Class familyGoogle · Chromium
Google Chrome missing authorization flaws, 2021–2026
11 Chromium CVEs with CWE-862 weaknesses, 8 Oct 2021 to 6 Oct 2026. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2021’21
2022’22
2023’23
2024’24
2025’25
10 2026’26
In CISA KEVNot in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2021-37976KEV | 8 Oct 2021 | Google Chromium Information Disclosure Vulnerability | Grouped by weakness | 67.0 |
| CVE-2026-79044 | 25 Aug 2026 | Missing authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote… | Grouped by weakness | 8.0 |
| CVE-2026-79104 | 25 Aug 2026 | Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised… | Grouped by weakness | 7.6 |
| CVE-2026-84323 | 1 Sep 2026 | Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had… | Grouped by weakness | 7.6 |
| CVE-2026-87431 | 9 Sep 2026 | Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain… | Grouped by weakness | 10.3 |
| CVE-2026-87443 | 9 Sep 2026 | Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive… | Grouped by weakness | 9.2 |
| CVE-2026-87605 | 9 Sep 2026 | Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had… | Grouped by weakness | 7.6 |
| CVE-2026-87631 | 9 Sep 2026 | Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak… | Grouped by weakness | 9.2 |
| CVE-2026-106355 | 6 Oct 2026 | Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had… | Grouped by weakness | 7.6 |
| CVE-2026-106387 | 6 Oct 2026 | Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging… | Grouped by weakness | 11.1 |
| CVE-2026-106388 | 6 Oct 2026 | Missing authorization in DataTransfer in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had… | Grouped by weakness | 6.4 |