CH
Browser
Chrome
by Google · last CVE Oct 27, 2026
On CISA KEVExploited in the wildRansomware-linked
7,406
CVEs
77
On KEV
10.0
Max CVSS
851
New 30D
Severity mix
Critical 438High 56Medium 6Low 0
Watch

Add Chrome to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-21206
In wildKEV
8.8
9%
Apr 26
Google Chromium Blink Use-After-Free Vulnerability
Affected: before 89.0.4389.128
CVE-2021-21220
In wildKEV
8.8
70%
Apr 26
Google Chromium V8 Improper Input Validation Vulnerability
Affected: before 89.0.4389.128
CVE-2021-21193
In wildKEV
8.8
10%
Mar 16
Google Chromium Blink Use-After-Free Vulnerability
Affected: before 89.0.4389.90
CVE-2021-21166
In wildKEV
8.8
24%
Mar 9
Google Chromium Race Condition Vulnerability
Affected: before 89.0.4389.72
CVE-2021-21148
In wildKEV
8.8
20%
Feb 9
Google Chromium V8 Heap Buffer Overflow Vulnerability
Affected: before 88.0.4324.150
CVE-2020-6572
In wildKEV
8.8
11%
Jan 14
Google Chrome Media Use-After-Free Vulnerability
Affected: before 81.0.4044.92
CVE-2020-16013
In wildKEV
8.8
3%
Jan 8
Google Chromium V8 Incorrect Implementation Vulnerabililty
Affected: before 86.0.4240.198
CVE-2020-16009
In wildKEV
8.8
48%
Nov 3
Google Chromium V8 Type Confusion Vulnerability
Affected: before 86.0.4240.183
CVE-2020-6418
In wildKEV
8.8
79%
Feb 27
Google Chromium V8 Type Confusion Vulnerability
Affected: before 80.0.3987.122
CVE-2019-13720
In wildKEV
8.8
49%
Nov 25
Google Chrome WebAudio Use-After-Free Vulnerability
Affected: before 78.0.3904.87
CVE-2018-17480
In wildKEV
8.8
36%
Dec 11
Google Chromium V8 Out-of-Bounds Write Vulnerability
Affected: before 71.0.3578.80
CVE-2018-6065
In wildKEV
8.8
60%
Nov 14
Google Chromium V8 Integer Overflow Vulnerability
Affected: before 65.0.3325.146
CVE-2018-17463
In wildKEV
8.8
85%
Nov 14
Google Chromium V8 Remote Code Execution Vulnerability
Affected: before 70.0.3538.64
CVE-2017-5070
In wildKEV
8.8
32%
Oct 27
Google Chromium V8 Type Confusion Vulnerability
Affected: before 59.0.3071.86; before 59.0.3071.92
CVE-2017-5030
In wildKEV
8.8
41%
Apr 24
Google Chromium V8 Memory Corruption Vulnerability
Affected: before 57.0.2987.98; before 57.0.2987.108
CVE-2016-5198
In wildKEV
8.8
34%
Jan 19
Google Chromium V8 Out-of-Bounds Memory Vulnerability
Affected: before 54.0.2840.90; before 54.0.2840.85; before 54.0.2840.87
CVE-2016-1646
In wildKEV
8.8
48%
Mar 29
Google Chromium V8 Out-of-Bounds Read Vulnerability
Affected: before 49.0.2623.108
CVE-2011-0611
In wildKEV
8.8
99%
Apr 13
Adobe Flash Player Remote Code Execution Vulnerability
Affected: before 10.0.648.205
CVE-2025-2783
In wildKEV
8.3
9%
Mar 26
Google Chromium Mojo Sandbox Escape Vulnerability
Affected: 134.0.6998.177 before 134.0.6998.177
CVE-2025-6554
In wildKEV
8.1
14%
Jun 30
Google Chromium V8 Type Confusion Vulnerability
Affected: 138.0.7204.96 before 138.0.7204.96
CVE-2011-0609
In wildKEV
7.8
64%
Mar 15
Adobe Flash Player Unspecified Vulnerability
Affected: before 10.0.648.134
CVE-2022-2856
In wildKEV
6.5
5%
Sep 26
Google Chromium Intents Insufficient Input Validation Vulnerability
Affected: before 104.0.5112.101
CVE-2021-37976
In wildKEV
6.5
20%
Oct 8
Google Chromium Information Disclosure Vulnerability
Affected: before 94.0.4606.71
CVE-2021-30533
In wildKEV
6.5
17%
Jun 7
Google Chromium PopupBlocker Security Bypass Vulnerability
Affected: before 91.0.4472.77
CVE-2019-5825
In wildKEV
6.5
56%
Nov 25
Google Chromium V8 Out-of-Bounds Write Vulnerability
Affected: before 73.0.3683.86
CVE-2019-5786
In wildKEV
6.5
61%
Jun 27
Google Chrome Blink Use-After-Free Vulnerability
Affected: before 72.0.3626.121
CVE-2021-38000
In wildKEV
6.1
5%
Nov 23
Google Chromium Intents Improper Input Validation Vulnerability
Affected: before 95.0.4638.69
CVE-2026-13782
10.0
0%
Jun 30
Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-87544
9.8
0%
Sep 9
Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted…
Affected: 153.0.8010.36 before 153.0.8010.36
CVE-2026-87595
9.8
0%
Sep 9
Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a…
Affected: 153.0.8010.36 before 153.0.8010.36
CVE-2026-87534
9.8
0%
Sep 9
Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions…
Affected: 153.0.8010.36 before 153.0.8010.36
CVE-2026-84325
9.8
0%
Sep 1
Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via…
Affected: 152.0.7977.75 before 152.0.7977.75
CVE-2026-79152
9.8
0%
Aug 25
Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-installed app
Affected: 152.0.7977.65 before 152.0.7977.65
CVE-2026-79090
9.8
0%
Aug 25
Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a…
Affected: 152.0.7977.65 before 152.0.7977.65
CVE-2026-14121
9.8
0%
Jun 30
Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via malicious network traffic
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-14104
9.8
1%
Jun 30
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13776
9.8
0%
Jun 30
Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-13775
9.8
0%
Jun 30
Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a…
Affected: 150.0.7871.47 before 150.0.7871.47
CVE-2026-5902
9.8
0%
Apr 8
Race in Media in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to corrupt media stream metadata via a crafted…
Affected: 147.0.7727.55 before 147.0.7727.55
CVE-2026-3062
9.8
0%
Feb 23
Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page
Affected: before 145.0.7632.116; before 145.0.7632.117
CVE-2026-0907
9.8
9%
Jan 20
Incorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page
Affected: before 144.0.7559.59; before 144.0.7559.60
CVE-2026-0906
9.8
0%
Jan 20
Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page
Affected: before 144.0.7559.59; before 144.0.7559.60
CVE-2026-0905
9.8
0%
Jan 20
Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a network log file to potentially obtain potentially sensitive…
Affected: before 144.0.7559.59; before 144.0.7559.60
CVE-2025-4052
9.8
1%
May 5
Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass…
Affected: before 136.0.7103.59
CVE-2024-1284
9.8
1%
Feb 7
Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: before 121.0.6167.160
CVE-2024-1283
9.8
22%
Feb 7
Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: before 121.0.6167.160
CVE-2024-0808
9.8
1%
Jan 24
Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file
Affected: before 121.0.6167.85
CVE-2023-1529
9.8
1%
Mar 21
Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a malicious HID device
Affected: before 111.0.5563.110
CVE-2022-2587
9.8
1%
Aug 12
Out of bounds write in Chrome OS Audio Server in Google Chrome on Chrome OS prior to 102.0.5005.125 allowed a remote attacker to potentially exploit heap corruption via crafted…
Affected: before 102.0.5005.125
CVE-2020-15993
9.8
1%
Nov 3
Use after free in printing in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: before 86.0.4240.99
Page 2 of 10 · 500 total
The 500 most important CVEs for this product (exploited first, then by severity)