CH
Browser
Chrome
On CISA KEVExploited in the wildRansomware-linked
7,406
CVEs
77
On KEV
10.0
Max CVSS
851
New 30D
Severity mix
Critical 438High 56Medium 6Low 0
Watch
Add Chrome to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-21206 In wildKEV | 8.8 | Apr 26 | Google Chromium Blink Use-After-Free Vulnerability Affected: before 89.0.4389.128 |
| CVE-2021-21220 In wildKEV | 8.8 | Apr 26 | Google Chromium V8 Improper Input Validation Vulnerability Affected: before 89.0.4389.128 |
| CVE-2021-21193 In wildKEV | 8.8 | Mar 16 | Google Chromium Blink Use-After-Free Vulnerability Affected: before 89.0.4389.90 |
| CVE-2021-21166 In wildKEV | 8.8 | Mar 9 | Google Chromium Race Condition Vulnerability Affected: before 89.0.4389.72 |
| CVE-2021-21148 In wildKEV | 8.8 | Feb 9 | Google Chromium V8 Heap Buffer Overflow Vulnerability Affected: before 88.0.4324.150 |
| CVE-2020-6572 In wildKEV | 8.8 | Jan 14 | Google Chrome Media Use-After-Free Vulnerability Affected: before 81.0.4044.92 |
| CVE-2020-16013 In wildKEV | 8.8 | Jan 8 | Google Chromium V8 Incorrect Implementation Vulnerabililty Affected: before 86.0.4240.198 |
| CVE-2020-16009 In wildKEV | 8.8 | Nov 3 | Google Chromium V8 Type Confusion Vulnerability Affected: before 86.0.4240.183 |
| CVE-2020-6418 In wildKEV | 8.8 | Feb 27 | Google Chromium V8 Type Confusion Vulnerability Affected: before 80.0.3987.122 |
| CVE-2019-13720 In wildKEV | 8.8 | Nov 25 | Google Chrome WebAudio Use-After-Free Vulnerability Affected: before 78.0.3904.87 |
| CVE-2018-17480 In wildKEV | 8.8 | Dec 11 | Google Chromium V8 Out-of-Bounds Write Vulnerability Affected: before 71.0.3578.80 |
| CVE-2018-6065 In wildKEV | 8.8 | Nov 14 | Google Chromium V8 Integer Overflow Vulnerability Affected: before 65.0.3325.146 |
| CVE-2018-17463 In wildKEV | 8.8 | Nov 14 | Google Chromium V8 Remote Code Execution Vulnerability Affected: before 70.0.3538.64 |
| CVE-2017-5070 In wildKEV | 8.8 | Oct 27 | Google Chromium V8 Type Confusion Vulnerability Affected: before 59.0.3071.86; before 59.0.3071.92 |
| CVE-2017-5030 In wildKEV | 8.8 | Apr 24 | Google Chromium V8 Memory Corruption Vulnerability Affected: before 57.0.2987.98; before 57.0.2987.108 |
| CVE-2016-5198 In wildKEV | 8.8 | Jan 19 | Google Chromium V8 Out-of-Bounds Memory Vulnerability Affected: before 54.0.2840.90; before 54.0.2840.85; before 54.0.2840.87 |
| CVE-2016-1646 In wildKEV | 8.8 | Mar 29 | Google Chromium V8 Out-of-Bounds Read Vulnerability Affected: before 49.0.2623.108 |
| CVE-2011-0611 In wildKEV | 8.8 | Apr 13 | Adobe Flash Player Remote Code Execution Vulnerability Affected: before 10.0.648.205 |
| CVE-2025-2783 In wildKEV | 8.3 | Mar 26 | Google Chromium Mojo Sandbox Escape Vulnerability Affected: 134.0.6998.177 before 134.0.6998.177 |
| CVE-2025-6554 In wildKEV | 8.1 | Jun 30 | Google Chromium V8 Type Confusion Vulnerability Affected: 138.0.7204.96 before 138.0.7204.96 |
| CVE-2011-0609 In wildKEV | 7.8 | Mar 15 | Adobe Flash Player Unspecified Vulnerability Affected: before 10.0.648.134 |
| CVE-2022-2856 In wildKEV | 6.5 | Sep 26 | Google Chromium Intents Insufficient Input Validation Vulnerability Affected: before 104.0.5112.101 |
| CVE-2021-37976 In wildKEV | 6.5 | Oct 8 | Google Chromium Information Disclosure Vulnerability Affected: before 94.0.4606.71 |
| CVE-2021-30533 In wildKEV | 6.5 | Jun 7 | Google Chromium PopupBlocker Security Bypass Vulnerability Affected: before 91.0.4472.77 |
| CVE-2019-5825 In wildKEV | 6.5 | Nov 25 | Google Chromium V8 Out-of-Bounds Write Vulnerability Affected: before 73.0.3683.86 |
| CVE-2019-5786 In wildKEV | 6.5 | Jun 27 | Google Chrome Blink Use-After-Free Vulnerability Affected: before 72.0.3626.121 |
| CVE-2021-38000 In wildKEV | 6.1 | Nov 23 | Google Chromium Intents Improper Input Validation Vulnerability Affected: before 95.0.4638.69 |
| CVE-2026-13782 | 10.0 | Jun 30 | Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-87544 | 9.8 | Sep 9 | Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted… Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87595 | 9.8 | Sep 9 | Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a… Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-87534 | 9.8 | Sep 9 | Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions… Affected: 153.0.8010.36 before 153.0.8010.36 |
| CVE-2026-84325 | 9.8 | Sep 1 | Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via… Affected: 152.0.7977.75 before 152.0.7977.75 |
| CVE-2026-79152 | 9.8 | Aug 25 | Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-installed app Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-79090 | 9.8 | Aug 25 | Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a… Affected: 152.0.7977.65 before 152.0.7977.65 |
| CVE-2026-14121 | 9.8 | Jun 30 | Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via malicious network traffic Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-14104 | 9.8 | Jun 30 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13776 | 9.8 | Jun 30 | Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-13775 | 9.8 | Jun 30 | Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a… Affected: 150.0.7871.47 before 150.0.7871.47 |
| CVE-2026-5902 | 9.8 | Apr 8 | Race in Media in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to corrupt media stream metadata via a crafted… Affected: 147.0.7727.55 before 147.0.7727.55 |
| CVE-2026-3062 | 9.8 | Feb 23 | Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page Affected: before 145.0.7632.116; before 145.0.7632.117 |
| CVE-2026-0907 | 9.8 | Jan 20 | Incorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page Affected: before 144.0.7559.59; before 144.0.7559.60 |
| CVE-2026-0906 | 9.8 | Jan 20 | Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page Affected: before 144.0.7559.59; before 144.0.7559.60 |
| CVE-2026-0905 | 9.8 | Jan 20 | Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a network log file to potentially obtain potentially sensitive… Affected: before 144.0.7559.59; before 144.0.7559.60 |
| CVE-2025-4052 | 9.8 | May 5 | Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass… Affected: before 136.0.7103.59 |
| CVE-2024-1284 | 9.8 | Feb 7 | Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: before 121.0.6167.160 |
| CVE-2024-1283 | 9.8 | Feb 7 | Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: before 121.0.6167.160 |
| CVE-2024-0808 | 9.8 | Jan 24 | Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file Affected: before 121.0.6167.85 |
| CVE-2023-1529 | 9.8 | Mar 21 | Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a malicious HID device Affected: before 111.0.5563.110 |
| CVE-2022-2587 | 9.8 | Aug 12 | Out of bounds write in Chrome OS Audio Server in Google Chrome on Chrome OS prior to 102.0.5005.125 allowed a remote attacker to potentially exploit heap corruption via crafted… Affected: before 102.0.5005.125 |
| CVE-2020-15993 | 9.8 | Nov 3 | Use after free in printing in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: before 86.0.4240.99 |
The 500 most important CVEs for this product (exploited first, then by severity)
