untrusted input in Isolated Web Apps.

[501749600] Low CVE-2026-17910: Insufficient policy enforcement in NFC.

[502505715] Low CVE-2026-17911: Insufficient policy enforcement in SVG.

[504202939] Low CVE-2026-17912: Inappropriate implementation in Chrome for iOS.

[504209246] Low CVE-2026-17913: Inappropriate implementation in Chrome for iOS.

[506377118] Low CVE-2026-17914: Side-channel information leakage in Skia.

[506390325] Low CVE-2026-17915: Inappropriate implementation in WebView.

[510808598] Low CVE-2026-17916: Insufficient policy enforcement in Settings.

[511816897] Low CVE-2026-17917: Policy bypass in Chrome for iOS.

[513127137] Low CVE-2026-17918: Use after free in Sync.

[513291747] Low CVE-2026-17919: Insufficient policy enforcement in Enterprise.

[513413942] Low CVE-2026-17920: Use after free in V8.

[513503197] Low CVE-2026-17921: Insufficient validation of untrusted input in Navigation.

[513611659] Low CVE-2026-17922: Inappropriate implementation in Enterprise.

[513612928] Low CVE-2026-17923: Policy bypass in Enterprise.

[513714124] Low CVE-2026-17924: Use after free in DNS.

[513719671] Low CVE-2026-17925: Inappropriate implementation in Cast.

[513735900] Low CVE-2026-17926: Insufficient validation of untrusted input in DevTools.

[513754837] Low CVE-2026-17927: Insufficient policy enforcement in DevTools.

[513762372] Low CVE-2026-17928: Inappropriate implementation in DataTransfer.

[513768645] Low CVE-2026-17929: Insufficient validation of untrusted input in DevTools.

[513769158] Low CVE-2026-17930: Insufficient validation of untrusted input in Extensions.

[513781245] Low CVE-2026-17931: Inappropriate implementation in DevTools.

[513819157] Low CVE-2026-17932: Use after free in DataTransfer.

[513822044] Low CVE-2026-17933: Inappropriate implementation in DOMStorage.

[513838421] Low CVE-2026-17934: Insufficient validation of untrusted input in DevTools.

[513863267] Low CVE-2026-17935: Heap buffer overflow in Codecs.

[513864014] Low CVE-2026-17936: Inappropriate implementation in DevTools.

[513866380] Low CVE-2026-17937: Inappropriate implementation in DevTools.

[513989304] Low CVE-2026-17938: Inappropriate implementation in FullScreen.

[514060089] Low CVE-2026-17939: Inappropriate implementation in Passwords.

[514069440] Low CVE-2026-17940: Insufficient validation of untrusted input in Picture-in-Picture.

[514147906] Low CVE-2026-17941: Inappropriate implementation in Chrome for iOS.

[514406198] Low CVE-2026-17942: Side-channel information leakage in SVG.

[514424283] Low CVE-2026-17943: Inappropriate implementation in Parser.

[514510853] Low CVE-2026-17944: Inappropriate implementation in Chrome for iOS.

[514519203] Low CVE-2026-17945: Inappropriate implementation in Navigation.

[515437522] Low CVE-2026-17946: Uninitialized Use in Dawn.

[515438256] Low CVE-2026-17947: Use after free in WebSockets.

[516849257] Low CVE-2026-17948: Type Confusion in V8.

[517000034] Low CVE-2026-17949: Uninitialized Use in GPU.

[517063658] Low CVE-2026-17950: Policy bypass in Safebrowsing.

[517180511] Low CVE-2026-17951: Heap buffer overflow in WebRTC.

[517316174] Low CVE-2026-17952: Inappropriate implementation in V8.

[517335150] Low CVE-2026-17953: Insufficient policy enforcement in WebView.

[517383492] Low CVE-2026-17954: Policy bypass in MHTML.

[517385072] Low CVE-2026-17955: Insufficient validation of untrusted input in Payments.

[517436171] Low CVE-2026-17956: Inappropriate implementation in Scheduling.

[517476342] Low CVE-2026-17957: Inappropriate implementation in CORS.

[517538206] Low CVE-2026-17958: Inappropriate implementation in Views.

[517607890] Low CVE-2026-17959: Inappropriate implementation in Network.

[517631680] Low CVE-2026-17960: Inappropriate implementation in Chrome for iOS.

[517700791] Low CVE-2026-17961: Inappropriate implementation in Session.

[517757268] Low CVE-2026-17962: Inappropriate implementation in Blink.

[517759257] Low CVE-2026-17963: Inappropriate implementation in SVG.

[518025103] Low CVE-2026-17964: Incorrect security UI in UI.

[518049812] Low CVE-2026-17965: Incorrect security UI in Chrome for iOS.

[518058990] Low CVE-2026-17966: Inappropriate implementation in Views.

[518243858] Low CVE-2026-17967: Use after free in Chrome for iOS.

[518337516] Low CVE-2026-17968: Uninitialized Use in WebXR.

[518812295] Low CVE-2026-17969: Inappropriate implementation in Passwords.

[518814464] Low CVE-2026-17970: Insufficient validation of untrusted input in Passwords.

[518815075] Low CVE-2026-17971: Inappropriate implementation in Frame.

[519202895] Low CVE-2026-17972: Inappropriate implementation in Chrome for iOS.

[519230894] Low CVE-2026-17973: Inappropriate implementation in Views.

[519232592] Low CVE-2026-17974: Insufficient policy enforcement in DevTools.

[519233776] Low CVE-2026-17975: Inappropriate implementation in IME.

[519455164] Low CVE-2026-17976: Policy bypass in Extensions.

[519603552] Low CVE-2026-17977: Policy bypass in CSS.

[519610845] Low CVE-2026-17978: Side-channel information leakage in WebCodecs.

[519664497] Low CVE-2026-17979: Race in V8.

[519710361] Low CVE-2026-17980: Inappropriate implementation in UI.

[519719512] Low CVE-2026-17981: Inappropriate implementation in Blink.

[519735808] Low CVE-2026-17982: Insufficient validation of untrusted input in Cast.

[519744561] Low CVE-2026-17983: Incorrect security UI in Global Media Controls.

[519978460] Low CVE-2026-17984: Inappropriate implementation in Browser.

[519981430] Low CVE-2026-17985: Insufficient policy enforcement in Speech.

[519981896] Low CVE-2026-17986: Insufficient policy enforcement in Bluetooth.

[519988071] Low CVE-2026-17987: Insufficient validation of untrusted input in Notifications.

[520005624] Low CVE-2026-17988: Insufficient validation of untrusted input in Navigation.

[520017306] Low CVE-2026-17989: Type Confusion in V8.

[520018012] Low CVE-2026-17990: Insufficient validation of untrusted input in WebAuthn.

[520110535] Low CVE-2026-17991: Insufficient validation of untrusted input in AI.

[520506316] Low CVE-2026-17992: Uninitialized Use in Skia.

[520532191] Low CVE-2026-17993: Race in Updater.

[520663771] Low CVE-2026-17994: Inappropriate implementation in Media.

[520972775] Low CVE-2026-17995: Out of bounds read in Dawn.

[521473427] Low CVE-2026-17996: Inappropriate implementation in Browser.

[521476960] Low CVE-2026-17997: Inappropriate implementation in Passwords.

[521601450] Low CVE-2026-17998: Incorrect security UI in Extensions.

[521615681] Low CVE-2026-17999: Incorrect security UI in PictureInPicture.

[521623907] Low CVE-2026-18000: Insufficient policy enforcement in USB.

[521757779] Low CVE-2026-18001: Inappropriate implementation in WebGL.

[521864362] Low CVE-2026-18002: Insufficient validation of untrusted input in Google Lens.

[521934304] Low CVE-2026-18003: Inappropriate implementation in Chrome for iOS.

[522280805] Low CVE-2026-18004: Insufficient policy enforcement in Speech.

[522300211] Low CVE-2026-18005: Inappropriate implementation in WebXR.

[522396262] Low CVE-2026-18006: Inappropriate implementation in Google Lens.

[522404101] Low CVE-2026-18007: Inappropriate implementation in Input.

[522412676] Low CVE-2026-18008: Inappropriate implementation in Settings.

[522419718] Low CVE-2026-18009: Insufficient validation of untrusted input in Passwords.

[522419819] Low CVE-2026-18010: Inappropriate implementation in Passwords.

[522479633] Low CVE-2026-18011: Inappropriate implementation in Chrome for iOS.

[522938824] Low CVE-2026-18012: Use after free in PDFium.

[523245998] Low CVE-2026-18013: Inappropriate implementation in Chrome for iOS.

[523248021] Low CVE-2026-18014: Insufficient validation of untrusted input in DevTools.

[523698428] Low CVE-2026-18015: Inappropriate implementation in Tint.

[523708527] Low CVE-2026-18016: Insufficient policy enforcement in Chrome for iOS.

[523731236] Low CVE-2026-18017: Use after free in Dawn.

[524467747] Low CVE-2026-18018: Inappropriate implementation in Updater.

[525691898] Low CVE-2026-18019: Side-channel information leakage in Media.

[source]

chromium -- security fixes

Details

References

CVE Name	CVE-2026-17650
CVE Name	CVE-2026-17651
CVE Name	CVE-2026-17652
CVE Name	CVE-2026-17653
CVE Name	CVE-2026-17654
CVE Name	CVE-2026-17655
CVE Name	CVE-2026-17656
CVE Name	CVE-2026-17657
CVE Name	CVE-2026-17658
CVE Name	CVE-2026-17659
CVE Name	CVE-2026-17660
CVE Name	CVE-2026-17661
CVE Name	CVE-2026-17662
CVE Name	CVE-2026-17663
CVE Name	CVE-2026-17664
CVE Name	CVE-2026-17665
CVE Name	CVE-2026-17666
CVE Name	CVE-2026-17667
CVE Name	CVE-2026-17668
CVE Name	CVE-2026-17669
CVE Name	CVE-2026-17670
CVE Name	CVE-2026-17671
CVE Name	CVE-2026-17672
CVE Name	CVE-2026-17673
CVE Name	CVE-2026-17674
CVE Name	CVE-2026-17675
CVE Name	CVE-2026-17676
CVE Name	CVE-2026-17677
CVE Name	CVE-2026-17678
CVE Name	CVE-2026-17679
CVE Name	CVE-2026-17680
CVE Name	CVE-2026-17681
CVE Name	CVE-2026-17682
CVE Name	CVE-2026-17683
CVE Name	CVE-2026-17684
CVE Name	CVE-2026-17685
CVE Name	CVE-2026-17686
CVE Name	CVE-2026-17687
CVE Name	CVE-2026-17688
CVE Name	CVE-2026-17689
CVE Name	CVE-2026-17690
CVE Name	CVE-2026-17691
CVE Name	CVE-2026-17692
CVE Name	CVE-2026-17693
CVE Name	CVE-2026-17694
CVE Name	CVE-2026-17695
CVE Name	CVE-2026-17696
CVE Name	CVE-2026-17697
CVE Name	CVE-2026-17698
CVE Name	CVE-2026-17699
CVE Name	CVE-2026-17700
CVE Name	CVE-2026-17701
CVE Name	CVE-2026-17702
CVE Name	CVE-2026-17703
CVE Name	CVE-2026-17704
CVE Name	CVE-2026-17705
CVE Name	CVE-2026-17706
CVE Name	CVE-2026-17707
CVE Name	CVE-2026-17708
CVE Name	CVE-2026-17709
CVE Name	CVE-2026-17710
CVE Name	CVE-2026-17711
CVE Name	CVE-2026-17712
CVE Name	CVE-2026-17713
CVE Name	CVE-2026-17714
CVE Name	CVE-2026-17715
CVE Name	CVE-2026-17716
CVE Name	CVE-2026-17717
CVE Name	CVE-2026-17718
CVE Name	CVE-2026-17719
CVE Name	CVE-2026-17720
CVE Name	CVE-2026-17721
CVE Name	CVE-2026-17722
CVE Name	CVE-2026-17723
CVE Name	CVE-2026-17724
CVE Name	CVE-2026-17725
CVE Name	CVE-2026-17726
CVE Name	CVE-2026-17727
CVE Name	CVE-2026-17728
CVE Name	CVE-2026-17729
CVE Name	CVE-2026-17730
CVE Name	CVE-2026-17731
CVE Name	CVE-2026-17732
CVE Name	CVE-2026-17733
CVE Name	CVE-2026-17734
CVE Name	CVE-2026-17735
CVE Name	CVE-2026-17736
CVE Name	CVE-2026-17737
CVE Name	CVE-2026-17738
CVE Name	CVE-2026-17739
CVE Name	CVE-2026-17740
CVE Name	CVE-2026-17741
CVE Name	CVE-2026-17742
CVE Name	CVE-2026-17743
CVE Name	CVE-2026-17744
CVE Name	CVE-2026-17745
CVE Name	CVE-2026-17746
CVE Name	CVE-2026-17747
CVE Name	CVE-2026-17748
CVE Name	CVE-2026-17749
CVE Name	CVE-2026-17750
CVE Name	CVE-2026-17751
CVE Name	CVE-2026-17752
CVE Name	CVE-2026-17753
CVE Name	CVE-2026-17754
CVE Name	CVE-2026-17755
CVE Name	CVE-2026-17756
CVE Name	CVE-2026-17757
CVE Name	CVE-2026-17758
CVE Name	CVE-2026-17759
CVE Name	CVE-2026-17760
CVE Name	CVE-2026-17761
CVE Name	CVE-2026-17762
CVE Name	CVE-2026-17763
CVE Name	CVE-2026-17764
CVE Name	CVE-2026-17765
CVE Name	CVE-2026-17766
CVE Name	CVE-2026-17767
CVE Name	CVE-2026-17768
CVE Name	CVE-2026-17769
CVE Name	CVE-2026-17770
CVE Name	CVE-2026-17771
CVE Name	CVE-2026-17772
CVE Name	CVE-2026-17773
CVE Name	CVE-2026-17774
CVE Name	CVE-2026-17775
CVE Name	CVE-2026-17776
CVE Name	CVE-2026-17777
CVE Name	CVE-2026-17778
CVE Name	CVE-2026-17779
CVE Name	CVE-2026-17780
CVE Name	CVE-2026-17781
CVE Name	CVE-2026-17782
CVE Name	CVE-2026-17783
CVE Name	CVE-2026-17784
CVE Name	CVE-2026-17785
CVE Name	CVE-2026-17786
CVE Name	CVE-2026-17787
CVE Name	CVE-2026-17788
CVE Name	CVE-2026-17789
CVE Name	CVE-2026-17790
CVE Name	CVE-2026-17791
CVE Name	CVE-2026-17792
CVE Name	CVE-2026-17793
CVE Name	CVE-2026-17794
CVE Name	CVE-2026-17795
CVE Name	CVE-2026-17796
CVE Name	CVE-2026-17797
CVE Name	CVE-2026-17798
CVE Name	CVE-2026-17799
CVE Name	CVE-2026-17800
CVE Name	CVE-2026-17801
CVE Name	CVE-2026-17802
CVE Name	CVE-2026-17803
CVE Name	CVE-2026-17804
CVE Name	CVE-2026-17805
CVE Name	CVE-2026-17806
CVE Name	CVE-2026-17807
CVE Name	CVE-2026-17808
CVE Name	CVE-2026-17809
CVE Name	CVE-2026-17810
CVE Name	CVE-2026-17811
CVE Name	CVE-2026-17812
CVE Name	CVE-2026-17813
CVE Name	CVE-2026-17814
CVE Name	CVE-2026-17815
CVE Name	CVE-2026-17816
CVE Name	CVE-2026-17817
CVE Name	CVE-2026-17818
CVE Name	CVE-2026-17819
CVE Name	CVE-2026-17820
CVE Name	CVE-2026-17821
CVE Name	CVE-2026-17822
CVE Name	CVE-2026-17823
CVE Name	CVE-2026-17824
CVE Name	CVE-2026-17825
CVE Name	CVE-2026-17826
CVE Name	CVE-2026-17827
CVE Name	CVE-2026-17828
CVE Name	CVE-2026-17829
CVE Name	CVE-2026-17830
CVE Name	CVE-2026-17831
CVE Name	CVE-2026-17832
CVE Name	CVE-2026-17833
CVE Name	CVE-2026-17834
CVE Name	CVE-2026-17835
CVE Name	CVE-2026-17836
CVE Name	CVE-2026-17837
CVE Name	CVE-2026-17838
CVE Name	CVE-2026-17839
CVE Name	CVE-2026-17840
CVE Name	CVE-2026-17841
CVE Name	CVE-2026-17842
CVE Name	CVE-2026-17843
CVE Name	CVE-2026-17844
CVE Name	CVE-2026-17845
CVE Name	CVE-2026-17846
CVE Name	CVE-2026-17847
CVE Name	CVE-2026-17848
CVE Name	CVE-2026-17849
CVE Name	CVE-2026-17850
CVE Name	CVE-2026-17851
CVE Name	CVE-2026-17852
CVE Name	CVE-2026-17853
CVE Name	CVE-2026-17854
CVE Name	CVE-2026-17855
CVE Name	CVE-2026-17856
CVE Name	CVE-2026-17857
CVE Name	CVE-2026-17858
CVE Name	CVE-2026-17859
CVE Name	CVE-2026-17860
CVE Name	CVE-2026-17861
CVE Name	CVE-2026-17862
CVE Name	CVE-2026-17863
CVE Name	CVE-2026-17864
CVE Name	CVE-2026-17865
CVE Name	CVE-2026-17866
CVE Name	CVE-2026-17867
CVE Name	CVE-2026-17868
CVE Name	CVE-2026-17869
CVE Name	CVE-2026-17870
CVE Name	CVE-2026-17871
CVE Name	CVE-2026-17872
CVE Name	CVE-2026-17873
CVE Name	CVE-2026-17874
CVE Name	CVE-2026-17875
CVE Name	CVE-2026-17876
CVE Name	CVE-2026-17877
CVE Name	CVE-2026-17878
CVE Name	CVE-2026-17879
CVE Name	CVE-2026-17880
CVE Name	CVE-2026-17881
CVE Name	CVE-2026-17882
CVE Name	CVE-2026-17883
CVE Name	CVE-2026-17884
CVE Name	CVE-2026-17885
CVE Name	CVE-2026-17886
CVE Name	CVE-2026-17887
CVE Name	CVE-2026-17888
CVE Name	CVE-2026-17889
CVE Name	CVE-2026-17890
CVE Name	CVE-2026-17891
CVE Name	CVE-2026-17892
CVE Name	CVE-2026-17893
CVE Name	CVE-2026-17894
CVE Name	CVE-2026-17895
CVE Name	CVE-2026-17896
CVE Name	CVE-2026-17897
CVE Name	CVE-2026-17898
CVE Name	CVE-2026-17899
CVE Name	CVE-2026-17900
CVE Name	CVE-2026-17901
CVE Name	CVE-2026-17902
CVE Name	CVE-2026-17903
CVE Name	CVE-2026-17904
CVE Name	CVE-2026-17905
CVE Name	CVE-2026-17906
CVE Name	CVE-2026-17907
CVE Name	CVE-2026-17908
CVE Name	CVE-2026-17909
CVE Name	CVE-2026-17910
CVE Name	CVE-2026-17911
CVE Name	CVE-2026-17912
CVE Name	CVE-2026-17913
CVE Name	CVE-2026-17914
CVE Name	CVE-2026-17915
CVE Name	CVE-2026-17916
CVE Name	CVE-2026-17917
CVE Name	CVE-2026-17918
CVE Name	CVE-2026-17919
CVE Name	CVE-2026-17920
CVE Name	CVE-2026-17921
CVE Name	CVE-2026-17922
CVE Name	CVE-2026-17923
CVE Name	CVE-2026-17924
CVE Name	CVE-2026-17925
CVE Name	CVE-2026-17926
CVE Name	CVE-2026-17927
CVE Name	CVE-2026-17928
CVE Name	CVE-2026-17929
CVE Name	CVE-2026-17930
CVE Name	CVE-2026-17931
CVE Name	CVE-2026-17932
CVE Name	CVE-2026-17933
CVE Name	CVE-2026-17934
CVE Name	CVE-2026-17935
CVE Name	CVE-2026-17936
CVE Name	CVE-2026-17937
CVE Name	CVE-2026-17938
CVE Name	CVE-2026-17939
CVE Name	CVE-2026-17940
CVE Name	CVE-2026-17941
CVE Name	CVE-2026-17942
CVE Name	CVE-2026-17943
CVE Name	CVE-2026-17944
CVE Name	CVE-2026-17945
CVE Name	CVE-2026-17946
CVE Name	CVE-2026-17947
CVE Name	CVE-2026-17948
CVE Name	CVE-2026-17949
CVE Name	CVE-2026-17950
CVE Name	CVE-2026-17951
CVE Name	CVE-2026-17952
CVE Name	CVE-2026-17953
CVE Name	CVE-2026-17954
CVE Name	CVE-2026-17955
CVE Name	CVE-2026-17956
CVE Name	CVE-2026-17957
CVE Name	CVE-2026-17958
CVE Name	CVE-2026-17959
CVE Name	CVE-2026-17960
CVE Name	CVE-2026-17961
CVE Name	CVE-2026-17962
CVE Name	CVE-2026-17963
CVE Name	CVE-2026-17964
CVE Name	CVE-2026-17965
CVE Name	CVE-2026-17966
CVE Name	CVE-2026-17967
CVE Name	CVE-2026-17968
CVE Name	CVE-2026-17969
CVE Name	CVE-2026-17970
CVE Name	CVE-2026-17971
CVE Name	CVE-2026-17972
CVE Name	CVE-2026-17973
CVE Name	CVE-2026-17974
CVE Name	CVE-2026-17975
CVE Name	CVE-2026-17976
CVE Name	CVE-2026-17977
CVE Name	CVE-2026-17978
CVE Name	CVE-2026-17979
CVE Name	CVE-2026-17980
CVE Name	CVE-2026-17981
CVE Name	CVE-2026-17982
CVE Name	CVE-2026-17983
CVE Name	CVE-2026-17984
CVE Name	CVE-2026-17985
CVE Name	CVE-2026-17986
CVE Name	CVE-2026-17987
CVE Name	CVE-2026-17988
CVE Name	CVE-2026-17989
CVE Name	CVE-2026-17990
CVE Name	CVE-2026-17991
CVE Name	CVE-2026-17992
CVE Name	CVE-2026-17993
CVE Name	CVE-2026-17994
CVE Name	CVE-2026-17995
CVE Name	CVE-2026-17996
CVE Name	CVE-2026-17997
CVE Name	CVE-2026-17998
CVE Name	CVE-2026-17999
CVE Name	CVE-2026-18000
CVE Name	CVE-2026-18001
CVE Name	CVE-2026-18002
CVE Name	CVE-2026-18003
CVE Name	CVE-2026-18004
CVE Name	CVE-2026-18005
CVE Name	CVE-2026-18006
CVE Name	CVE-2026-18007
CVE Name	CVE-2026-18008
CVE Name	CVE-2026-18009
CVE Name	CVE-2026-18010
CVE Name	CVE-2026-18011
CVE Name	CVE-2026-18012
CVE Name	CVE-2026-18013
CVE Name	CVE-2026-18014
CVE Name	CVE-2026-18015
CVE Name	CVE-2026-18016
CVE Name	CVE-2026-18017
CVE Name	CVE-2026-18018
CVE Name	CVE-2026-18019
URL	https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html