Google Vulnerabilities
In CISA KEV, Google entries are mostly for the Chrome browser and the open-source Chromium project it is built on (including the V8 engine), with a few for Pixel phones. The database tracks 77 Google CVE records. CISA lists 75 of them as exploited in the wild, most recently on 2026-09-16. The most affected products are Chromium V8, Chromium, Chrome.
CVEsCVE Records
77
ExploitedActively Exploited
75
Latest KEVLatest KEV Add
2026-09-16
Recently Exploited Google CVEs
CVE-2026-587048.8 HIGH
Google Pixel Improper Authorization Vulnerability
GoogleKEVEPSS 0.6%2026-09-15
CVE-2026-874918.8 HIGH
Google Chromium V8 Out of Bounds Write Vulnerability
GoogleKEVEPSS 3.1%2026-09-09
CVE-2026-850468.8 HIGH
Google Chromium V8 Type Confusion Vulnerability
GoogleKEVEPSS 48.9%2026-09-03
CVE-2026-116458.8 HIGH
Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
GoogleKEVEPSS 2.4%2026-06-08
CVE-2026-52818.8 HIGH
Google Dawn Use-After-Free Vulnerability
GoogleKEVEPSS 0.7%2026-04-01
CVE-2026-39098.8 HIGH
Google Skia Out-of-Bounds Write Vulnerability
GoogleKEVEPSS 2.3%2026-03-12
Affected Products
25 products| Product | CVEs | KEV | Latest |
|---|---|---|---|
| Chromium V8 | 41 | 41 | 2026-09-09 |
| Chromium | 6 | 6 | 2026-02-17 |
| Chrome | 3 | 1 | 2026-05-14 |
| Chromium Blink | 2 | 2 | 2021-11-03 |
| Chromium Intents | 2 | 2 | 2022-08-18 |
| Chromium Mojo | 2 | 2 | 2025-03-27 |
| Chromium Skia | 2 | 2 | 2023-11-30 |
| Pixel | 2 | 2 | 2026-09-16 |
| Chrome Blink | 1 | 1 | 2022-05-23 |
| Chrome for Android UI | 1 | 1 | 2021-11-03 |
| Chrome FreeType | 1 | 1 | 2021-11-03 |
| Chrome Media | 1 | 1 | 2022-01-10 |
| Chrome WebAudio | 1 | 1 | 2022-05-23 |
| Chromium Animation | 1 | 1 | 2022-02-15 |
| Chromium GPU | 1 | 1 | 2022-11-28 |
| Chromium Indexed DB API | 1 | 1 | 2021-11-03 |
| Chromium libvpx | 1 | 1 | 2023-10-02 |
| Chromium Network Service | 1 | 1 | 2023-03-30 |
| Chromium PopupBlocker | 1 | 1 | 2022-06-27 |
| Chromium Portals | 1 | 1 | 2021-11-03 |
| Chromium WebGL | 1 | 1 | 2021-11-03 |
| Chromium WebP | 1 | 1 | 2023-09-13 |
| Chromium WebRTC | 1 | 1 | 2024-01-02 |
| Dawn | 1 | 1 | 2026-04-01 |
| Skia | 1 | 1 | 2026-03-13 |
All Google CVEs
77 records| CVE | Title | Vendor | CVSS | EPSS | KEV | Published |
|---|---|---|---|---|---|---|
| CVE-2026-58704 | Google Pixel Improper Authorization Vulnerability | 8.8 | 0.6% | KEV | 2026-09-15 | |
| CVE-2026-87491 | Google Chromium V8 Out of Bounds Write Vulnerability | 8.8 | 3.1% | KEV | 2026-09-09 | |
| CVE-2026-85046 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 48.9% | KEV | 2026-09-03 | |
| CVE-2026-11645 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | 8.8 | 2.4% | KEV | 2026-06-08 | |
| CVE-2026-5281 | Google Dawn Use-After-Free Vulnerability | 8.8 | 0.7% | KEV | 2026-04-01 | |
| CVE-2026-3909 | Google Skia Out-of-Bounds Write Vulnerability | 8.8 | 2.3% | KEV | 2026-03-12 | |
| CVE-2026-3910 | Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability | 8.8 | 1.0% | KEV | 2026-03-12 | |
| CVE-2026-2441 | Google Chromium CSS Use-After-Free Vulnerability | 8.8 | 55.1% | KEV | 2026-02-13 | |
| CVE-2025-14174 | Google Chromium Out of Bounds Memory Access Vulnerability | 8.8 | 22.3% | KEV | 2025-12-12 | |
| CVE-2025-13223 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 5.0% | KEV | 2025-11-17 | |
| CVE-2025-10585 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 5.4% | KEV | 2025-09-24 | |
| CVE-2025-6558 | Google Chromium ANGLE and GPU Improper Input Validation Vulnerability | 8.8 | 9.5% | KEV | 2025-07-15 | |
| CVE-2025-6554 | Google Chromium V8 Type Confusion Vulnerability | 8.1 | 14.1% | KEV | 2025-06-30 | |
| CVE-2025-5419 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | 8.8 | 7.8% | KEV | 2025-06-02 | |
| CVE-2025-2783 | Google Chromium Mojo Sandbox Escape Vulnerability | 8.3 | 9.2% | KEV | 2025-03-26 | |
| CVE-2024-7965 | Google Chromium V8 Inappropriate Implementation Vulnerability | 8.8 | 18.5% | KEV | 2024-08-21 | |
| CVE-2024-7971 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 21.1% | KEV | 2024-08-21 | |
| CVE-2024-5274 | Google Chromium V8 Type Confusion Vulnerability | 8.3 | 7.5% | KEV | 2024-05-28 | |
| CVE-2024-4947 | Google Chromium V8 Type Confusion Vulnerability | 9.6 | 15.2% | KEV | 2024-05-15 | |
| CVE-2024-4761 | Google Chromium V8 Out-of-Bounds Memory Write Vulnerability | 8.3 | 11.0% | KEV | 2024-05-14 | |
| CVE-2024-4671 | Google Chromium Visuals Use-After-Free Vulnerability | 9.6 | 8.3% | KEV | 2024-05-09 | |
| CVE-2023-4762 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 41.4% | KEV | 2023-09-05 | |
| CVE-2024-0519 | Google Chromium V8 Out-of-Bounds Memory Access Vulnerability | 8.8 | 3.8% | KEV | 2024-01-16 | |
| CVE-2023-7024 | Google Chromium WebRTC Heap Buffer Overflow Vulnerability | 8.8 | 6.7% | KEV | 2023-12-21 | |
| CVE-2023-6345 | Google Skia Integer Overflow Vulnerability | 9.6 | 16.5% | KEV | 2023-11-29 | |
| CVE-2023-5217 | Google Chromium libvpx Heap Buffer Overflow Vulnerability | 8.8 | 49.0% | KEV | 2023-09-28 | |
| CVE-2023-4863 | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability | 8.8 | 100.0% | KEV | 2023-09-12 | |
| CVE-2023-3079 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 32.1% | KEV | 2023-06-05 | |
| CVE-2023-2136 | Google Chrome Skia Integer Overflow Vulnerability | 9.6 | 5.7% | KEV | 2023-04-19 | |
| CVE-2023-2033 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 40.8% | KEV | 2023-04-14 | |
| CVE-2022-3038 | Google Chromium Network Service Use-After-Free Vulnerability | 8.8 | 24.9% | KEV | 2022-09-26 | |
| CVE-2022-4262 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 23.5% | KEV | 2022-12-02 | |
| CVE-2022-4135 | Google Chromium GPU Heap Buffer Overflow Vulnerability | 9.6 | 31.9% | KEV | 2022-11-25 | |
| CVE-2022-3723 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 7.9% | KEV | 2022-11-01 | |
| CVE-2022-3075 | Google Chromium Mojo Insufficient Data Validation Vulnerability | 9.6 | 5.8% | KEV | 2022-09-26 | |
| CVE-2022-2856 | Google Chromium Intents Insufficient Input Validation Vulnerability | 6.5 | 4.5% | KEV | 2022-09-26 | |
| CVE-2021-30533 | Google Chromium PopupBlocker Security Bypass Vulnerability | 6.5 | 16.7% | KEV | 2021-06-07 | |
| CVE-2018-17463 | Google Chromium V8 Remote Code Execution Vulnerability | 8.8 | 84.6% | KEV | 2018-11-14 | |
| CVE-2018-6065 | Google Chromium V8 Integer Overflow Vulnerability | 8.8 | 60.3% | KEV | 2018-11-14 | |
| CVE-2019-5825 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 6.5 | 55.9% | KEV | 2019-11-25 | |
| CVE-2016-1646 | Google Chromium V8 Out-of-Bounds Read Vulnerability | - | 8.8 | 48.1% | KEV | 2016-03-29 |
| CVE-2017-5030 | Google Chromium V8 Memory Corruption Vulnerability | - | 8.8 | 40.6% | KEV | 2017-04-24 |
| CVE-2018-17480 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 8.8 | 35.6% | KEV | 2018-12-11 | |
| CVE-2016-5198 | Google Chromium V8 Out-of-Bounds Memory Vulnerability | - | 8.8 | 34.2% | KEV | 2017-01-19 |
| CVE-2017-5070 | Google Chromium V8 Type Confusion Vulnerability | - | 8.8 | 32.1% | KEV | 2017-10-27 |
| CVE-2019-5786 | Google Chrome Blink Use-After-Free Vulnerability | 6.5 | 61.1% | KEV | 2019-06-27 | |
| CVE-2019-13720 | Google Chrome WebAudio Use-After-Free Vulnerability | 8.8 | 49.1% | KEV | 2019-11-25 | |
| CVE-2022-1364 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 13.7% | KEV | 2022-07-26 | |
| CVE-2021-39793 | Google Pixel Out-of-Bounds Write Vulnerability | - | 7.8 | 0.7% | KEV | 2022-03-16 |
| CVE-2022-1096 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 24.7% | KEV | 2022-07-22 | |
| CVE-2022-0609 | Google Chromium Animation Use-After-Free Vulnerability | 8.8 | 22.9% | KEV | 2022-04-04 | |
| CVE-2020-6572 | Google Chrome Media Use-After-Free Vulnerability | 8.8 | 10.6% | KEV | 2021-01-14 | |
| CVE-2021-4102 | Google Chromium V8 Use-After-Free Vulnerability | 8.8 | 7.8% | KEV | 2022-02-11 | |
| CVE-2021-21224 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 84.2% | KEV | 2021-04-26 | |
| CVE-2020-6418 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 78.8% | KEV | 2020-02-27 | |
| CVE-2021-21220 | Google Chromium V8 Improper Input Validation Vulnerability | 8.8 | 70.4% | KEV | 2021-04-26 | |
| CVE-2021-30551 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 64.7% | KEV | 2021-06-15 | |
| CVE-2020-15999 | Google Chrome FreeType Heap Buffer Overflow Vulnerability | 9.6 | 63.9% | KEV | 2020-11-03 | |
| CVE-2021-30632 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 8.8 | 63.2% | KEV | 2021-10-08 | |
| CVE-2020-16009 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 48.3% | KEV | 2020-11-03 | |
| CVE-2021-38003 | Google Chromium V8 Memory Corruption Vulnerability | 8.8 | 38.6% | KEV | 2021-11-23 | |
| CVE-2021-37975 | Google Chromium V8 Use-After-Free Vulnerability | 8.8 | 34.9% | KEV | 2021-10-08 | |
| CVE-2021-30633 | Google Chromium Indexed DB API Use-After-Free Vulnerability | 9.6 | 33.2% | KEV | 2021-10-08 | |
| CVE-2021-21166 | Google Chromium Race Condition Vulnerability | 8.8 | 24.0% | KEV | 2021-03-09 | |
| CVE-2021-21148 | Google Chromium V8 Heap Buffer Overflow Vulnerability | 8.8 | 20.0% | KEV | 2021-02-09 | |
| CVE-2021-37976 | Google Chromium Information Disclosure Vulnerability | 6.5 | 19.9% | KEV | 2021-10-08 | |
| CVE-2021-37973 | Google Chromium Portals Use-After-Free Vulnerability | 9.6 | 11.7% | KEV | 2021-10-08 | |
| CVE-2021-21193 | Google Chromium Blink Use-After-Free Vulnerability | 8.8 | 9.9% | KEV | 2021-03-16 | |
| CVE-2021-21206 | Google Chromium Blink Use-After-Free Vulnerability | 8.8 | 9.3% | KEV | 2021-04-26 | |
| CVE-2021-30563 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 9.0% | KEV | 2021-08-03 | |
| CVE-2021-30554 | Google Chromium WebGL Use-After-Free Vulnerability | 8.8 | 7.4% | KEV | 2021-07-02 | |
| CVE-2020-16010 | Google Chrome for Android UI Heap Buffer Overflow Vulnerability | 9.6 | 6.4% | KEV | 2020-11-03 | |
| CVE-2021-38000 | Google Chromium Intents Improper Input Validation Vulnerability | 6.1 | 4.9% | KEV | 2021-11-23 | |
| CVE-2020-16013 | Google Chromium V8 Incorrect Implementation Vulnerabililty | 8.8 | 2.8% | KEV | 2021-01-08 | |
| CVE-2020-16017 | Google Chrome Use-After-Free Vulnerability | 9.6 | 2.7% | KEV | 2021-01-08 | |
| CVE-2026-0628 | - | 8.8 | 20.9% | 2026-01-06 | ||
| CVE-2026-8510 | - | 7.5 | 10.5% | 2026-05-14 |
Frequently Asked Questions
How many Google vulnerabilities are actively exploited?→
75 Google CVEs are in the CISA Known Exploited Vulnerabilities catalog as of 2026-10-09. The latest was added on 2026-09-16.
Which Google products have the most exploited vulnerabilities?→
- +Chromium V8: 41 CVEs (41 in KEV)
- +Chromium: 6 CVEs (6 in KEV)
- +Chrome: 3 CVEs (1 in KEV)
- +Chromium Blink: 2 CVEs (2 in KEV)
- +Chromium Intents: 2 CVEs (2 in KEV)
Where does Google publish security advisories?→
Google publishes security advisories at https://chromereleases.googleblog.com/. Check the vendor advisory for fixed versions and workarounds before applying updates.
Sources
CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Vendor and product names for exploited CVEs follow the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not affiliated with or endorsed by Google, MITRE, CISA, or FIRST.