Google Chrome vulnerabilities
5,831 known vulnerabilities affecting google/chrome.
Total CVEs
5,831
CISA KEV
75
actively exploited
Public exploits
88
Exploited in wild
87
Severity breakdown
CRITICAL496HIGH2798MEDIUM2448LOW79UNKNOWN10
Vulnerabilities
Page 58 of 292
CVE-2024-6291P3HIGHCVSS 8.8fixed in 126.0.6478.126≥ 126.0.6478.126, < 126.0.6478.1262024-06-24
CVE-2024-6291 [HIGH] CWE-416 CVE-2024-6291: Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to
Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2021-4322P3HIGHCVSS 8.8fixed in 91.0.4472.77≥ 91.0.4472.77, < 91.0.4472.772023-07-29
CVE-2021-4322 [HIGH] CWE-416 CVE-2021-4322: Use after free in DevTools in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced
Use after free in DevTools in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: Medium)
nvd
CVE-2024-6772P3HIGHCVSS 8.8fixed in 126.0.6478.182≥ 126.0.6478.182, < 126.0.6478.1822024-07-16
CVE-2024-6772 [HIGH] CWE-787 CVE-2024-6772: Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacke
Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2024-8362P3HIGHCVSS 8.8fixed in 128.0.6613.119≥ 128.0.6613.119, < 128.0.6613.1192024-09-03
CVE-2024-8362 [HIGH] CWE-416 CVE-2024-8362: Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to pot
Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2024-5838P3HIGHCVSS 8.8fixed in 126.0.6478.54≥ 126.0.6478.54, < 126.0.6478.542024-06-11
CVE-2024-5838 [HIGH] CWE-843 CVE-2024-5838: Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform ou
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2024-10488P3HIGHCVSS 8.8fixed in 130.0.6723.92≥ 130.0.6723.92, < 130.0.6723.922024-10-29
CVE-2024-10488 [HIGH] CWE-416 CVE-2024-10488: Use after free in WebRTC in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to potent
Use after free in WebRTC in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2024-6293P3HIGHCVSS 8.8fixed in 126.0.6478.126≥ 126.0.6478.126, < 126.0.6478.1262024-06-24
CVE-2024-6293 [HIGH] CWE-416 CVE-2024-6293: Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potenti
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2024-6290P3HIGHCVSS 8.8fixed in 126.0.6478.126≥ 126.0.6478.126, < 126.0.6478.1262024-06-24
CVE-2024-6290 [HIGH] CWE-416 CVE-2024-6290: Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potenti
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2024-6292P3HIGHCVSS 8.8fixed in 126.0.6478.126≥ 126.0.6478.126, < 126.0.6478.1262024-06-24
CVE-2024-6292 [HIGH] CWE-416 CVE-2024-6292: Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potenti
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2024-7969P3HIGHCVSS 8.8fixed in 128.0.6613.84≥ 128.0.6613.113, < 128.0.6613.1132024-08-21
CVE-2024-7969 [HIGH] CWE-843 CVE-2024-7969: Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potential
Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2024-7974P3HIGHCVSS 8.8fixed in 128.0.6613.84≥ 128.0.6613.84, < 128.0.6613.842024-08-21
CVE-2024-7974 [HIGH] CWE-20 CVE-2024-7974: Insufficient data validation in V8 API in Google Chrome prior to 128.0.6613.84 allowed a remote atta
Insufficient data validation in V8 API in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium)
nvd
CVE-2024-10231P3HIGHCVSS 8.8fixed in 130.0.6723.69≥ 130.0.6723.69, < 130.0.6723.692024-10-22
CVE-2024-10231 [HIGH] CWE-843 CVE-2024-10231: Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentiall
Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2024-5831P3HIGHCVSS 8.8fixed in 126.0.6478.54≥ 126.0.6478.54, < 126.0.6478.542024-06-11
CVE-2024-5831 [HIGH] CWE-416 CVE-2024-5831: Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentia
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2025-4372P3HIGHCVSS 8.8fixed in 136.0.7103.92≥ 136.0.7103.92, < 136.0.7103.922025-05-06
CVE-2025-4372 [HIGH] CWE-416 CVE-2025-4372: Use after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote attacker to pote
Use after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
nvd
CVE-2025-4096P3HIGHCVSS 8.8fixed in 136.0.7103.59≥ 136.0.7103.59, < 136.0.7103.592025-05-05
CVE-2025-4096 [HIGH] CWE-122 CVE-2025-4096: Heap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to po
Heap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2024-5832P3HIGHCVSS 8.8fixed in 126.0.6478.54≥ 126.0.6478.54, < 126.0.6478.542024-06-11
CVE-2024-5832 [HIGH] CWE-416 CVE-2024-5832: Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentia
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2024-8904P3HIGHCVSS 8.8fixed in 129.0.6668.58≥ 129.0.6668.58, < 129.0.6668.582024-09-17
CVE-2024-8904 [HIGH] CWE-843 CVE-2024-8904: Type Confusion in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentiall
Type Confusion in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2024-6776P3HIGHCVSS 8.8fixed in 126.0.6478.182≥ 126.0.6478.182, < 126.0.6478.1822024-07-16
CVE-2024-6776 [HIGH] CWE-416 CVE-2024-6776: Use after free in Audio in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potent
Use after free in Audio in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2025-0438P3HIGHCVSS 8.8fixed in 132.0.6834.83≥ 132.0.6834.83, < 132.0.6834.832025-01-15
CVE-2025-0438 [HIGH] CWE-121 CVE-2025-0438: Stack buffer overflow in Tracing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker t
Stack buffer overflow in Tracing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2025-0995P3HIGHCVSS 8.8fixed in 133.0.69943.98≥ 133.0.6943.98, < 133.0.6943.982025-02-15
CVE-2025-0995 [HIGH] CWE-416 CVE-2025-0995: Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentiall
Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvd