VuXML: chromium -- security fixes

VuXML ID	659e52d0-7574-11f1-8de5-a8a1599412c6
Discovery	2026-06-30
Entry	2026-07-02

Chrome Releases reports:

This update includes 382 security fixes:

[506558270] Critical CVE-2026-13774: Use after free in Extensions.

[511766407] Critical CVE-2026-13775: Use after free in GPU.

[513012139] Critical CVE-2026-13776: Type Confusion in Dawn.

[513128566] Critical CVE-2026-13777: Insufficient validation of untrusted input in iOSWeb.

[513167952] Critical CVE-2026-13778: Use after free in WebUSB.

[513222854] Critical CVE-2026-13779: Use after free in Chromoting.

[514769383] Critical CVE-2026-13780: Insufficient validation of untrusted input in ANGLE.

[516457532] Critical CVE-2026-13781: Insufficient validation of untrusted input in Skia.

[516683433] Critical CVE-2026-13782: Use after free in Browser.

[516962178] Critical CVE-2026-13783: Use after free in Views.

[516962715] Critical CVE-2026-13784: Use after free in Views.

[517021684] Critical CVE-2026-13785: Use after free in Bluetooth.

[518007821] Critical CVE-2026-13786: Use after free in Ozone.

[522919313] Critical CVE-2026-13787: Use after free in Chromoting.

[523119897] Critical CVE-2026-13788: Use after free in Fullscreen.

[493847920] High CVE-2026-13789: Use after free in GPU.

[457771782] High CVE-2026-13790: Side-channel information leakage in Scroll.

[503850012] High CVE-2026-13791: Insufficient validation of untrusted input in Downloads.

[496012368] High CVE-2026-13792: Use after free in Touchbar.

[510829679] High CVE-2026-13793: Insufficient policy enforcement in SVG.

[513893425] High CVE-2026-13794: Insufficient validation of untrusted input in WebAppInstalls.

[476591032] High CVE-2026-13795: Insufficient policy enforcement in Chrome for iOS.

[491894115] High CVE-2026-13796: Integer overflow in Chromecast.

[499025645] High CVE-2026-13797: Insufficient validation of untrusted input in Chromecast.

[499048914] High CVE-2026-13798: Heap buffer overflow in Chromecast.

[499252371] High CVE-2026-13799: Use after free in QUIC.

[500108770] High CVE-2026-13800: Inappropriate implementation in Updater.

[500587568] High CVE-2026-13801: Integer overflow in Chromecast.

[501623322] High CVE-2026-13802: Use after free in Views.

[501669642] High CVE-2026-13803: Type Confusion in Chrome Tabs.

[501873032] High CVE-2026-13804: Use after free in Chromecast.

[502282040] High CVE-2026-13805: Use after free in GFX.

[503333798] High CVE-2026-13806: Insufficient validation of untrusted input in Accessibility.

[504194494] High CVE-2026-13807: Use after free in Import.

[504221510] High CVE-2026-13808: Insufficient data validation in Chrome for iOS.

[504222227] High CVE-2026-13809: Side-channel information leakage in Safe Browsing. eported by Google on 2026-04-19

[504600482] High CVE-2026-13810: Inappropriate implementation in Input.

[506149253] High CVE-2026-13811: Use after free in IME.

[508293203] High CVE-2026-13812: Insufficient validation of untrusted input in Chrome for iOS.

[508462149] High CVE-2026-13813: Insufficient validation of untrusted input in Chrome for iOS.

[511712766] High CVE-2026-13814: Use after free in Views.

[511722207] High CVE-2026-13815: Use after free in Blink.

[511735715] High CVE-2026-13816: Insufficient validation of untrusted input in File Input.

[511739631] High CVE-2026-13817: Insufficient validation of untrusted input in Glic.

[511823182] High CVE-2026-13818: Inappropriate implementation in Passwords.

[512962749] High CVE-2026-13819: Out of bounds read in ANGLE.

[512986879] High CVE-2026-13820: Out of bounds read in Skia.

[513142445] High CVE-2026-13821: Use after free in Canvas.

[513148038] High CVE-2026-13822: Inappropriate implementation in Extensions.

[513163011] High CVE-2026-13823: Use after free in Glic.

[513177497] High CVE-2026-13824: Insufficient validation of untrusted input in Extensions.

[513209610] High CVE-2026-13825: Uninitialized Use in Dawn.

[513237800] High CVE-2026-13826: Inappropriate implementation in Autofill.

[513371963] High CVE-2026-13827: Use after free in Updater.

[513399832] High CVE-2026-13828: Inappropriate implementation in Enterprise.

[513490996] High CVE-2026-13829: Insufficient validation of untrusted input in Settings.

[513727494] High CVE-2026-13830: Use after free in Chromoting.

[513781328] High CVE-2026-13831: Use after free in GPU.

[513822378] High CVE-2026-13832: Use after free in Headless.

[513920082] High CVE-2026-13833: Uninitialized Use in ANGLE.

[513925114] High CVE-2026-13834: Insufficient validation of untrusted input in ANGLE.

[514338102] High CVE-2026-13835: Inappropriate implementation in XML.

[514420555] High CVE-2026-13836: Inappropriate implementation in CSS.

[514429130] High CVE-2026-13837: Inappropriate implementation in CSS.

[514445398] High CVE-2026-13838: Inappropriate implementation in CSS.

[514449396] High CVE-2026-13839: Inappropriate implementation in CSS.

[514609778] High CVE-2026-13840: Insufficient policy enforcement in Canvas.

[515467789] High CVE-2026-13841: Integer overflow in Skia.

[516836297] High CVE-2026-13842: Incorrect security UI in Chrome for iOS.

[516869032] High CVE-2026-13843: Insufficient validation of untrusted input in Chrome for iOS.

[516926115] High CVE-2026-13844: Use after free in Updater.

[516936863] High CVE-2026-13845: Use after free in DOM.

[516999424] High CVE-2026-13846: Use after free in USB.

[517073397] High CVE-2026-13847: Insufficient validation of untrusted input in Chrome for iOS.

[517345069] High CVE-2026-13848: Use after free in Forms.

[517351411] High CVE-2026-13849: Insufficient validation of untrusted input in Chromoting.

[517610676] High CVE-2026-13850: Insufficient validation of untrusted input in Chrome for iOS.

[519692255] High CVE-2026-13851: Insufficient validation of untrusted input in WebAppInstalls.

[522560124] High CVE-2026-13852: Insufficient validation of untrusted input in WebAppInstalls.

[523224019] High CVE-2026-13853: Use after free in Journeys.

[523690961] High CVE-2026-13854: Use after free in Ozone.

[524395469] High CVE-2026-13855: Use after free in Ozone.

[508092634] Medium CVE-2026-13856: Insufficient validation of untrusted input in Speech.

[479203484] Medium CVE-2026-13857: Inappropriate implementation in Geometry.

[507090179] Medium CVE-2026-13858: Out of bounds read in FFmpeg.

[484756087] Medium CVE-2026-13859: Inappropriate implementation in ANGLE.

[417052041] Medium CVE-2026-13860: Incorrect security UI in Autofill.

[495456765] Medium CVE-2026-13861: Use after free in Core.

[495897416] Medium CVE-2026-13862: Insufficient policy enforcement in Web Authentication (Passkeys & Security Keys).

[496012495] Medium CVE-2026-13863: Insufficient validation of untrusted input in CustomTabs.

[496399913] Medium CVE-2026-13864: Insufficient policy enforcement in WebHID.

[497090912] Medium CVE-2026-13865: Insufficient validation of untrusted input in Enterprise.

[497207698] Medium CVE-2026-13866: Insufficient validation of untrusted input in Input.

[497345177] Medium CVE-2026-13867: Inappropriate implementation in Geolocation.

[497453475] Medium CVE-2026-13868: Inappropriate implementation in Network.

[497610642] Medium CVE-2026-13869: Use after free in Device.

[497634837] Medium CVE-2026-13870: Use after free in WebView.

[497961376] Medium CVE-2026-13871: Insufficient data validation in GuestView.

[497977983] Medium CVE-2026-13872: Insufficient validation of untrusted input in WebAppInstalls.

[498085466] Medium CVE-2026-13873: Out of bounds memory access in Layout.

[498411773] Medium CVE-2026-13874: Inappropriate implementation in DataTransfer.

[498721671] Medium CVE-2026-13875: Insufficient validation of untrusted input in GPU.

[498722200] Medium CVE-2026-13876: Inappropriate implementation in Network.

[498820206] Medium CVE-2026-13877: Insufficient validation of untrusted input in ANGLE.

[499007266] Medium CVE-2026-13878: Use after free in Bluetooth.

[499022239] Medium CVE-2026-13879: Use after free in Bluetooth.

[499025880] Medium CVE-2026-13880: Use after free in USB.

[499100491] Medium CVE-2026-13881: Insufficient data validation in WebAppInstalls.

[499162550] Medium CVE-2026-13882: Inappropriate implementation in USB.

[500030250] Medium CVE-2026-13883: Type Confusion in ANGLE.

[500077014] Medium CVE-2026-13884: Heap buffer overflow in Chromecast.

[500474409] Medium CVE-2026-13885: Use after free in Skia.

[500475136] Medium CVE-2026-13886: Policy bypass in Isolated Web Apps.

[500508524] Medium CVE-2026-13887: Insufficient policy enforcement in NFC.

[500566906] Medium CVE-2026-13888: Use after free in Extensions.

[500588580] Medium CVE-2026-13889: Insufficient validation of untrusted input in WebAuthentication.

[500601345] Medium CVE-2026-13890: Out of bounds read in Chromecast.

[501631475] Medium CVE-2026-13891: Insufficient validation of untrusted input in Extensions.

[501674841] Medium CVE-2026-13892: Inappropriate implementation in Chrome for iOS.

[501729582] Medium CVE-2026-13893: Insufficient validation of untrusted input in WebUI.

[501741117] Medium CVE-2026-13894: Insufficient policy enforcement in Network.

[501770542] Medium CVE-2026-13895: Inappropriate implementation in Autofill.

[501820076] Medium CVE-2026-13896: Insufficient policy enforcement in Glic.

[501877896] Medium CVE-2026-13897: Insufficient policy enforcement in Chromecast.

[501925480] Medium CVE-2026-13898: Use after free in Cast Receiver.

[502109002] Medium CVE-2026-13899: Use after free in HTML.

[502374993] Medium CVE-2026-13900: Insufficient validation of untrusted input in Chromecast.

[503585173] Medium CVE-2026-13901: Insufficient validation of untrusted input in Serial.

[503725717] Medium CVE-2026-13902: Inappropriate implementation in Chrome for iOS.

[503912196] Medium CVE-2026-13903: Insufficient policy enforcement in Bluetooth.

[504185807] Medium CVE-2026-13904: Incorrect security UI in Safe Browsing.

[504192688] Medium CVE-2026-13905: Incorrect security UI in Chrome for iOS.

[504613867] Medium CVE-2026-13906: Out of bounds read in Codecs.

[505156685] Medium CVE-2026-13907: Inappropriate implementation in iOSWeb.

[505242189] Medium CVE-2026-13908: Insufficient validation of untrusted input in Omnibox.

[505933538] Medium CVE-2026-13909: Insufficient policy enforcement in DevTools.

[507231605] Medium CVE-2026-13910: Insufficient policy enforcement in WebXR.

[507239830] Medium CVE-2026-13911: Insufficient data validation in Spellcheck.

[508259433] Medium CVE-2026-13912: Incorrect security UI in Safe Browsing.

[508260619] Medium CVE-2026-13913: Insufficient policy enforcement in Autofill.

[508273690] Medium CVE-2026-13914: Inappropriate implementation in Passwords.

[508275293] Medium CVE-2026-13915: Use after free in Chrome for iOS.

[508283108] Medium CVE-2026-13916: Inappropriate implementation in Chrome for iOS.

[508286935] Medium CVE-2026-13917: Insufficient validation of untrusted input in Chrome for iOS.

[509712284] Medium CVE-2026-13918: Use after free in Chrome for iOS.

[511249430] Medium CVE-2026-13919: Insufficient data validation in Extensions.

[511722559] Medium CVE-2026-13920: Insufficient validation of untrusted input in Media.

[511738175] Medium CVE-2026-13921: Insufficient validation of untrusted input in DeviceBoundSessionCredentials.

[511748106] Medium CVE-2026-13922: Side-channel information leakage in Paint.

[511772034] Medium CVE-2026-13923: Uninitialized Use in GPU.

[511784747] Medium CVE-2026-13924: Insufficient validation of untrusted input in WebView.

[511802911] Medium CVE-2026-13925: Inappropriate implementation in Downloads.

[511814550] Medium CVE-2026-13926: Insufficient validation of untrusted input in Network.

[511826446] Medium CVE-2026-13927: Insufficient validation of untrusted input in UI.

[512162479] Medium CVE-2026-13928: Insufficient validation of untrusted input in Enterprise.

[512249559] Medium CVE-2026-13929: Insufficient validation of untrusted input in DevTools.

[512937764] Medium CVE-2026-13930: Insufficient policy enforcement in Actor.

[512997441] Medium CVE-2026-13931: Inappropriate implementation in Media.

[513001690] Medium CVE-2026-13932: Inappropriate implementation in Sharing.

[513002625] Medium CVE-2026-13933: Insufficient policy enforcement in Passwords.

[513006636] Medium CVE-2026-13934: Insufficient validation of untrusted input in Dawn.

[513009005] Medium CVE-2026-13935: Side-channel information leakage in ComputePressure.

[513044658] Medium CVE-2026-13936: Inappropriate implementation in Passwords.

[513046494] Medium CVE-2026-13937: Insufficient policy enforcement in Passwords.

[513143921] Medium CVE-2026-13938: Integer overflow in Fonts.

[513149760] Medium CVE-2026-13939: Insufficient validation of untrusted input in WebShare.

[513158425] Medium CVE-2026-13940: Uninitialized Use in Cast.

[513183855] Medium CVE-2026-13941: Inappropriate implementation in SiteSettings.

[513186670] Medium CVE-2026-13942: Insufficient validation of untrusted input in Video Capture.

[513204116] Medium CVE-2026-13943: Uninitialized Use in CSS.

[513224212] Medium CVE-2026-13944: Inappropriate implementation in DataTransfer.

[513226551] Medium CVE-2026-13945: Insufficient policy enforcement in Extensions.

[513274039] Medium CVE-2026-13946: Inappropriate implementation in ScriptInjections.

[513280648] Medium CVE-2026-13947: Uninitialized Use in XR.

[513286820] Medium CVE-2026-13948: Insufficient policy enforcement in Extensions.

[513311569] Medium CVE-2026-13949: Insufficient policy enforcement in Payments.

[513360781] Medium CVE-2026-13950: Uninitialized Use in GPU.

[513394321] Medium CVE-2026-13951: Policy bypass in USB.

[513401808] Medium CVE-2026-13952: Inappropriate implementation in PerformanceAPIs.

[513459192] Medium CVE-2026-13953: Inappropriate implementation in SplitView.

[513504934] Medium CVE-2026-13954: Insufficient policy enforcement in XML.

[513508305] Medium CVE-2026-13955: Insufficient validation of untrusted input in CustomTabs.

[513515168] Medium CVE-2026-13956: Incorrect security UI in PageInfo.

[513553557] Medium CVE-2026-13957: Incorrect security UI in Extensions.

[513567306] Medium CVE-2026-13958: Uninitialized Use in Codecs.

[513609249] Medium CVE-2026-13959: Insufficient validation of untrusted input in Blink.

[513714023] Medium CVE-2026-13960: Inappropriate implementation in Passwords.

[513719481] Medium CVE-2026-13961: Insufficient validation of untrusted input in DevTools.

[513721370] Medium CVE-2026-13962: Insufficient data validation in PDF.

[513727626] Medium CVE-2026-13963: Inappropriate implementation in DevTools.

[513735096] Medium CVE-2026-13964: Insufficient policy enforcement in WebView.

[513737952] Medium CVE-2026-13965: Use after free in Oilpan.

[513741393] Medium CVE-2026-13966: Inappropriate implementation in History.

[513751951] Medium CVE-2026-13967: Type Confusion in V8.

[513762145] Medium CVE-2026-13968: Insufficient validation of untrusted input in DevTools.

[513762962] Medium CVE-2026-13969: Uninitialized Use in UI.

[513779283] Medium CVE-2026-13970: Uninitialized Use in Media.

[513780208] Medium CVE-2026-13971: Uninitialized Use in Skia.

[513792140] Medium CVE-2026-13972: Inappropriate implementation in Paint.

[513832989] Medium CVE-2026-13973: Inappropriate implementation in UI.

[513850475] Medium CVE-2026-13974: Integer overflow in Safe Browsing.

[513857658] Medium CVE-2026-13975: Out of bounds read in ANGLE.

[513858286] Medium CVE-2026-13976: Heap buffer overflow in Storage.

[513859894] Medium CVE-2026-13977: Inappropriate implementation in HTMLParser.

[513866949] Medium CVE-2026-13978: Insufficient policy enforcement in PageInfo.

[513988889] Medium CVE-2026-13979: Inappropriate implementation in Paint.

[513989973] Medium CVE-2026-13980: Incorrect security UI in Chrome for iOS.

[513990408] Medium CVE-2026-13981: Inappropriate implementation in Chrome for iOS.

[514006829] Medium CVE-2026-13982: Incorrect security UI in Passwords.

[514009910] Medium CVE-2026-13983: Incorrect security UI in Chrome for iOS.

[514010404] Medium CVE-2026-13984: Incorrect security UI in TabStrip.

[514013849] Medium CVE-2026-13985: Inappropriate implementation in MediaCapture.

[514020959] Medium CVE-2026-13986: Inappropriate implementation in Media UI.

[514039122] Medium CVE-2026-13987: Incorrect security UI in Mobile.

[514040614] Medium CVE-2026-13988: Inappropriate implementation in Paint.

[514056221] Medium CVE-2026-13989: Insufficient policy enforcement in PageInfo.

[514058439] Medium CVE-2026-13990: Insufficient validation of untrusted input in DataTransfer.

[514061117] Medium CVE-2026-13991: Insufficient validation of untrusted input in Chrome for iOS.

[514063409] Medium CVE-2026-13992: Inappropriate implementation in UI.

[514064139] Medium CVE-2026-13993: Incorrect security UI in WebAppInstalls.

[514067416] Medium CVE-2026-13994: Inappropriate implementation in Credential Management.

[514067524] Medium CVE-2026-13995: Insufficient validation of untrusted input in Autofill.

[514068972] Medium CVE-2026-13996: Incorrect security UI in Permissions.

[514069689] Medium CVE-2026-13997: Incorrect security UI in Extensions.

[514070501] Medium CVE-2026-13998: Incorrect security UI in File Input.

[514071697] Medium CVE-2026-13999: Inappropriate implementation in Extensions.

[514461552] Medium CVE-2026-14000: Inappropriate implementation in XML.

[514481943] Medium CVE-2026-14001: Inappropriate implementation in Network.

[514489361] Medium CVE-2026-14002: Inappropriate implementation in Geolocation.

[514503077] Medium CVE-2026-14003: Insufficient policy enforcement in Extensions.

[514538751] Medium CVE-2026-14004: Inappropriate implementation in CSS.

[514740273] Medium CVE-2026-14005: Use after free in Omnibox.

[515423596] Medium CVE-2026-14006: Use after free in Navigation.

[516425999] Medium CVE-2026-14007: Insufficient policy enforcement in PermissionsPolicy.

[516781007] Medium CVE-2026-14008: Uninitialized Use in WebXR.

[516819850] Medium CVE-2026-14009: Insufficient data validation in Passwords.

[516924151] Medium CVE-2026-14010: Uninitialized Use in Codecs.

[516944556] Medium CVE-2026-14011: Out of bounds read in SurfaceCapture.

[517110749] Medium CVE-2026-14012: Side-channel information leakage in CSS.

[517114175] Medium CVE-2026-14013: Inappropriate implementation in SVG.

[517155893] Medium CVE-2026-14014: Inappropriate implementation in Paint.

[517207235] Medium CVE-2026-14015: Inappropriate implementation in WebRTC.

[517234388] Medium CVE-2026-14016: Insufficient policy enforcement in SVG.

[517241992] Medium CVE-2026-14017: Inappropriate implementation in Navigation.

[517350251] Medium CVE-2026-14018: Use after free in Updater.

[517455455] Medium CVE-2026-14019: Inappropriate implementation in Passwords.

[517598518] Medium CVE-2026-14020: Insufficient validation of untrusted input in WebXR.

[517731924] Medium CVE-2026-14021: Insufficient validation of untrusted input in StorageAccessAPI.

[517791835] Medium CVE-2026-14022: Insufficient validation of untrusted input in Network.

[518063436] Medium CVE-2026-14023: Insufficient validation of untrusted input in SanitizerAPI.

[518245882] Medium CVE-2026-14024: Use after free in Ozone.

[506482786] Low CVE-2026-14025: Use after free in Views.

[507263861] Low CVE-2026-14026: Incorrect security UI in SplitView.

[361375787] Low CVE-2026-14027: Use after free in SignIn.

[401816601] Low CVE-2026-14028: Incorrect security UI in Chrome for iOS.

[488762971] Low CVE-2026-14030: Incorrect security UI in SplitView.

[495459838] Low CVE-2026-14031: Incorrect security UI in File Input.

[495783474] Low CVE-2026-14032: Use after free in Bluetooth.

[495848160] Low CVE-2026-14033: Insufficient policy enforcement in Media.

[496368832] Low CVE-2026-14034: Inappropriate implementation in WebXR.

[496371586] Low CVE-2026-14035: Insufficient policy enforcement in Bluetooth.

[496411061] Low CVE-2026-14036: Insufficient policy enforcement in Bluetooth.

[496522611] Low CVE-2026-14037: Insufficient policy enforcement in GPU.

[497241148] Low CVE-2026-14038: Insufficient validation of untrusted input in New Tab Page.

[497358012] Low CVE-2026-14039: Insufficient policy enforcement in GetUserMedia.

[497488593] Low CVE-2026-14040: Use after free in BrowserTag.

[497544822] Low CVE-2026-14041: Insufficient policy enforcement in Serial.

[497558336] Low CVE-2026-14042: Inappropriate implementation in Isolated Web Apps.

[497632232] Low CVE-2026-14043: Use after free in GetUserMedia.

[497670996] Low CVE-2026-14044: Use after free in ANGLE.

[497723649] Low CVE-2026-14045: Insufficient validation of untrusted input in Network.

[497959724] Low CVE-2026-14046: Inappropriate implementation in CustomTabs.

[498864176] Low CVE-2026-14047: Insufficient policy enforcement in Extensions.

[499189601] Low CVE-2026-14048: Use after free in Chromecast.

[501659888] Low CVE-2026-14049: Inappropriate implementation in GPU.

[501708647] Low CVE-2026-14050: Insufficient policy enforcement in Passwords.

[501747804] Low CVE-2026-14051: Uninitialized Use in GamepadAPI.

[501810874] Low CVE-2026-14052: Insufficient policy enforcement in FileSystem.

[501836539] Low CVE-2026-14053: Insufficient policy enforcement in Extensions.

[501851312] Low CVE-2026-14054: Insufficient policy enforcement in Network.

[501857663] Low CVE-2026-14055: Insufficient validation of untrusted input in Device Trust.

[501888426] Low CVE-2026-14056: Insufficient validation of untrusted input in Media.

[502212647] Low CVE-2026-14057: Insufficient policy enforcement in FedCM.

[502354038] Low CVE-2026-14058: Policy bypass in Parser.

[502363986] Low CVE-2026-14059: Insufficient policy enforcement in Related-Website-Sets.

[502372527] Low CVE-2026-14060: Insufficient validation of untrusted input in Chromoting.

[502434484] Low CVE-2026-14061: Inappropriate implementation in Dawn.

[502448128] Low CVE-2026-14062: Inappropriate implementation in Views.

[502473563] Low CVE-2026-14063: Out of bounds memory access in Chromecast.

[502714977] Low CVE-2026-14064: Use after free in PageInfo.

[503617508] Low CVE-2026-14065: Insufficient validation of untrusted input in PageInfo.

[503779807] Low CVE-2026-14066: Insufficient validation of untrusted input in Chrome for iOS.

[504069465] Low CVE-2026-14067: Use after free in Chrome for iOS.

[504210171] Low CVE-2026-14068: Inappropriate implementation in Omnibox.

[505136542] Low CVE-2026-14069: Integer overflow in WebNN.

[505137978] Low CVE-2026-14070: Uninitialized Use in WebNN.

[506143724] Low CVE-2026-14071: Side-channel information leakage in WebAudio.

[507099867] Low CVE-2026-14072: Incorrect security UI in SplitView.

[507237563] Low CVE-2026-14073: Insufficient policy enforcement in WebXR.

[511743480] Low CVE-2026-14074: Side-channel information leakage in WebAuthentication.

[511808800] Low CVE-2026-14075: Policy bypass in Chrome for iOS.

[511815165] Low CVE-2026-14076: Policy bypass in Network.

[511869411] Low CVE-2026-14077: Incorrect security UI in Select.

[512953564] Low CVE-2026-14078: Policy bypass in WebRTC.

[512971938] Low CVE-2026-14079: Policy bypass in Network.

[512997517] Low CVE-2026-14080: Insufficient validation of untrusted input in TabSwitcher.

[513030698] Low CVE-2026-14081: Insufficient policy enforcement in DevTools.

[513049578] Low CVE-2026-14082: Race in Storage.

[513128322] Low CVE-2026-14083: Insufficient validation of untrusted input in HTML.

[513138148] Low CVE-2026-14084: Insufficient validation of untrusted input in Chromoting.

[513155863] Low CVE-2026-14085: Side-channel information leakage in CSS.

[513169718] Low CVE-2026-14086: Insufficient policy enforcement in HID.

[513177237] Low CVE-2026-14087: Insufficient validation of untrusted input in WebNN.

[513178869] Low CVE-2026-14088: Uninitialized Use in Canvas.

[513188254] Low CVE-2026-14089: Insufficient validation of untrusted input in PopupBlocker.

[513194241] Low CVE-2026-14090: Out of bounds read in CameraCapture.

[513208773] Low CVE-2026-14091: Use after free in DevTools.

[513212892] Low CVE-2026-14092: Insufficient policy enforcement in Privacy.

[513240099] Low CVE-2026-14093: Use after free in Cast.

[513264273] Low CVE-2026-14094: Use after free in Installer.

[513271007] Low CVE-2026-14095: Insufficient validation of untrusted input in Browser.

[513310821] Low CVE-2026-14096: Object lifecycle issue in Input.

[513333529] Low CVE-2026-14097: Inappropriate implementation in WebAppInstalls.

[513375767] Low CVE-2026-14098: Inappropriate implementation in CSS.

[513382161] Low CVE-2026-14099: Use after free in Chrome for iOS.

[513383891] Low CVE-2026-14100: Insufficient data validation in NetworkCache.

[513454805] Low CVE-2026-14101: Insufficient policy enforcement in Sandbox.

[513455047] Low CVE-2026-14102: Use after free in Passwords.

[513465245] Low CVE-2026-14103: Use after free in SSL.

[513484193] Low CVE-2026-14104: Insufficient validation of untrusted input in WebAppInstalls.

[513528117] Low CVE-2026-14105: Insufficient policy enforcement in Speech.

[513532778] Low CVE-2026-14106: Insufficient validation of untrusted input in Text.

[513544566] Low CVE-2026-14107: Use after free in Scheduling.

[513689974] Low CVE-2026-14108: Use after free in PDFium.

[513694957] Low CVE-2026-14109: Insufficient policy enforcement in Mojo.

[513698452] Low CVE-2026-14110: Inappropriate implementation in DarkMode.

[513710926] Low CVE-2026-14111: Use after free in WebProtect.

[513713946] Low CVE-2026-14112: Inappropriate implementation in Enterprise.

[513737335] Low CVE-2026-14113: Use after free in Updater.

[513743129] Low CVE-2026-14114: Inappropriate implementation in WebAppInstalls.

[513745699] Low CVE-2026-14115: Insufficient validation of untrusted input in Cast.

[513747800] Low CVE-2026-14116: Insufficient validation of untrusted input in DevTools.

[513751020] Low CVE-2026-14117: Insufficient validation of untrusted input in DevTools.

[513772764] Low CVE-2026-14118: Insufficient data validation in DevTools.

[513775483] Low CVE-2026-14119: Type Confusion in Bluetooth.

[513777411] Low CVE-2026-14120: Inappropriate implementation in DevTools.

[513789382] Low CVE-2026-14121: Use after free in Chromoting.

[513824891] Low CVE-2026-14122: Insufficient validation of untrusted input in WebAppInstalls.

[513856644] Low CVE-2026-14123: Incorrect security UI in Chrome for iOS.

[513867710] Low CVE-2026-14124: Inappropriate implementation in CredentialProvider.

[513918431] Low CVE-2026-14125: Uninitialized Use in ANGLE.

[513992796] Low CVE-2026-14126: Incorrect security UI in UI.

[514009654] Low CVE-2026-14127: Inappropriate implementation in Printing.

[514015836] Low CVE-2026-14128: Insufficient data validation in Chrome for iOS.

[514018024] Low CVE-2026-14129: Incorrect security UI in PreviewTab.

[514019522] Low CVE-2026-14130: Incorrect security UI in Omnibox.

[514020982] Low CVE-2026-14131: Insufficient validation of untrusted input in WebAppInstalls.

[514039492] Low CVE-2026-14132: Inappropriate implementation in WebXR.

[514039947] Low CVE-2026-14133: Race in History Embeddings.

[514055973] Low CVE-2026-14134: Inappropriate implementation in Autofill.

[514058566] Low CVE-2026-14135: Insufficient validation of untrusted input in Network.

[514068611] Low CVE-2026-14136: Incorrect security UI in Chrome for iOS.

[514070067] Low CVE-2026-14137: Insufficient validation of untrusted input in Chrome for iOS.

[514071775] Low CVE-2026-14138: Inappropriate implementation in WebAppInstalls.

[514072495] Low CVE-2026-14139: Inappropriate implementation in TabStrip.

[514072607] Low CVE-2026-14140: Insufficient validation of untrusted input in Input.

[514072867] Low CVE-2026-14141: Incorrect security UI in Document Picture-in-Picture.

[514073460] Low CVE-2026-14142: Inappropriate implementation in Extensions.

[514075028] Low CVE-2026-14143: Incorrect security UI in Passwords.

[514079793] Low CVE-2026-14144: Incorrect security UI in Views.

[514485825] Low CVE-2026-14145: Inappropriate implementation in CSS.

[514550047] Low CVE-2026-14146: Inappropriate implementation in CSS.

[514632767] Low CVE-2026-14147: Inappropriate implementation in CSS.

[515426873] Low CVE-2026-14148: Type Confusion in CSS.

[515427046] Low CVE-2026-14149: Use after free in Audio.

[517376041] Low CVE-2026-14150: Insufficient validation of untrusted input in Speech.

[517381770] Low CVE-2026-14151: Inappropriate implementation in AI.

[517534944] Low CVE-2026-14152: Out of bounds write in ANGLE.

[517684077] Low CVE-2026-14153: Inappropriate implementation in Glic.

[517741170] Low CVE-2026-14154: Inappropriate implementation in DevTools.

[518246925] Low CVE-2026-14155: Insufficient policy enforcement in StorageAccessAPI.

[518247789] Low CVE-2026-14156: Policy bypass in StorageAccessAPI.

[source]

chromium -- security fixes

Details

References

CVE Name	CVE-2026-13774
CVE Name	CVE-2026-13775
CVE Name	CVE-2026-13776
CVE Name	CVE-2026-13777
CVE Name	CVE-2026-13778
CVE Name	CVE-2026-13779
CVE Name	CVE-2026-13780
CVE Name	CVE-2026-13781
CVE Name	CVE-2026-13782
CVE Name	CVE-2026-13783
CVE Name	CVE-2026-13784
CVE Name	CVE-2026-13785
CVE Name	CVE-2026-13786
CVE Name	CVE-2026-13787
CVE Name	CVE-2026-13788
CVE Name	CVE-2026-13789
CVE Name	CVE-2026-13790
CVE Name	CVE-2026-13791
CVE Name	CVE-2026-13792
CVE Name	CVE-2026-13793
CVE Name	CVE-2026-13794
CVE Name	CVE-2026-13795
CVE Name	CVE-2026-13796
CVE Name	CVE-2026-13797
CVE Name	CVE-2026-13798
CVE Name	CVE-2026-13799
CVE Name	CVE-2026-13800
CVE Name	CVE-2026-13801
CVE Name	CVE-2026-13802
CVE Name	CVE-2026-13803
CVE Name	CVE-2026-13804
CVE Name	CVE-2026-13805
CVE Name	CVE-2026-13806
CVE Name	CVE-2026-13807
CVE Name	CVE-2026-13808
CVE Name	CVE-2026-13809
CVE Name	CVE-2026-13810
CVE Name	CVE-2026-13811
CVE Name	CVE-2026-13812
CVE Name	CVE-2026-13813
CVE Name	CVE-2026-13814
CVE Name	CVE-2026-13815
CVE Name	CVE-2026-13816
CVE Name	CVE-2026-13817
CVE Name	CVE-2026-13818
CVE Name	CVE-2026-13819
CVE Name	CVE-2026-13820
CVE Name	CVE-2026-13821
CVE Name	CVE-2026-13822
CVE Name	CVE-2026-13823
CVE Name	CVE-2026-13824
CVE Name	CVE-2026-13825
CVE Name	CVE-2026-13826
CVE Name	CVE-2026-13827
CVE Name	CVE-2026-13828
CVE Name	CVE-2026-13829
CVE Name	CVE-2026-13830
CVE Name	CVE-2026-13831
CVE Name	CVE-2026-13832
CVE Name	CVE-2026-13833
CVE Name	CVE-2026-13834
CVE Name	CVE-2026-13835
CVE Name	CVE-2026-13836
CVE Name	CVE-2026-13837
CVE Name	CVE-2026-13838
CVE Name	CVE-2026-13839
CVE Name	CVE-2026-13840
CVE Name	CVE-2026-13841
CVE Name	CVE-2026-13842
CVE Name	CVE-2026-13843
CVE Name	CVE-2026-13844
CVE Name	CVE-2026-13845
CVE Name	CVE-2026-13846
CVE Name	CVE-2026-13847
CVE Name	CVE-2026-13848
CVE Name	CVE-2026-13849
CVE Name	CVE-2026-13850
CVE Name	CVE-2026-13851
CVE Name	CVE-2026-13852
CVE Name	CVE-2026-13853
CVE Name	CVE-2026-13854
CVE Name	CVE-2026-13855
CVE Name	CVE-2026-13856
CVE Name	CVE-2026-13857
CVE Name	CVE-2026-13858
CVE Name	CVE-2026-13859
CVE Name	CVE-2026-13860
CVE Name	CVE-2026-13861
CVE Name	CVE-2026-13862
CVE Name	CVE-2026-13863
CVE Name	CVE-2026-13864
CVE Name	CVE-2026-13865
CVE Name	CVE-2026-13866
CVE Name	CVE-2026-13867
CVE Name	CVE-2026-13868
CVE Name	CVE-2026-13869
CVE Name	CVE-2026-13870
CVE Name	CVE-2026-13871
CVE Name	CVE-2026-13872
CVE Name	CVE-2026-13873
CVE Name	CVE-2026-13874
CVE Name	CVE-2026-13875
CVE Name	CVE-2026-13876
CVE Name	CVE-2026-13877
CVE Name	CVE-2026-13878
CVE Name	CVE-2026-13879
CVE Name	CVE-2026-13880
CVE Name	CVE-2026-13881
CVE Name	CVE-2026-13882
CVE Name	CVE-2026-13883
CVE Name	CVE-2026-13884
CVE Name	CVE-2026-13885
CVE Name	CVE-2026-13886
CVE Name	CVE-2026-13887
CVE Name	CVE-2026-13888
CVE Name	CVE-2026-13889
CVE Name	CVE-2026-13890
CVE Name	CVE-2026-13891
CVE Name	CVE-2026-13892
CVE Name	CVE-2026-13893
CVE Name	CVE-2026-13894
CVE Name	CVE-2026-13895
CVE Name	CVE-2026-13896
CVE Name	CVE-2026-13897
CVE Name	CVE-2026-13898
CVE Name	CVE-2026-13899
CVE Name	CVE-2026-13900
CVE Name	CVE-2026-13901
CVE Name	CVE-2026-13902
CVE Name	CVE-2026-13903
CVE Name	CVE-2026-13904
CVE Name	CVE-2026-13905
CVE Name	CVE-2026-13906
CVE Name	CVE-2026-13907
CVE Name	CVE-2026-13908
CVE Name	CVE-2026-13909
CVE Name	CVE-2026-13910
CVE Name	CVE-2026-13911
CVE Name	CVE-2026-13912
CVE Name	CVE-2026-13913
CVE Name	CVE-2026-13914
CVE Name	CVE-2026-13915
CVE Name	CVE-2026-13916
CVE Name	CVE-2026-13917
CVE Name	CVE-2026-13918
CVE Name	CVE-2026-13919
CVE Name	CVE-2026-13920
CVE Name	CVE-2026-13921
CVE Name	CVE-2026-13922
CVE Name	CVE-2026-13923
CVE Name	CVE-2026-13924
CVE Name	CVE-2026-13925
CVE Name	CVE-2026-13926
CVE Name	CVE-2026-13927
CVE Name	CVE-2026-13928
CVE Name	CVE-2026-13929
CVE Name	CVE-2026-13930
CVE Name	CVE-2026-13931
CVE Name	CVE-2026-13932
CVE Name	CVE-2026-13933
CVE Name	CVE-2026-13934
CVE Name	CVE-2026-13935
CVE Name	CVE-2026-13936
CVE Name	CVE-2026-13937
CVE Name	CVE-2026-13938
CVE Name	CVE-2026-13939
CVE Name	CVE-2026-13940
CVE Name	CVE-2026-13941
CVE Name	CVE-2026-13942
CVE Name	CVE-2026-13943
CVE Name	CVE-2026-13944
CVE Name	CVE-2026-13945
CVE Name	CVE-2026-13946
CVE Name	CVE-2026-13947
CVE Name	CVE-2026-13948
CVE Name	CVE-2026-13949
CVE Name	CVE-2026-13950
CVE Name	CVE-2026-13951
CVE Name	CVE-2026-13952
CVE Name	CVE-2026-13953
CVE Name	CVE-2026-13954
CVE Name	CVE-2026-13955
CVE Name	CVE-2026-13956
CVE Name	CVE-2026-13957
CVE Name	CVE-2026-13958
CVE Name	CVE-2026-13959
CVE Name	CVE-2026-13960
CVE Name	CVE-2026-13961
CVE Name	CVE-2026-13962
CVE Name	CVE-2026-13963
CVE Name	CVE-2026-13964
CVE Name	CVE-2026-13965
CVE Name	CVE-2026-13966
CVE Name	CVE-2026-13967
CVE Name	CVE-2026-13968
CVE Name	CVE-2026-13969
CVE Name	CVE-2026-13970
CVE Name	CVE-2026-13971
CVE Name	CVE-2026-13972
CVE Name	CVE-2026-13973
CVE Name	CVE-2026-13974
CVE Name	CVE-2026-13975
CVE Name	CVE-2026-13976
CVE Name	CVE-2026-13977
CVE Name	CVE-2026-13978
CVE Name	CVE-2026-13979
CVE Name	CVE-2026-13980
CVE Name	CVE-2026-13981
CVE Name	CVE-2026-13982
CVE Name	CVE-2026-13983
CVE Name	CVE-2026-13984
CVE Name	CVE-2026-13985
CVE Name	CVE-2026-13986
CVE Name	CVE-2026-13987
CVE Name	CVE-2026-13988
CVE Name	CVE-2026-13989
CVE Name	CVE-2026-13990
CVE Name	CVE-2026-13991
CVE Name	CVE-2026-13992
CVE Name	CVE-2026-13993
CVE Name	CVE-2026-13994
CVE Name	CVE-2026-13995
CVE Name	CVE-2026-13996
CVE Name	CVE-2026-13997
CVE Name	CVE-2026-13998
CVE Name	CVE-2026-13999
CVE Name	CVE-2026-14000
CVE Name	CVE-2026-14001
CVE Name	CVE-2026-14002
CVE Name	CVE-2026-14003
CVE Name	CVE-2026-14004
CVE Name	CVE-2026-14005
CVE Name	CVE-2026-14006
CVE Name	CVE-2026-14007
CVE Name	CVE-2026-14008
CVE Name	CVE-2026-14009
CVE Name	CVE-2026-14010
CVE Name	CVE-2026-14011
CVE Name	CVE-2026-14012
CVE Name	CVE-2026-14013
CVE Name	CVE-2026-14014
CVE Name	CVE-2026-14015
CVE Name	CVE-2026-14016
CVE Name	CVE-2026-14017
CVE Name	CVE-2026-14018
CVE Name	CVE-2026-14019
CVE Name	CVE-2026-14020
CVE Name	CVE-2026-14021
CVE Name	CVE-2026-14022
CVE Name	CVE-2026-14023
CVE Name	CVE-2026-14024
CVE Name	CVE-2026-14025
CVE Name	CVE-2026-14026
CVE Name	CVE-2026-14027
CVE Name	CVE-2026-14028
CVE Name	CVE-2026-14030
CVE Name	CVE-2026-14031
CVE Name	CVE-2026-14032
CVE Name	CVE-2026-14033
CVE Name	CVE-2026-14034
CVE Name	CVE-2026-14035
CVE Name	CVE-2026-14036
CVE Name	CVE-2026-14037
CVE Name	CVE-2026-14038
CVE Name	CVE-2026-14039
CVE Name	CVE-2026-14040
CVE Name	CVE-2026-14041
CVE Name	CVE-2026-14042
CVE Name	CVE-2026-14043
CVE Name	CVE-2026-14044
CVE Name	CVE-2026-14045
CVE Name	CVE-2026-14046
CVE Name	CVE-2026-14047
CVE Name	CVE-2026-14048
CVE Name	CVE-2026-14049
CVE Name	CVE-2026-14050
CVE Name	CVE-2026-14051
CVE Name	CVE-2026-14052
CVE Name	CVE-2026-14053
CVE Name	CVE-2026-14054
CVE Name	CVE-2026-14055
CVE Name	CVE-2026-14056
CVE Name	CVE-2026-14057
CVE Name	CVE-2026-14058
CVE Name	CVE-2026-14059
CVE Name	CVE-2026-14060
CVE Name	CVE-2026-14061
CVE Name	CVE-2026-14062
CVE Name	CVE-2026-14063
CVE Name	CVE-2026-14064
CVE Name	CVE-2026-14065
CVE Name	CVE-2026-14066
CVE Name	CVE-2026-14067
CVE Name	CVE-2026-14068
CVE Name	CVE-2026-14069
CVE Name	CVE-2026-14070
CVE Name	CVE-2026-14071
CVE Name	CVE-2026-14072
CVE Name	CVE-2026-14073
CVE Name	CVE-2026-14074
CVE Name	CVE-2026-14075
CVE Name	CVE-2026-14076
CVE Name	CVE-2026-14077
CVE Name	CVE-2026-14078
CVE Name	CVE-2026-14079
CVE Name	CVE-2026-14080
CVE Name	CVE-2026-14081
CVE Name	CVE-2026-14082
CVE Name	CVE-2026-14083
CVE Name	CVE-2026-14084
CVE Name	CVE-2026-14085
CVE Name	CVE-2026-14086
CVE Name	CVE-2026-14087
CVE Name	CVE-2026-14088
CVE Name	CVE-2026-14089
CVE Name	CVE-2026-14090
CVE Name	CVE-2026-14091
CVE Name	CVE-2026-14092
CVE Name	CVE-2026-14093
CVE Name	CVE-2026-14094
CVE Name	CVE-2026-14095
CVE Name	CVE-2026-14096
CVE Name	CVE-2026-14097
CVE Name	CVE-2026-14098
CVE Name	CVE-2026-14099
CVE Name	CVE-2026-14100
CVE Name	CVE-2026-14101
CVE Name	CVE-2026-14102
CVE Name	CVE-2026-14103
CVE Name	CVE-2026-14104
CVE Name	CVE-2026-14105
CVE Name	CVE-2026-14106
CVE Name	CVE-2026-14107
CVE Name	CVE-2026-14108
CVE Name	CVE-2026-14109
CVE Name	CVE-2026-14110
CVE Name	CVE-2026-14111
CVE Name	CVE-2026-14112
CVE Name	CVE-2026-14113
CVE Name	CVE-2026-14114
CVE Name	CVE-2026-14115
CVE Name	CVE-2026-14116
CVE Name	CVE-2026-14117
CVE Name	CVE-2026-14118
CVE Name	CVE-2026-14119
CVE Name	CVE-2026-14120
CVE Name	CVE-2026-14121
CVE Name	CVE-2026-14122
CVE Name	CVE-2026-14123
CVE Name	CVE-2026-14124
CVE Name	CVE-2026-14125
CVE Name	CVE-2026-14126
CVE Name	CVE-2026-14127
CVE Name	CVE-2026-14128
CVE Name	CVE-2026-14129
CVE Name	CVE-2026-14130
CVE Name	CVE-2026-14131
CVE Name	CVE-2026-14132
CVE Name	CVE-2026-14133
CVE Name	CVE-2026-14134
CVE Name	CVE-2026-14135
CVE Name	CVE-2026-14136
CVE Name	CVE-2026-14137
CVE Name	CVE-2026-14138
CVE Name	CVE-2026-14139
CVE Name	CVE-2026-14140
CVE Name	CVE-2026-14141
CVE Name	CVE-2026-14142
CVE Name	CVE-2026-14143
CVE Name	CVE-2026-14144
CVE Name	CVE-2026-14145
CVE Name	CVE-2026-14146
CVE Name	CVE-2026-14147
CVE Name	CVE-2026-14148
CVE Name	CVE-2026-14149
CVE Name	CVE-2026-14150
CVE Name	CVE-2026-14151
CVE Name	CVE-2026-14152
CVE Name	CVE-2026-14153
CVE Name	CVE-2026-14154
CVE Name	CVE-2026-14155
CVE Name	CVE-2026-14156
URL	https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html