V8
Product
V8
On CISA KEVExploited in the wild
34
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 2Low 0
Watch
Add V8 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-85046 In wildKEV | 8.8 | Sep 3 | Google Chromium V8 Type Confusion Vulnerability Affected: before 15.3.48 |
| CVE-2016-2843 | 9.8 | Mar 6 | Multiple unspecified vulnerabilities in Google V8 before 4.9.385.26, as used in Google Chrome before 49.0.2623.75, allow attackers to cause a denial of service or possibly have… Affected: through 4.9.385 |
| CVE-2016-5129 | 8.8 | Jul 23 | Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objects, which allows remote attackers to cause a denial of… Affected: through 5.2.360 |
| CVE-2016-5128 | 8.8 | Jul 23 | objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not prevent API interceptors from modifying a store target without setting a… Affected: 5.2.360 |
| CVE-2016-1678 | 8.8 | Jun 5 | objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy deoptimization, which allows remote attackers to cause a… Affected: through 5.0.71 |
| CVE-2016-1669 | 8.8 | May 14 | The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory… Affected: through 5.0.71 |
| CVE-2016-3679 | 8.8 | Mar 29 | Multiple unspecified vulnerabilities in Google V8 before 4.9.385.33, as used in Google Chrome before 49.0.2623.108, allow attackers to cause a denial of service or possibly have… Affected: through 4.9.385 |
| CVE-2016-1688 | 6.5 | Jun 5 | The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.2704.63, mishandles external string sizes, which allows… Affected: through 5.0.71 |
| CVE-2016-1677 | 6.5 | Jun 5 | uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by… Affected: through 5.1.281 |
| CVE-2015-8548 | – | Dec 14 | Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome before 47.0.2526.80, allow attackers to cause a denial of service or possibly have… Affected: through 4.7.80 |
| CVE-2015-8478 | – | Dec 6 | Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome before 47.0.2526.73, allow attackers to cause a denial of service or possibly have… Affected: through 4.6.85.23 |
| CVE-2015-7834 | – | Oct 15 | Multiple unspecified vulnerabilities in Google V8 before 4.6.85.23, as used in Google Chrome before 46.0.2490.71, allow attackers to cause a denial of service or possibly have… Affected: through 4.6.85.22 |
| CVE-2015-6580 | – | Sep 3 | Multiple unspecified vulnerabilities in Google V8 before 4.5.103.29, as used in Google Chrome before 45.0.2454.85, allow attackers to cause a denial of service or possibly have… Affected: through 4.4.63 |
| CVE-2015-5380 | – | Jul 9 | The Utf8DecoderBase::WriteUtf16Slow function in unicode-decoder.cc in Google V8, as used in Node.js before 0.12.6, io.js before 1.8.3 and 2.x before 2.3.3, and other products,… Affected: All versions, or not specified |
| CVE-2015-3910 | – | May 20 | Multiple unspecified vulnerabilities in Google V8 before 4.3.61.21, as used in Google Chrome before 43.0.2357.65, allow attackers to cause a denial of service or possibly have… Affected: through 4.3.61.20 |
| CVE-2015-3333 | – | Apr 19 | Multiple unspecified vulnerabilities in Google V8 before 4.2.77.14, as used in Google Chrome before 42.0.2311.90, allow attackers to cause a denial of service or possibly have… Affected: through 4.2.77.7 |
| CVE-2015-1242 | – | Apr 19 | The ReduceTransitionElementsKind function in hydrogen-check-elimination.cc in Google V8 before 4.2.77.8, as used in Google Chrome before 42.0.2311.90, allows remote attackers to… Affected: through 4.2.77.7 |
| CVE-2015-2238 | – | Mar 9 | Multiple unspecified vulnerabilities in Google V8 before 4.1.0.21, as used in Google Chrome before 41.0.2272.76, allow attackers to cause a denial of service or possibly have… Affected: through 4.1.0.20 |
| CVE-2015-1346 | – | Jan 22 | Multiple unspecified vulnerabilities in Google V8 before 3.30.33.15, as used in Google Chrome before 40.0.2214.91, allow attackers to cause a denial of service or possibly have… Affected: through 3.30.33.14 |
| CVE-2014-7967 | – | Oct 8 | Multiple unspecified vulnerabilities in Google V8 before 3.28.71.15, as used in Google Chrome before 38.0.2125.101, allow attackers to cause a denial of service or possibly have… Affected: through 3.28.69 |
| CVE-2014-3152 | – | May 21 | Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16, as used in Google Chrome before 35.0.1916.114, allows… Affected: through 3.25.28; 3.25.0; 3.25.1; 3.25.2; 3.25.3; 3.25.4; +23 more |
| CVE-2014-1704 | – | Mar 16 | Multiple unspecified vulnerabilities in Google V8 before 3.23.17.18, as used in Google Chrome before 33.0.1750.149, allow attackers to cause a denial of service or possibly have… Affected: through 3.23.17; 3.23.0; 3.23.1; 3.23.2; 3.23.3; 3.23.4; +12 more |
| CVE-2013-6668 | – | Mar 5 | Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome before 33.0.1750.146, allow attackers to cause a denial of service or possibly have… Affected: through 3.24.35; 3.24.0; 3.24.1; 3.24.2; 3.24.3; 3.24.4; +30 more |
| CVE-2013-6640 | – | Dec 7 | The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote attackers to… Affected: through 3.22.24; 3.22.0; 3.22.1; 3.22.2; 3.22.3; 3.22.4; +19 more |
| CVE-2013-6639 | – | Dec 7 | The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote attackers to… Affected: through 3.22.24; 3.22.0; 3.22.1; 3.22.2; 3.22.3; 3.22.4; +19 more |
| CVE-2013-6638 | – | Dec 7 | Multiple buffer overflows in runtime.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allow remote attackers to cause a denial of service or… Affected: through 3.22.24; 3.22.0; 3.22.1; 3.22.2; 3.22.3; 3.22.4; +19 more |
| CVE-2013-2838 | – | May 22 | Google V8, as used in Google Chrome before 27.0.1453.93, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors Affected: All versions, or not specified |
| CVE-2013-2632 | – | Mar 21 | Google V8 before 3.17.13, as used in Google Chrome before 27.0.1444.3, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other… Affected: through 3.17.12; 3.17.0; 3.17.1; 3.17.2; 3.17.3; 3.17.4; +7 more |
| CVE-2013-0836 | – | Jan 15 | Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, does not properly implement garbage collection, which allows remote attackers to cause a denial of service… Affected: through 3.14.5; 1.0; 2.4.0; 2.4.1; 2.4.2; 2.4.3; +34 more |
| CVE-2012-5128 | – | Nov 7 | Google V8 before 3.13.7.5, as used in Google Chrome before 23.0.1271.64, does not properly perform write operations, which allows remote attackers to cause a denial of service or… Affected: through 3.13.7; 1.0; 3.12.0; 3.12.1; 3.12.2; 3.12.3; +23 more |
| CVE-2012-5120 | – | Nov 7 | Google V8 before 3.13.7.5, as used in Google Chrome before 23.0.1271.64, on 64-bit Linux platforms allows remote attackers to cause a denial of service or possibly have… Affected: through 3.13.7; 1.0; 2.4.0; 2.4.1; 2.4.2; 2.4.3; +34 more |
| CVE-2011-5037 | – | Dec 30 | Google V8 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of… Affected: All versions, or not specified |
| CVE-2011-3886 | – | Oct 25 | Google V8, as used in Google Chrome before 15.0.874.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code… Affected: All versions, or not specified |
| CVE-2009-2555 | – | Jul 21 | Heap-based buffer overflow in src/jsregexp.cc in Google V8 before 1.1.10.14, as used in Google Chrome before 2.0.172.37, allows remote attackers to execute arbitrary code in the… Affected: through 1.0 |
Showing 34