VuXML: chromium -- security fixes

VuXML ID	e725f5d5-5c24-11f1-b189-a8a1599412c6
Discovery	2026-05-27
Entry	2026-05-30

Chrome Releases reports:

This update includes 151 security fixes:

[505077859] Critical CVE-2026-9872: Out of bounds write in GPU.

[507365348] Critical CVE-2026-9873: Use after free in Network.

[500609038] Critical CVE-2026-9874: Use after free in Dawn.

[507508103] Critical CVE-2026-9875: Out of bounds read in WebGL.

[493747593] Critical CVE-2026-9876: Use after free in WebGL.

[496445460] Critical CVE-2026-9877: Use after free in ANGLE.

[499054245] Critical CVE-2026-9878: Use after free in ANGLE.

[499129768] Critical CVE-2026-9879: Out of bounds write in ANGLE.

[503615025] Critical CVE-2026-9880: Insufficient validation of untrusted input in WebGL.

[505140741] Critical CVE-2026-9881: Use after free in Bluetooth.

[506375217] Critical CVE-2026-9882: Integer overflow in ANGLE.

[506477192] Critical CVE-2026-9883: Use after free in Base.

[508289938] Critical CVE-2026-9884: Use after free in Browser.

[508452241] Critical CVE-2026-9885: Insufficient validation of untrusted input in UI.

[508456788] Critical CVE-2026-9886: Use after free in Base.

[511249104] Critical CVE-2026-9887: Use after free in Proxy.

[511715166] Critical CVE-2026-9888: Use after free in WebView.

[511727159] Critical CVE-2026-9889: Out of bounds read and write in Dawn.

[513135985] Critical CVE-2026-9890: Use after free in XR.

[513508128] Critical CVE-2026-9891: Use after free in Extensions.

[513948178] Critical CVE-2026-9892: Inappropriate implementation in Skia.

[513972075] Critical CVE-2026-9893: Use after free in Skia.

[507707838] High CVE-2026-9894: Use after free in GPU.

[491685406] High CVE-2026-9895: Out of bounds read in GPU.

[508811474] High CVE-2026-9896: Out of bounds write in V8.

[496271580] High CVE-2026-9897: Use after free in DOM.

[496282591] High CVE-2026-9898: Insufficient validation of untrusted input in GPU.

[497533569] High CVE-2026-9899: Use after free in ANGLE.

[497637277] High CVE-2026-9900: Out of bounds write in ANGLE.

[497737770] High CVE-2026-9901: Use after free in ANGLE.

[498205735] High CVE-2026-9902: Use after free in Accessibility.

[498783665] High CVE-2026-9903: Insufficient validation of untrusted input in Site Isolation.

[498804020] High CVE-2026-9904: Use after free in ANGLE.

[498883610] High CVE-2026-9905: Use after free in Accessibility.

[499005260] High CVE-2026-9906: Out of bounds write in GPU.

[499091269] High CVE-2026-9907: Out of bounds read in Dawn.

[499091328] High CVE-2026-9908: Out of bounds read in ANGLE.

[499152771] High CVE-2026-9909: Integer overflow in Skia.

[499176133] High CVE-2026-9910: Out of bounds memory access in ANGLE.

[499205491] High CVE-2026-9911: Integer overflow in ANGLE.

[499873765] High CVE-2026-9912: Inappropriate implementation in GPU.

[500046096] High CVE-2026-9913: Inappropriate implementation in ANGLE.

[500047428] High CVE-2026-9914: Insufficient validation of untrusted input in ANGLE.

[500063836] High CVE-2026-9915: Heap buffer overflow in ANGLE.

[500080303] High CVE-2026-9916: Out of bounds write in ANGLE.

[500095304] High CVE-2026-9917: Uninitialized Use in WebGL.

[500099471] High CVE-2026-9918: Inappropriate implementation in Tint.

[500114058] High CVE-2026-9919: Out of bounds read in WebGL.

[500138014] High CVE-2026-9920: Uninitialized Use in GPU.

[500150338] High CVE-2026-9921: Uninitialized Use in WebGL.

[500187083] High CVE-2026-9922: Use after free in GPU.

[500393328] High CVE-2026-9923: Use after free in Skia.

[500398345] High CVE-2026-9924: Heap buffer overflow in ANGLE.

[500536458] High CVE-2026-9925: Use after free in ANGLE.

[500540748] High CVE-2026-9926: Heap buffer overflow in ANGLE.

[500540958] High CVE-2026-9927: Use after free in ANGLE.

[501125002] High CVE-2026-9928: Out of bounds read in ANGLE.

[501367791] High CVE-2026-9929: Inappropriate implementation in WebGL.

[501499832] High CVE-2026-9930: Out of bounds write in Dawn.

[501524262] High CVE-2026-9931: Use after free in GPU.

[501563323] High CVE-2026-9932: Use after free in ANGLE.

[501575979] High CVE-2026-9933: Use after free in Input.

[501576946] High CVE-2026-9934: Use after free in Aura.

[501584689] High CVE-2026-9935: Uninitialized Use in ANGLE.

[502104354] High CVE-2026-9936: Use after free in GFX.

[502112506] High CVE-2026-9937: Use after free in UI.

[502300817] High CVE-2026-9938: Inappropriate implementation in V8.

[502735235] High CVE-2026-9939: Heap buffer overflow in WebCodecs.

[502738003] High CVE-2026-9940: Heap buffer overflow in ANGLE.

[502812366] High CVE-2026-9941: Use after free in ANGLE.

[503438092] High CVE-2026-9942: Uninitialized Use in ANGLE.

[503464551] High CVE-2026-9943: Out of bounds read in WebGL.

[503471286] High CVE-2026-9944: Uninitialized Use in ANGLE.

[503565293] High CVE-2026-9945: Use after free in Media.

[503596863] High CVE-2026-9946: Use after free in ANGLE.

[503627446] High CVE-2026-9947: Use after free in XML.

[503790201] High CVE-2026-9948: Use after free in Views.

[503793153] High CVE-2026-9949: Use after free in Core.

[503862359] High CVE-2026-9950: Insufficient validation of untrusted input in iOS.

[503873388] High CVE-2026-9951: Use after free in UI.

[503929476] High CVE-2026-9952: Use after free in WebAudio.

[503985322] High CVE-2026-9953: Out of bounds read in ANGLE.

[504175497] High CVE-2026-9954: Use after free in TabStrip.

[504184408] High CVE-2026-9955: Inappropriate implementation in iOS.

[504195132] High CVE-2026-9956: Use after free in iOS.

[504516117] High CVE-2026-9957: Use after free in PDF.

[504555886] High CVE-2026-9958: Use after free in PDFium.

[504557432] High CVE-2026-9959: Race in WebRTC.

[504573260] High CVE-2026-9960: Integer overflow in PDFium.

[504710769] High CVE-2026-9961: Use after free in SurfaceCapture.

[504716948] High CVE-2026-9962: Use after free in WebRTC.

[505143241] High CVE-2026-9963: Uninitialized Use in iOS.

[505190999] High CVE-2026-9964: Use after free in Bluetooth.

[506377574] High CVE-2026-9965: Out of bounds write in ANGLE.

[506388321] High CVE-2026-9966: Integer overflow in XML.

[506414791] High CVE-2026-9967: Out of bounds write in GPU.

[506499280] High CVE-2026-9968: Integer overflow in V8.

[506550494] High CVE-2026-9969: Insufficient validation of untrusted input in ANGLE.

[506653647] High CVE-2026-9970: Use after free in WebGL.

[508448586] High CVE-2026-9971: Inappropriate implementation in iOS.

[508463705] High CVE-2026-9972: Uninitialized Use in Gamepad.

[509268941] High CVE-2026-9973: Out of bounds write in V8.

[511710468] High CVE-2026-9974: Out of bounds write in GPU.

[511719039] High CVE-2026-9975: Out of bounds read and write in ANGLE.

[511732828] High CVE-2026-9976: Inappropriate implementation in USB.

[511741173] High CVE-2026-9977: Insufficient validation of untrusted input in WebShare.

[511741396] High CVE-2026-9978: Use after free in Glic.

[511742228] High CVE-2026-9979: Insufficient validation of untrusted input in Input.

[511776372] High CVE-2026-9980: Insufficient validation of untrusted input in Printing.

[512995705] High CVE-2026-9981: Inappropriate implementation in Skia.

[513001247] High CVE-2026-9982: Insufficient validation of untrusted input in ANGLE.

[513001309] High CVE-2026-9983: Type Confusion in Skia.

[513002543] High CVE-2026-9984: Use after free in UI.

[513019760] High CVE-2026-9985: Insufficient validation of untrusted input in Media.

[513028160] High CVE-2026-9986: Insufficient validation of untrusted input in OptimizationGuide.

[513046475] High CVE-2026-9987: Insufficient validation of untrusted input in WebAppInstalls.

[513049286] High CVE-2026-9988: Use after free in WebRTC.

[513054053] High CVE-2026-9989: Inappropriate implementation in Media.

[513128608] High CVE-2026-9990: Use after free in WebAppInstalls.

[513173565] High CVE-2026-9991: Inappropriate implementation in Media.

[513177826] High CVE-2026-9992: Use after free in Network.

[513208588] High CVE-2026-9993: Use after free in Views.

[513235131] High CVE-2026-9994: Use after free in Core.

[513256572] High CVE-2026-9995: Use after free in WebXR.

[513268100] High CVE-2026-9996: Out of bounds read in WebRTC.

[513324041] High CVE-2026-9997: Use after free in Input.

[513337118] High CVE-2026-9998: Integer overflow in Skia.

[513364480] High CVE-2026-9999: Inappropriate implementation in ANGLE.

[513505608] High CVE-2026-10000: Use after free in Passwords.

[513505927] High CVE-2026-10001: Use after free in PerformanceManager.

[513536416] High CVE-2026-10002: Use after free in PDFium.

[513609324] High CVE-2026-10003: Use after free in Views.

[513730012] High CVE-2026-10004: Insufficient validation of untrusted input in Passwords.

[513750089] High CVE-2026-10005: Use after free in WebAppInstalls.

[513750691] High CVE-2026-10006: Race in WebAudio.

[513754619] High CVE-2026-10007: Use after free in SVG.

[513768979] High CVE-2026-10008: Uninitialized Use in GPU.

[513973560] High CVE-2026-10009: Integer overflow in Skia.

[513995565] High CVE-2026-10010: Inappropriate implementation in Input.

[514017326] High CVE-2026-10011: Inappropriate implementation in Skia.

[514063977] High CVE-2026-10012: Use after free in Skia.

[514715455] High CVE-2026-10013: Use after free in WebCodecs.

[514742327] High CVE-2026-10014: Use after free in WebMIDI.

[514746176] High CVE-2026-10015: Integer overflow in WTF.

[515155946] High CVE-2026-10016: Use after free in DOM.

[504156069] Medium CVE-2026-10017: Out of bounds read in Headless.

[504175501] Medium CVE-2026-10018: Integer overflow in ANGLE.

[505056913] Medium CVE-2026-10019: Integer overflow in ANGLE.

[496565479] Medium CVE-2026-10020: Insufficient validation of untrusted input in Skia.

[497327715] Medium CVE-2026-10021: Insufficient validation of untrusted input in USB.

[513289241] Medium CVE-2026-10022: Type Confusion in V8.

[source]

CVE Name	CVE-2026-10000
CVE Name	CVE-2026-10001
CVE Name	CVE-2026-10002
CVE Name	CVE-2026-10003
CVE Name	CVE-2026-10004
CVE Name	CVE-2026-10005
CVE Name	CVE-2026-10006
CVE Name	CVE-2026-10007
CVE Name	CVE-2026-10008
CVE Name	CVE-2026-10009
CVE Name	CVE-2026-10010
CVE Name	CVE-2026-10011
CVE Name	CVE-2026-10012
CVE Name	CVE-2026-10013
CVE Name	CVE-2026-10014
CVE Name	CVE-2026-10015
CVE Name	CVE-2026-10016
CVE Name	CVE-2026-10017
CVE Name	CVE-2026-10018
CVE Name	CVE-2026-10019
CVE Name	CVE-2026-10020
CVE Name	CVE-2026-10021
CVE Name	CVE-2026-10022
CVE Name	CVE-2026-9872
CVE Name	CVE-2026-9873
CVE Name	CVE-2026-9874
CVE Name	CVE-2026-9875
CVE Name	CVE-2026-9876
CVE Name	CVE-2026-9877
CVE Name	CVE-2026-9878
CVE Name	CVE-2026-9879
CVE Name	CVE-2026-9880
CVE Name	CVE-2026-9881
CVE Name	CVE-2026-9882
CVE Name	CVE-2026-9883
CVE Name	CVE-2026-9884
CVE Name	CVE-2026-9885
CVE Name	CVE-2026-9886
CVE Name	CVE-2026-9887
CVE Name	CVE-2026-9888
CVE Name	CVE-2026-9889
CVE Name	CVE-2026-9890
CVE Name	CVE-2026-9891
CVE Name	CVE-2026-9892
CVE Name	CVE-2026-9893
CVE Name	CVE-2026-9894
CVE Name	CVE-2026-9895
CVE Name	CVE-2026-9896
CVE Name	CVE-2026-9897
CVE Name	CVE-2026-9898
CVE Name	CVE-2026-9899
CVE Name	CVE-2026-9900
CVE Name	CVE-2026-9901
CVE Name	CVE-2026-9902
CVE Name	CVE-2026-9903
CVE Name	CVE-2026-9904
CVE Name	CVE-2026-9905
CVE Name	CVE-2026-9906
CVE Name	CVE-2026-9907
CVE Name	CVE-2026-9908
CVE Name	CVE-2026-9909
CVE Name	CVE-2026-9910
CVE Name	CVE-2026-9911
CVE Name	CVE-2026-9912
CVE Name	CVE-2026-9913
CVE Name	CVE-2026-9914
CVE Name	CVE-2026-9915
CVE Name	CVE-2026-9916
CVE Name	CVE-2026-9917
CVE Name	CVE-2026-9918
CVE Name	CVE-2026-9919
CVE Name	CVE-2026-9920
CVE Name	CVE-2026-9921
CVE Name	CVE-2026-9922
CVE Name	CVE-2026-9923
CVE Name	CVE-2026-9924
CVE Name	CVE-2026-9925
CVE Name	CVE-2026-9926
CVE Name	CVE-2026-9927
CVE Name	CVE-2026-9928
CVE Name	CVE-2026-9929
CVE Name	CVE-2026-9930
CVE Name	CVE-2026-9931
CVE Name	CVE-2026-9932
CVE Name	CVE-2026-9933
CVE Name	CVE-2026-9934
CVE Name	CVE-2026-9935
CVE Name	CVE-2026-9936
CVE Name	CVE-2026-9937
CVE Name	CVE-2026-9938
CVE Name	CVE-2026-9939
CVE Name	CVE-2026-9940
CVE Name	CVE-2026-9941
CVE Name	CVE-2026-9942
CVE Name	CVE-2026-9943
CVE Name	CVE-2026-9944
CVE Name	CVE-2026-9945
CVE Name	CVE-2026-9946
CVE Name	CVE-2026-9947
CVE Name	CVE-2026-9948
CVE Name	CVE-2026-9949
CVE Name	CVE-2026-9950
CVE Name	CVE-2026-9951
CVE Name	CVE-2026-9952
CVE Name	CVE-2026-9953
CVE Name	CVE-2026-9954
CVE Name	CVE-2026-9955
CVE Name	CVE-2026-9956
CVE Name	CVE-2026-9957
CVE Name	CVE-2026-9958
CVE Name	CVE-2026-9959
CVE Name	CVE-2026-9960
CVE Name	CVE-2026-9961
CVE Name	CVE-2026-9962
CVE Name	CVE-2026-9963
CVE Name	CVE-2026-9964
CVE Name	CVE-2026-9965
CVE Name	CVE-2026-9966
CVE Name	CVE-2026-9967
CVE Name	CVE-2026-9968
CVE Name	CVE-2026-9969
CVE Name	CVE-2026-9970
CVE Name	CVE-2026-9971
CVE Name	CVE-2026-9972
CVE Name	CVE-2026-9973
CVE Name	CVE-2026-9974
CVE Name	CVE-2026-9975
CVE Name	CVE-2026-9976
CVE Name	CVE-2026-9977
CVE Name	CVE-2026-9978
CVE Name	CVE-2026-9979
CVE Name	CVE-2026-9980
CVE Name	CVE-2026-9981
CVE Name	CVE-2026-9982
CVE Name	CVE-2026-9983
CVE Name	CVE-2026-9984
CVE Name	CVE-2026-9985
CVE Name	CVE-2026-9986
CVE Name	CVE-2026-9987
CVE Name	CVE-2026-9988
CVE Name	CVE-2026-9989
CVE Name	CVE-2026-9990
CVE Name	CVE-2026-9991
CVE Name	CVE-2026-9992
CVE Name	CVE-2026-9993
CVE Name	CVE-2026-9994
CVE Name	CVE-2026-9995
CVE Name	CVE-2026-9996
CVE Name	CVE-2026-9997
CVE Name	CVE-2026-9998
CVE Name	CVE-2026-9999
URL	https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html

chromium -- security fixes

Details

References