Exploited vulnerabilities

Google

76 Google vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue76
Last 12 months11
In ransomware campaigns0
Last addition27 October 2026

The vulnerabilities76

  1. 27 October 2026CVE-2026-111497BrotliGoogle Brotli Unchecked Return Value Vulnerability
  2. 16 September 2026CVE-2026-58704PixelGoogle Pixel Improper Authorization Vulnerability
  3. 9 September 2026CVE-2026-87491Chromium V8Google Chromium V8 Out of Bounds Write Vulnerability
  4. 4 September 2026CVE-2026-85046Chromium V8Google Chromium V8 Type Confusion Vulnerability
  5. 9 June 2026CVE-2026-11645Chromium V8Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
  6. 1 April 2026CVE-2026-5281DawnGoogle Dawn Use-After-Free Vulnerability
  7. 13 March 2026CVE-2026-3910Chromium V8Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
  8. 13 March 2026CVE-2026-3909SkiaGoogle Skia Out-of-Bounds Write Vulnerability
  9. 17 February 2026CVE-2026-2441ChromiumGoogle Chromium CSS Use-After-Free Vulnerability
  10. 12 December 2025CVE-2025-14174ChromiumGoogle Chromium Out of Bounds Memory Access Vulnerability
  11. 19 November 2025CVE-2025-13223Chromium V8Google Chromium V8 Type Confusion Vulnerability
  12. 23 September 2025CVE-2025-10585Chromium V8Google Chromium V8 Type Confusion Vulnerability
  13. 22 July 2025CVE-2025-6558ChromiumGoogle Chromium ANGLE and GPU Improper Input Validation Vulnerability
  14. 2 July 2025CVE-2025-6554Chromium V8Google Chromium V8 Type Confusion Vulnerability
  15. 5 June 2025CVE-2025-5419Chromium V8Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
  16. 27 March 2025CVE-2025-2783Chromium MojoGoogle Chromium Mojo Sandbox Escape Vulnerability
  17. 28 August 2024CVE-2024-7965Chromium V8Google Chromium V8 Inappropriate Implementation Vulnerability
  18. 26 August 2024CVE-2024-7971Chromium V8Google Chromium V8 Type Confusion Vulnerability
  19. 28 May 2024CVE-2024-5274Chromium V8Google Chromium V8 Type Confusion Vulnerability
  20. 20 May 2024CVE-2024-4947Chromium V8Google Chromium V8 Type Confusion Vulnerability
  21. 16 May 2024CVE-2024-4761Chromium V8Google Chromium V8 Out-of-Bounds Memory Write Vulnerability
  22. 13 May 2024CVE-2024-4671ChromiumGoogle Chromium Visuals Use-After-Free Vulnerability
  23. 6 February 2024CVE-2023-4762Chromium V8Google Chromium V8 Type Confusion Vulnerability
  24. 17 January 2024CVE-2024-0519Chromium V8Google Chromium V8 Out-of-Bounds Memory Access Vulnerability
  25. 2 January 2024CVE-2023-7024Chromium WebRTCGoogle Chromium WebRTC Heap Buffer Overflow Vulnerability
  26. 30 November 2023CVE-2023-6345Chromium SkiaGoogle Skia Integer Overflow Vulnerability
  27. 2 October 2023CVE-2023-5217Chromium libvpxGoogle Chromium libvpx Heap Buffer Overflow Vulnerability
  28. 13 September 2023CVE-2023-4863Chromium WebPGoogle Chromium WebP Heap-Based Buffer Overflow Vulnerability
  29. 7 June 2023CVE-2023-3079Chromium V8Google Chromium V8 Type Confusion Vulnerability
  30. 21 April 2023CVE-2023-2136Chromium SkiaGoogle Chrome Skia Integer Overflow Vulnerability
  31. 17 April 2023CVE-2023-2033Chromium V8Google Chromium V8 Type Confusion Vulnerability
  32. 30 March 2023CVE-2022-3038Chromium Network ServiceGoogle Chromium Network Service Use-After-Free Vulnerability
  33. 5 December 2022CVE-2022-4262Chromium V8Google Chromium V8 Type Confusion Vulnerability
  34. 28 November 2022CVE-2022-4135Chromium GPUGoogle Chromium GPU Heap Buffer Overflow Vulnerability
  35. 28 October 2022CVE-2022-3723Chromium V8Google Chromium V8 Type Confusion Vulnerability
  36. 8 September 2022CVE-2022-3075Chromium MojoGoogle Chromium Mojo Insufficient Data Validation Vulnerability
  37. 18 August 2022CVE-2022-2856Chromium IntentsGoogle Chromium Intents Insufficient Input Validation Vulnerability
  38. 27 June 2022CVE-2021-30533Chromium PopupBlockerGoogle Chromium PopupBlocker Security Bypass Vulnerability
  39. 8 June 2022CVE-2019-5825Chromium V8Google Chromium V8 Out-of-Bounds Write Vulnerability
  40. 8 June 2022CVE-2018-6065Chromium V8Google Chromium V8 Integer Overflow Vulnerability
  41. 8 June 2022CVE-2018-17480Chromium V8Google Chromium V8 Out-of-Bounds Write Vulnerability
  42. 8 June 2022CVE-2018-17463Chromium V8Google Chromium V8 Remote Code Execution Vulnerability
  43. 8 June 2022CVE-2017-5070Chromium V8Google Chromium V8 Type Confusion Vulnerability
  44. 8 June 2022CVE-2017-5030Chromium V8Google Chromium V8 Memory Corruption Vulnerability
  45. 8 June 2022CVE-2016-5198Chromium V8Google Chromium V8 Out-of-Bounds Memory Vulnerability
  46. 8 June 2022CVE-2016-1646Chromium V8Google Chromium V8 Out-of-Bounds Read Vulnerability
  47. 23 May 2022CVE-2019-5786Chrome BlinkGoogle Chrome Blink Use-After-Free Vulnerability
  48. 23 May 2022CVE-2019-13720Chrome WebAudioGoogle Chrome WebAudio Use-After-Free Vulnerability
  49. 15 April 2022CVE-2022-1364Chromium V8Google Chromium V8 Type Confusion Vulnerability
  50. 11 April 2022CVE-2021-39793PixelGoogle Pixel Out-of-Bounds Write Vulnerability
  51. 28 March 2022CVE-2022-1096Chromium V8Google Chromium V8 Type Confusion Vulnerability
  52. 15 February 2022CVE-2022-0609Chromium AnimationGoogle Chromium Animation Use-After-Free Vulnerability
  53. 10 January 2022CVE-2020-6572Chrome MediaGoogle Chrome Media Use-After-Free Vulnerability
  54. 15 December 2021CVE-2021-4102Chromium V8Google Chromium V8 Use-After-Free Vulnerability
  55. 3 November 2021CVE-2021-38003Chromium V8Google Chromium V8 Memory Corruption Vulnerability
  56. 3 November 2021CVE-2021-38000Chromium IntentsGoogle Chromium Intents Improper Input Validation Vulnerability
  57. 3 November 2021CVE-2021-37976ChromiumGoogle Chromium Information Disclosure Vulnerability
  58. 3 November 2021CVE-2021-37975Chromium V8Google Chromium V8 Use-After-Free Vulnerability
  59. 3 November 2021CVE-2021-37973Chromium PortalsGoogle Chromium Portals Use-After-Free Vulnerability
  60. 3 November 2021CVE-2021-30633Chromium Indexed DB APIGoogle Chromium Indexed DB API Use-After-Free Vulnerability
  61. 3 November 2021CVE-2021-30632Chromium V8Google Chromium V8 Out-of-Bounds Write Vulnerability
  62. 3 November 2021CVE-2021-30563Chromium V8Google Chromium V8 Type Confusion Vulnerability
  63. 3 November 2021CVE-2021-30554Chromium WebGLGoogle Chromium WebGL Use-After-Free Vulnerability
  64. 3 November 2021CVE-2021-30551Chromium V8Google Chromium V8 Type Confusion Vulnerability
  65. 3 November 2021CVE-2021-21224Chromium V8Google Chromium V8 Type Confusion Vulnerability
  66. 3 November 2021CVE-2021-21220Chromium V8Google Chromium V8 Improper Input Validation Vulnerability
  67. 3 November 2021CVE-2021-21206Chromium BlinkGoogle Chromium Blink Use-After-Free Vulnerability
  68. 3 November 2021CVE-2021-21193Chromium BlinkGoogle Chromium Blink Use-After-Free Vulnerability
  69. 3 November 2021CVE-2021-21166ChromiumGoogle Chromium Race Condition Vulnerability
  70. 3 November 2021CVE-2021-21148Chromium V8Google Chromium V8 Heap Buffer Overflow Vulnerability
  71. 3 November 2021CVE-2020-6418Chromium V8Google Chromium V8 Type Confusion Vulnerability
  72. 3 November 2021CVE-2020-16017ChromeGoogle Chrome Use-After-Free Vulnerability
  73. 3 November 2021CVE-2020-16013Chromium V8Google Chromium V8 Incorrect Implementation Vulnerabililty
  74. 3 November 2021CVE-2020-16010Chrome for Android UIGoogle Chrome for Android UI Heap Buffer Overflow Vulnerability
  75. 3 November 2021CVE-2020-16009Chromium V8Google Chromium V8 Type Confusion Vulnerability
  76. 3 November 2021CVE-2020-15999Chrome FreeTypeGoogle Chrome FreeType Heap Buffer Overflow Vulnerability

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, Google included.

All vendorsThe catalogue on the CISA website