VuXML: chromium -- security fixes

VuXML ID	bd24bc14-b9a9-11f1-bf98-a8a1599412c6
Discovery	2026-09-22
Entry	2026-09-26

Chrome Releases reports:

This update includes 108 security fixes:

[551573368] Critical CVE-2026-95350: Buffer overflow in ANGLE.

[530045332] Critical CVE-2026-95357: Out of bounds write in GPU.

[548585299] Critical CVE-2026-95339: Use after free in ServiceWorker.

[551708184] Critical CVE-2026-95281: Buffer overflow in ANGLE.

[552665794] Critical CVE-2026-95313: Use after free in Fullscreen.

[553172761] Critical CVE-2026-95349: Buffer overflow in WebGL.

[556435507] Critical CVE-2026-95284: Buffer overflow in ANGLE.

[556576992] Critical CVE-2026-95322: Out of bounds write in GPU.

[559320837] Critical CVE-2026-95329: Out of bounds write in WebGL.

[560439699] Critical CVE-2026-95356: Use after free in WindowDialog.

[562151598] Critical CVE-2026-95310: Use after free in AdFilter.

[540265100] High CVE-2026-95301: Missing authorization in Extensions.

[543471693] High CVE-2026-95291: UI misrepresentation in SecurityIndicators.

[508462481] High CVE-2026-95355: Incorrect authorization in Navigation.

[517661385] High CVE-2026-95315: Use after free in Aura.

[520516206] High CVE-2026-95298: Use after free in Browser.

[534997484] High CVE-2026-95372: Use after free in Chromecast.

[537857253] High CVE-2026-95324: Uninitialized resource in GPU.

[543141419] High CVE-2026-95283: Buffer overflow in Tint.

[550953039] High CVE-2026-95293: Uninitialized resource in GPU.

[553116160] High CVE-2026-95274: Improper output encoding in DevTools.

[553129513] High CVE-2026-95282: Use after free in Platform.

[553130481] High CVE-2026-95373: Use after free in DevTools.

[553136141] High CVE-2026-95277: Use after free in Views.

[554558320] High CVE-2026-95348: Use after free in Bluetooth.

[555299641] High CVE-2026-95335: Use after free in HID.

[556535630] High CVE-2026-95338: Use after free in PDFium.

[556576976] High CVE-2026-95318: Buffer overflow in Video.

[557523002] High CVE-2026-95286: Type confusion in Bindings.

[558764482] High CVE-2026-95365: Type confusion in IndexedDB.

[559815527] High CVE-2026-95343: Use after free in WebAudio.

[560406548] High CVE-2026-95280: Race condition in V8.

[560536731] High CVE-2026-95304: Out of bounds write in V8.

[560536735] High CVE-2026-95306: Type confusion in V8.

[561997427] High CVE-2026-95299: Use after free in GPU.

[562242429] High CVE-2026-95351: Use after free in Views.

[495529018] Medium CVE-2026-95287: Missing authorization in Navigation.

[497204165] Medium CVE-2026-95366: Use of released resource in Core.

[497212105] Medium CVE-2026-95382: Improper input validation in Auth.

[497603247] Medium CVE-2026-95381: Improper input validation in Printing.

[500127519] Medium CVE-2026-95331: Out of bounds write in ANGLE.

[501648493] Medium CVE-2026-95297: Missing authorization in Contextual Tasks.

[502179319] Medium CVE-2026-95375: Incorrect authorization in BrowserTag.

[502242455] Medium CVE-2026-95302: Incorrect authorization in WebAPKs.

[511791538] Medium CVE-2026-95362: Cross-site request forgery in DevTools.

[513049042] Medium CVE-2026-95369: Inappropriate implementation in XML.

[513134076] Medium CVE-2026-95376: Externally controlled reference in DevTools.

[513162143] Medium CVE-2026-95359: Uninitialized resource in GPU.

[513992281] Medium CVE-2026-95294: UI misrepresentation in Browser.

[514019137] Medium CVE-2026-95337: UI misrepresentation in Messages.

[514059630] Medium CVE-2026-95346: UI misrepresentation in Chromoting.

[514072284] Medium CVE-2026-95320: Missing authorization in Navigation.

[514487499] Medium CVE-2026-95317: Incorrect authorization in MediaCapture.

[516404074] Medium CVE-2026-95345: Use after free in Actor.

[517163294] Medium CVE-2026-95330: Improper state validation in Downloads.

[517417437] Medium CVE-2026-95370: Inappropriate implementation in NFC.

[517442714] Medium CVE-2026-95303: Incomplete cleanup in SmartCard.

[517584808] Medium CVE-2026-95360: Race condition in Editing.

[517596255] Medium CVE-2026-95295: Information leak in Mobile.

[517730821] Medium CVE-2026-95276: Improper input validation in Themes.

[517802696] Medium CVE-2026-95314: Incorrect authorization in HID.

[520504291] Medium CVE-2026-95371: Missing authorization in Views.

[522061704] Medium CVE-2026-95353: Use after free in Bindings.

[522344883] Medium CVE-2026-95363: UI misrepresentation in FileSystem.

[523719002] Medium CVE-2026-95341: Improper input validation in Desktop.

[524582798] Medium CVE-2026-95354: Use after free in Verifier.

[526550688] Medium CVE-2026-95384: Race condition in Transactions Platform.

[532962621] Medium CVE-2026-95336: Information leak in Transactions Platform.

[536161355] Medium CVE-2026-95290: Missing authorization in NFC.

[536648933] Medium CVE-2026-95325: Use after free in ANGLE.

[542926849] Medium CVE-2026-95275: Incorrect reference resolution in MediaStream.

[543464436] Medium CVE-2026-95374: Incorrect authorization in Network.

[545449081] Medium CVE-2026-95300: Missing authorization in DevTools.

[545879261] Medium CVE-2026-95321: UI misrepresentation in Payments.

[546438368] Medium CVE-2026-95323: UI misrepresentation in Chromium.

[546639650] Medium CVE-2026-95332: Use of uninitialized variable in Tint.

[547832510] Medium CVE-2026-95312: Information leak in Passwords.

[548611433] Medium CVE-2026-95344: Race condition in DevTools.

[549911100] Medium CVE-2026-95289: Incorrect authorization in Scroll.

[550181232] Medium CVE-2026-95347: Use after free in Updater.

[553123003] Medium CVE-2026-95311: Free of non-heap memory in Fonts.

[553141660] Medium CVE-2026-95358: Incorrect authorization in Mobile.

[559682346] Medium CVE-2026-95333: Use after free in Metrics.

[423956129] Low CVE-2026-95307: UI misrepresentation in ExtensionsMenu.

[497094708] Low CVE-2026-95285: Missing authorization in WebView.

[497344014] Low CVE-2026-95278: Missing authorization in WakeLock.

[502077689] Low CVE-2026-95327: Information leak in Networking.

[513403696] Low CVE-2026-95334: Incorrect reference resolution in WebProtect.

[513714849] Low CVE-2026-95308: Integer overflow in Metrics.

[513781838] Low CVE-2026-95292: Incorrect authorization in Safebrowsing.

[513791872] Low CVE-2026-95352: Incorrect authorization in DevTools.

[514012689] Low CVE-2026-95279: UI misrepresentation in Omnibox.

[514524620] Low CVE-2026-95367: Information leak in DataTransfer.

[517192965] Low CVE-2026-95385: Inappropriate implementation in PlatformIntegration.

[522413520] Low CVE-2026-95368: Incorrect authorization in DevTools.

[523765972] Low CVE-2026-95319: Use after free in Printing.

[533041383] Low CVE-2026-95326: Incomplete cleanup in Bluetooth.

[533074595] Low CVE-2026-95309: UI misrepresentation in Mobile.

[533095855] Low CVE-2026-95361: Confused deputy in DevTools.

[533102653] Low CVE-2026-95288: UI misrepresentation in Mobile.

[534579660] Low CVE-2026-95380: Type confusion in V8.

[547027738] Low CVE-2026-95342: Missing authorization in V8.

[551296612] Low CVE-2026-95296: Missing authorization in Core.

[552023752] Low CVE-2026-95316: Unchecked return value in Performance.

[553148673] Low CVE-2026-95328: Confused deputy in Mobile.

[553268567] Low CVE-2026-95340: Incorrect authorization in PictureInPicture.

[553271219] Low CVE-2026-95364: Improper input validation in Passwords.

[553921181] Low CVE-2026-95305: UI misrepresentation in Chromoting.

[source]

CVE Name	CVE-2026-95274
CVE Name	CVE-2026-95275
CVE Name	CVE-2026-95276
CVE Name	CVE-2026-95277
CVE Name	CVE-2026-95278
CVE Name	CVE-2026-95279
CVE Name	CVE-2026-95280
CVE Name	CVE-2026-95281
CVE Name	CVE-2026-95282
CVE Name	CVE-2026-95283
CVE Name	CVE-2026-95284
CVE Name	CVE-2026-95285
CVE Name	CVE-2026-95286
CVE Name	CVE-2026-95287
CVE Name	CVE-2026-95288
CVE Name	CVE-2026-95289
CVE Name	CVE-2026-95290
CVE Name	CVE-2026-95291
CVE Name	CVE-2026-95292
CVE Name	CVE-2026-95293
CVE Name	CVE-2026-95294
CVE Name	CVE-2026-95295
CVE Name	CVE-2026-95296
CVE Name	CVE-2026-95297
CVE Name	CVE-2026-95298
CVE Name	CVE-2026-95299
CVE Name	CVE-2026-95300
CVE Name	CVE-2026-95301
CVE Name	CVE-2026-95302
CVE Name	CVE-2026-95303
CVE Name	CVE-2026-95304
CVE Name	CVE-2026-95305
CVE Name	CVE-2026-95306
CVE Name	CVE-2026-95307
CVE Name	CVE-2026-95308
CVE Name	CVE-2026-95309
CVE Name	CVE-2026-95310
CVE Name	CVE-2026-95311
CVE Name	CVE-2026-95312
CVE Name	CVE-2026-95313
CVE Name	CVE-2026-95314
CVE Name	CVE-2026-95315
CVE Name	CVE-2026-95316
CVE Name	CVE-2026-95317
CVE Name	CVE-2026-95318
CVE Name	CVE-2026-95319
CVE Name	CVE-2026-95320
CVE Name	CVE-2026-95321
CVE Name	CVE-2026-95322
CVE Name	CVE-2026-95323
CVE Name	CVE-2026-95324
CVE Name	CVE-2026-95325
CVE Name	CVE-2026-95326
CVE Name	CVE-2026-95327
CVE Name	CVE-2026-95328
CVE Name	CVE-2026-95329
CVE Name	CVE-2026-95330
CVE Name	CVE-2026-95331
CVE Name	CVE-2026-95332
CVE Name	CVE-2026-95333
CVE Name	CVE-2026-95334
CVE Name	CVE-2026-95335
CVE Name	CVE-2026-95336
CVE Name	CVE-2026-95337
CVE Name	CVE-2026-95338
CVE Name	CVE-2026-95339
CVE Name	CVE-2026-95340
CVE Name	CVE-2026-95341
CVE Name	CVE-2026-95342
CVE Name	CVE-2026-95343
CVE Name	CVE-2026-95344
CVE Name	CVE-2026-95345
CVE Name	CVE-2026-95346
CVE Name	CVE-2026-95347
CVE Name	CVE-2026-95348
CVE Name	CVE-2026-95349
CVE Name	CVE-2026-95350
CVE Name	CVE-2026-95351
CVE Name	CVE-2026-95352
CVE Name	CVE-2026-95353
CVE Name	CVE-2026-95354
CVE Name	CVE-2026-95355
CVE Name	CVE-2026-95356
CVE Name	CVE-2026-95357
CVE Name	CVE-2026-95358
CVE Name	CVE-2026-95359
CVE Name	CVE-2026-95360
CVE Name	CVE-2026-95361
CVE Name	CVE-2026-95362
CVE Name	CVE-2026-95363
CVE Name	CVE-2026-95364
CVE Name	CVE-2026-95365
CVE Name	CVE-2026-95366
CVE Name	CVE-2026-95367
CVE Name	CVE-2026-95368
CVE Name	CVE-2026-95369
CVE Name	CVE-2026-95370
CVE Name	CVE-2026-95371
CVE Name	CVE-2026-95372
CVE Name	CVE-2026-95373
CVE Name	CVE-2026-95374
CVE Name	CVE-2026-95375
CVE Name	CVE-2026-95376
CVE Name	CVE-2026-95380
CVE Name	CVE-2026-95381
CVE Name	CVE-2026-95382
CVE Name	CVE-2026-95384
CVE Name	CVE-2026-95385
URL	https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html

chromium -- security fixes

Details

References