A model’s risk score is only part of the picture: its impact depends on the data, tools, and actions its application can reach. Learn how security teams can verify that reach and choose targeted controls.
Election officials in Los Angeles County say their preliminary analysis of the federal government's list of 20,000 "likely" noncitizens registered to vote in California shows the list is "unreliable."
M-156, ChromeOS version 16836.19.0 (Browser version 156.0.8078.42) has rolled out to ChromeOS devices on the Stable channel. If you find new issues, please let us know one of the following ways: File a bug Visit our ChromeOS communities General: Chromebook Help Community Beta Specific: ChromeOS Beta Help Community Report an issue or send feedback on Chrome Interested in switching channels? Find out how. Andy Wu Google ChromeOS ChromeOS Vulnerability Rewards Program Reported Bug Fixes: N/A Other 3rd Party Security Fixes Included: Medium Fixes Compromised 3rd-party CA certificates results in compromised TLS for all clients High Fixes arc-keymaster: fall-off-end UB in CrosKeyFactory::GetOperationFactory allows guest-to-host wild indirect call High Fixes mali_kbase: double-free of dma_buf_attachment in kbase_mem_from_umm error path allows kernel memory corruption High Fixes mali: page-migration UAF in kbase_vmap_phy_pages allows unprivileged kernel memory corruption on mt8196 Android Security fixes can be found here Chrome Browser Security Fixes: [$TBD] [568422505 ] High CVE-2026-106200 Use after free in Track on 2026-10-01 [$TBD] [567936270 ] Critical CVE-2026-106347 Use after free in Track on 2026-09-30 [$TBD] [567910530 ] High CVE-2026-106204 Use after free in PDF on 2026-09-30 [$TBD] [567873463 ] High CVE-2026-106421 Use after free in PDF on 2026-09-30 [$TBD] [567447106 ] High CVE-2026-106383 Use after free in Media on 2026-09-29 [$TBD] [567538973 ] High CVE-2026-106349 Use after free in V8 on 2026-09-29 [$TBD] [567379988 ] High CVE-2026-106184 Uninitialized resource in Media on 2026-09-29 [$TBD] [567177599 ] High CVE-2026-106240 Type confusion in V8 on 2026-09-28 [$TBD] [567160164 ] Critical CVE-2026-106358 Use after free in Navigation on 2026-09-28 [$TBD] [567160162 ] High CVE-2026-106357 Use after free in WebRTC on 2026-09-28 [$1000.0] [566824998 ] High CVE-2026-106190 Use after free in Media on 2026-09-27 [$TBD] [566347711 ] High CVE-2026-106423 Use after free in Media on 2026-09-26 [$TBD] [566404364 ] High CVE-2026-106346 Improper state validation in DevTools on 2026-09-26 [$TBD] [566111249 ] High CVE-2026-106318 Use after free in Media on 2026-09-25 [$TBD] [566136674 ] High CVE-2026-106411 Use after free in Parser on 2026-09-25 [$TBD] [565774991 ] High CVE-2026-106278 Use after free in Select on 2026-09-24 [$TBD] [565797213 ] High CVE-2026-106233 Use after free in Metrics on 2026-09-24 [$TBD] [565742178 ] Low CVE-2026-106269 Use after free in CSS on 2026-09-24 [$TBD] [565742177 ] High CVE-2026-106268 Use after free in WebRTC on 2026-09-24 [$TBD] [565674529 ] High CVE-2026-106257 Use after free in HTML on 2026-09-24 [$1000.0] [565612897 ] High CVE-2026-106235 Use after free in WebAudio on 2026-09-23 [$TBD] [564085088 ] High CVE-2026-106234 Use after free in Network on 2026-09-20 [$500.0] [563673584 ] High CVE-2026-106248 Use after free in Bindings Reported by [] on 2026-09-19 [$TBD] [562043997 ] High CVE-2026-106329 Incorrect authorization in FileSystem on 2026-09-15 [$TBD] [562002095 ] High CVE-2026-106211 Use after free in TabStrip on 2026-09-15 [$TBD] [561987051 ] High CVE-2026-106379 Uninitialized resource in Skia on 2026-09-15 [$TBD] [561891645 ] High CVE-2026-106227 Use after free in Core on 2026-09-15 [$TBD] [559793873 ] High CVE-2026-106393 Use after free in Storage Reported by [Xinyang Ge ] on 2026-09-10 [$TBD] [559780376 ] High CVE-2026-106255 Race condition in V8 on 2026-09-10 [$TBD] [523750306 ] Medium CVE-2026-106301 Confused deputy in Contextual Tasks on 2026-06-13 [$TBD] [520573237 ] Medium CVE-2026-106226 Improper input validation in Compositing on 2026-06-05 [$TBD] [517689673 ] Medium CVE-2026-106228 Confused deputy in Google Lens on 2026-05-28 [$TBD] [502475175 ] Medium CVE-2026-106244 Incorrect authorization in Permissions on 2026-04-14 [$TBD] [501914204 ] Medium CVE-2026-106266 Confused deputy in Contextual Tasks on 2026-04-12 [$TBD] [497350668 ] Medium CVE-2026-106181 Incorrect reference resolution in DevTools on 2026-03-28 [$TBD] [497148613 ] Medium CVE-2026-106286 Confused deputy in Omnibox on 2026-03-28 [$TBD] [570675082 ] High CVE-2026-110171 Use after free in Media on 2026-10-06 [$TBD] [570638834 ] Critical CVE-2026-110151 Use after free in Media on 2026-10-06 [$TBD] [570461696 ] High CVE-2026-110167 Use after free in Media on 2026-10-06 [$TBD] [570167922 ] High CVE-2026-110155 Buffer overflow in PDFium on 2026-10-05 [$TBD] [570167920 ] High CVE-2026-110154 Use after free in Canvas on 2026-10-05 [$TBD] [570047270 ] High CVE-2026-110157 Use after free in SVG on 2026-10-05 [$TBD] [570050934 ] Critical CVE-2026-110148 Use after free in SVG on 2026-10-05 [$TBD] [570050928 ] High CVE-2026-110147 Use after free in PDF on 2026-10-05 [$TBD] [568899705 ] High CVE-2026-110138 Use after free in ShapeDetection on 2026-10-02 [$TBD] [568895734 ] High CVE-2026-110141 Observable discrepancy in Media on 2026-10-02 [$TBD] [568831102 ] High CVE-2026-110163 Use after free in DOM on 2026-10-02 [$TBD] [568826881 ] Critical CVE-2026-110161 Use after free in Network on 2026-10-02 [$TBD] [568719364 ] Critical CVE-2026-110136 Use after free in PDF on 2026-10-02 [$TBD] [568730794 ] High CVE-2026-110164 Use after free in DOM on 2026-10-02 [$TBD] [568719352 ] High CVE-2026-110172 Use after free in Media on 2026-10-02 [$TBD] [568437149 ] Critical CVE-2026-110149 Use after free in Browser on 2026-10-01 [$TBD] [568010382 ] High CVE-2026-110168 Use after free in V8 on 2026-10-01 [$TBD] [568037533 ] High CVE-2026-110139 Use after free in Media on 2026-09-30 [$TBD] [567088929 ] Medium CVE-2026-110169 Use after free in V8 on 2026-09-28 [$TBD] [566496747 ] High CVE-2026-110166 Buffer overflow in Animation on 2026-09-26 [$TBD] [565742182 ] High CVE-2026-110153 Use after free in Media on 2026-09-24 [$5000.0] [564573066 ] High CVE-2026-110159 Incorrect authorization in Updater on 2026-09-21 [$TBD] [562243925 ] High CVE-2026-110145 Use after free in Passwords Reported by [Xinyang Ge ] on 2026-09-15 [$TBD] [562242421 ] High CVE-2026-110158 Use after free in Passwords Reported by [Xinyang Ge ] on 2026-09-15 [$TBD] [562038980 ] High CVE-2026-110140 Type confusion in V8 on 2026-09-15 [$TBD] [561997899 ] High CVE-2026-110137 Use after free in WebRTC on 2026-09-15 [$5000.0] [561039723 ] High CVE-2026-110146 Information leak in Passwords Reported by [Hoyong Jin] on 2026-09-13 [$TBD] [554531101 ] High CVE-2026-110143 Use of uninitialized variable in ThirdParty lmza_sdk on 2026-08-29 [$TBD] [553525515 ] Medium CVE-2026-110142 Use after free in FileSystem on 2026-08-27 [$TBD] [552510359 ] High CVE-2026-110160 Missing authorization in ReadingMode on 2026-08-25 [$1000.0] [540499008 ] High CVE-2026-110162 Use after free in Desktop on 2026-07-29 [$TBD] [496308073 ] High CVE-2026-110170 Use after free in Bindings on 2026-03-25 [$TBD] [569659194 ] High CVE-2026-110920 Memory corruption in V8 on 2026-10-04 [$TBD] [569286602 ] High CVE-2026-110921 Use after free in V8 on 2026-10-04 [$TBD] [569038297 ] High CVE-2026-110917 Memory corruption in SVG on 2026-10-03 [$TBD] [568937999 ] High CVE-2026-110918 Memory corruption in Core on 2026-10-02 [$TBD] [568831769 ] High CVE-2026-110919 Use after free in V8 on 2026-10-02 [$TBD] [568719351 ] Critical CVE-2026-110922 Use after free in Prerender on 2026-10-02 [$TBD] [567638392 ] High CVE-2026-110913 Memory corruption in DOM on 2026-09-29 [$TBD] [563194341 ] Medium CVE-2026-110914 Memory corruption in Workers on 2026-09-18 [$TBD] [556272421 ] Medium CVE-2026-110915 Use after free in Compositing on 2026-09-02 [$TBD] [501886301 ] Medium CVE-2026-110916 Improper input validation in Desktop on 2026-04-12 [$TBD] [574041825 ] Critical CVE-2026-113303 Memory corruption in WebRTC on 2026-10-15 [$TBD] [572893186 ] High CVE-2026-112993 Use after free in Input on 2026-10-12 [$2000.0] [572862424 ] High CVE-2026-113339 Use after free in SVG on 2026-10-12 [$TBD] [572695599 ] High CVE-2026-113179 Use after free in Paint on 2026-10-12 [$TBD] [572598342 ] High CVE-2026-113000 Memory corruption in Paint on 2026-10-11 [$TBD] [572237007 ] High CVE-2026-113212 Memory corruption in PDF on 2026-10-10 [$TBD] [571618833 ] Critical CVE-2026-113271 Use after free in Accessibility on 2026-10-08 [$TBD] [570740320 ] Critical CVE-2026-113280 Memory corruption in Paint on 2026-10-06 [$TBD] [570715681 ] Low CVE-2026-113274 Use after free in ReadingMode on 2026-10-06 [$TBD] [570638836 ] Critical CVE-2026-113072 Memory corruption in CSS on 2026-10-06 [$TBD] [570203091 ] High CVE-2026-113160 Use after free in Turbolev on 2026-10-05 [$TBD] [570093145 ] Critical CVE-2026-113279 Memory corruption in Accessibility on 2026-10-05 [$TBD] [570167919 ] High CVE-2026-113095 Out of bounds read in Focus on 2026-10-05 [$TBD] [570003644 ] High CVE-2026-113019 Use after free in Turbolev on 2026-10-05 [$TBD] [569408568 ] High CVE-2026-113181 Use after free in Navigation on 2026-10-04 [$TBD] [569127861 ] High CVE-2026-113154 Memory corruption in Canvas on 2026-10-04 [$TBD] [569286604 ] High CVE-2026-113336 Memory corruption in Compositing on 2026-10-04 [$TBD] [568945639 ] High CVE-2026-113161 Use after free in WebRTC on 2026-10-02 [$TBD] [568906040 ] High CVE-2026-113040 Improper input validation in Proxy on 2026-10-02 [$TBD] [568822820 ] High CVE-2026-113175 Improper input validation in FileSystem on 2026-10-02 [$TBD] [568831768 ] High CVE-2026-113309 Out of bounds read in Media on 2026-10-02 [$TBD] [568831099 ] High CVE-2026-113192 Memory corruption in V8 on 2026-10-02 [$TBD] [568215670 ] High CVE-2026-113012 Improper input validation in GPU on 2026-10-01 [$TBD] [567673405 ] Medium CVE-2026-113086 Improper input validation in Input on 2026-09-29 [$TBD] [567612004 ] High CVE-2026-113093 Memory corruption in DisplayLocking on 2026-09-29 [$TBD] [567175125 ] High CVE-2026-113338 Use after free in Turbolev on 2026-09-28 [$TBD] [566687517 ] High CVE-2026-113310 Out of bounds read in Bluetooth on 2026-09-27 [$TBD] [566136673 ] High CVE-2026-113318 Memory corruption in ServiceWorker on 2026-09-25 [$2000.0] [566091009 ] High CVE-2026-113222 Use after free in V8 on 2026-09-25 [$TBD] [565838017 ] High CVE-2026-113020 Improper input validation in Date on 2026-09-24 [$TBD] [563357593 ] High CVE-2026-113324 Use after free in GPU on 2026-09-18 [$TBD] [553117109 ] High CVE-2026-113253 Use after free in Canvas on 2026-08-26 [$2000.0] [551059870 ] High CVE-2026-113058 Use after free in WebUI on 2026-08-22 [$2000.0] [548989584 ] High CVE-2026-113098 Memory corruption in CacheStorage on 2026-08-19 [$TBD] [536639352 ] High CVE-2026-113322 Memory corruption in Dawn on 2026-07-19 [$TBD] [535749304 ] High CVE-2026-113104 Memory corruption in Frames on 2026-07-16 [$3000.0] [526039697 ] High CVE-2026-113097 Use after free in FileSystem on 2026-06-20 [$TBD] [517407917 ] Medium CVE-2026-113206 Memory corruption in Omnibox on 2026-05-28 [$2000.0] [40942045] Medium CVE-2026-113068 Use after free in Input Reported by [Hafiizh (https://www.linkedin.com/in/hafiizh-7aa6bb31/) ] on 2023-11-12