76 CVEs in CISA KEV
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2023-4863 |
Chromium WebP | — | 0.9998 | 2023-09-13 | 2023-10-04 | Google Chromium WebP contains a heap-based buffer overflow vulnerability that al | |
CVE-2026-111497 |
Brotli | 9.2 | 0.8799 | 2026-10-27 | 2026-11-10 | Google Brotli contains an unchecked return value vulnerability that allows a rem | |
CVE-2025-14174 |
Chromium | — | 0.5533 | 2025-12-12 | 2026-01-02 | Google Chromium contains an out of bounds memory access vulnerability in ANGLE t | |
CVE-2026-2441 |
Chromium | — | 0.5496 | 2026-02-17 | 2026-03-10 | Google Chromium CSS contains a use-after-free vulnerability that could allow a r | |
CVE-2023-5217 |
Chromium libvpx | — | 0.4901 | 2023-10-02 | 2023-10-23 | Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 enco | |
CVE-2023-4762 |
Chromium V8 | — | 0.4138 | 2024-02-06 | 2024-02-27 | Google Chromium V8 contains a type confusion vulnerability that allows a remote | |
CVE-2023-2033 |
Chromium V8 | — | 0.4080 | 2023-04-17 | 2023-05-08 | Google Chromium V8 Engine contains a type confusion vulnerability that allows a | |
CVE-2023-3079 |
Chromium V8 | — | 0.3786 | 2023-06-07 | 2023-06-28 | Google Chromium V8 Engine contains a type confusion vulnerability that allows a | |
CVE-2022-4135 |
Chromium GPU | — | 0.3186 | 2022-11-28 | 2022-12-19 | Google Chromium GPU contains a heap buffer overflow vulnerability that allows a | |
CVE-2022-3038 |
Chromium Network Service | — | 0.2492 | 2023-03-30 | 2023-04-20 | Google Chromium Network Service contains a use-after-free vulnerability that all | |
CVE-2022-4262 |
Chromium V8 | — | 0.2351 | 2022-12-05 | 2022-12-26 | Google Chromium V8 Engine contains a type confusion vulnerability that allows a | |
CVE-2024-7971 |
Chromium V8 | — | 0.2101 | 2024-08-26 | 2024-09-16 | Google Chromium V8 contains a type confusion vulnerability that allows a remote | |
CVE-2024-7965 |
Chromium V8 | — | 0.1853 | 2024-08-28 | 2024-09-18 | Google Chromium V8 contains an inappropriate implementation vulnerability that a | |
CVE-2023-6345 |
Chromium Skia | — | 0.1647 | 2023-11-30 | 2023-12-21 | Google Chromium Skia contains an integer overflow vulnerability that allows a re | |
CVE-2024-4947 |
Chromium V8 | — | 0.1524 | 2024-05-20 | 2024-06-10 | Google Chromium V8 contains a type confusion vulnerability that allows a remote | |
CVE-2025-6554 |
Chromium V8 | — | 0.1414 | 2025-07-02 | 2025-07-23 | Google Chromium V8 contains a type confusion vulnerability that could allow a re | |
CVE-2026-5281 |
Dawn | — | 0.1351 | 2026-04-01 | 2026-04-15 | Google Dawn contains an use-after-free vulnerability that could allow a remote a | |
CVE-2024-4761 |
Chromium V8 | — | 0.1101 | 2024-05-16 | 2024-06-06 | Google Chromium V8 Engine contains an unspecified out-of-bounds memory write vul | |
CVE-2025-6558 |
Chromium | — | 0.1093 | 2025-07-22 | 2025-08-12 | Google Chromium contains an improper input validation vulnerability in ANGLE and | |
CVE-2025-2783 |
Chromium Mojo | — | 0.0924 | 2025-03-27 | 2025-04-17 | Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused b | |
CVE-2025-10585 |
Chromium V8 | — | 0.0897 | 2025-09-23 | 2025-10-14 | Google Chromium contains a type confusion vulnerability in the V8 JavaScript and | |
CVE-2024-4671 |
Chromium | — | 0.0835 | 2024-05-13 | 2024-06-03 | Google Chromium Visuals contains a use-after-free vulnerability that allows a re | |
CVE-2022-3723 |
Chromium V8 | — | 0.0792 | 2022-10-28 | 2022-11-18 | Google Chromium V8 Engine contains a type confusion vulnerability that allows a | |
CVE-2025-5419 |
Chromium V8 | — | 0.0782 | 2025-06-05 | 2025-06-26 | Google Chromium V8 contains an out-of-bounds read and write vulnerability that c | |
CVE-2024-5274 |
Chromium V8 | — | 0.0773 | 2024-05-28 | 2024-06-18 | Google Chromium V8 contains a type confusion vulnerability that allows a remote | |
CVE-2023-7024 |
Chromium WebRTC | — | 0.0667 | 2024-01-02 | 2024-01-23 | Google Chromium WebRTC, an open-source project providing web browsers with real- | |
CVE-2022-3075 |
Chromium Mojo | — | 0.0585 | 2022-09-08 | 2022-09-29 | Google Chromium Mojo contains an insufficient data validation vulnerability that | |
CVE-2023-2136 |
Chromium Skia | — | 0.0574 | 2023-04-21 | 2023-05-12 | Google Chromium Skia contains an integer overflow vulnerability that allows a re | |
CVE-2025-13223 |
Chromium V8 | — | 0.0490 | 2025-11-19 | 2025-12-10 | Google Chromium V8 contains a type confusion vulnerability that allows for heap | |
CVE-2022-2856 |
Chromium Intents | — | 0.0456 | 2022-08-18 | 2022-09-08 | Google Chromium Intents contains an insufficient validation of untrusted input v | |
CVE-2024-0519 |
Chromium V8 | — | 0.0380 | 2024-01-17 | 2024-02-07 | Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability | |
CVE-2026-87491 |
Chromium V8 | — | 0.0351 | 2026-09-09 | 2026-09-23 | Google Chromium V8 contains an out of bounds write vulnerability that allows a r | |
CVE-2026-3910 |
Chromium V8 | — | 0.0269 | 2026-03-13 | 2026-03-27 | Google Chromium V8 contains an improper restriction of operations within the bou | |
CVE-2026-11645 |
Chromium V8 | — | 0.0244 | 2026-06-09 | 2026-06-23 | Google Chromium V8 out-of-bounds read and write vulnerability that could allow a | |
CVE-2026-3909 |
Skia | — | 0.0234 | 2026-03-13 | 2026-03-27 | Google Skia contains an out-of-bounds write vulnerability that could allow a rem | |
CVE-2026-85046 |
Chromium V8 | — | 0.0181 | 2026-09-04 | 2026-09-18 | Google Chromium V8 contains a type confusion vulnerability that allows a remote | |
CVE-2026-58704 |
Pixel | — | 0.0063 | 2026-09-16 | 2026-09-19 | Google Pixel devices contain an improper authorization vulnerability in the cell | |
CVE-2021-30533 |
Chromium PopupBlocker | — | — | 2022-06-27 | 2022-07-18 | Google Chromium PopupBlocker contains an insufficient policy enforcement vulnera | |
CVE-2019-5825 |
Chromium V8 | — | — | 2022-06-08 | 2022-06-22 | Google Chromium V8 Engine contains an out-of-bounds write vulnerability that all | |
CVE-2018-6065 |
Chromium V8 | — | — | 2022-06-08 | 2022-06-22 | Google Chromium V8 Engine contains an integer overflow vulnerability that allows | |
CVE-2018-17480 |
Chromium V8 | — | — | 2022-06-08 | 2022-06-22 | Google Chromium V8 Engine contains out-of-bounds write vulnerability that allows | |
CVE-2018-17463 |
Chromium V8 | — | — | 2022-06-08 | 2022-06-22 | Google Chromium V8 Engine contains an unspecified vulnerability that allows a re | |
CVE-2017-5070 |
Chromium V8 | — | — | 2022-06-08 | 2022-06-22 | Google Chromium V8 Engine contains a type confusion vulnerability that allows a | |
CVE-2017-5030 |
Chromium V8 | — | — | 2022-06-08 | 2022-06-22 | Google Chromium V8 Engine contains a memory corruption vulnerability that allows | |
CVE-2016-5198 |
Chromium V8 | — | — | 2022-06-08 | 2022-06-22 | Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability | |
CVE-2016-1646 |
Chromium V8 | — | — | 2022-06-08 | 2022-06-22 | Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allo | |
CVE-2019-5786 |
Chrome Blink | — | — | 2022-05-23 | 2022-06-13 | Google Chrome Blink contains a heap use-after-free vulnerability that allows an | |
CVE-2019-13720 |
Chrome WebAudio | — | — | 2022-05-23 | 2022-06-13 | Google Chrome WebAudio contains a use-after-free vulnerability that allows a rem | |
CVE-2022-1364 |
Chromium V8 | — | — | 2022-04-15 | 2022-05-06 | Google Chromium V8 Engine contains a type confusion vulnerability that allows a | |
CVE-2021-39793 |
Pixel | — | — | 2022-04-11 | 2022-05-02 | Google Pixel contains a possible out-of-bounds write due to a logic error in the | |
CVE-2022-1096 |
Chromium V8 | — | — | 2022-03-28 | 2022-04-18 | Google Chromium V8 Engine contains a type confusion vulnerability that allows a | |
CVE-2022-0609 |
Chromium Animation | — | — | 2022-02-15 | 2022-03-01 | Google Chromium Animation contains a use-after-free vulnerability that allows a | |
CVE-2020-6572 |
Chrome Media | — | — | 2022-01-10 | 2022-07-10 | Google Chrome Media contains a use-after-free vulnerability that allows a remote | |
CVE-2021-4102 |
Chromium V8 | — | — | 2021-12-15 | 2021-12-29 | Google Chromium V8 Engine contains a use-after-free vulnerability that allows a | |
CVE-2020-16010 |
Chrome for Android UI | — | — | 2021-11-03 | 2022-05-03 | Google Chrome for Android UI contains a heap buffer overflow vulnerability that | |
CVE-2020-15999 |
Chrome FreeType | — | — | 2021-11-03 | 2021-11-17 | Google Chrome uses FreeType, an open-source software library to render fonts, wh | |
CVE-2021-21166 |
Chromium | — | — | 2021-11-03 | 2021-11-17 | Google Chromium contains a race condition vulnerability that allows a remote att | |
CVE-2020-16017 |
Chrome | — | — | 2021-11-03 | 2022-05-03 | Google Chrome contains a use-after-free vulnerability that allows a remote attac | |
CVE-2021-37976 |
Chromium | — | — | 2021-11-03 | 2021-11-17 | Google Chromium contains an information disclosure vulnerability within the core | |
CVE-2020-16009 |
Chromium V8 | — | — | 2021-11-03 | 2022-05-03 | Google Chromium V8 Engine contains a type confusion vulnerability that allows a | |
CVE-2021-30632 |
Chromium V8 | — | — | 2021-11-03 | 2021-11-17 | Google Chromium V8 Engine contains an out-of-bounds write vulnerability that all | |
CVE-2020-16013 |
Chromium V8 | — | — | 2021-11-03 | 2022-05-03 | Google Chromium V8 Engine contains an inappropriate implementation vulnerability | |
CVE-2021-30633 |
Chromium Indexed DB API | — | — | 2021-11-03 | 2021-11-17 | Google Chromium Indexed DB API contains a use-after-free vulnerability that allo | |
CVE-2021-21148 |
Chromium V8 | — | — | 2021-11-03 | 2021-11-17 | Google Chromium V8 Engine contains a heap buffer overflow vulnerability that all | |
CVE-2021-37973 |
Chromium Portals | — | — | 2021-11-03 | 2021-11-17 | Google Chromium Portals contains a use-after-free vulnerability that allows a re | |
CVE-2021-30551 |
Chromium V8 | — | — | 2021-11-03 | 2021-11-17 | Google Chromium V8 Engine contains a type confusion vulnerability that allows a | |
CVE-2021-37975 |
Chromium V8 | — | — | 2021-11-03 | 2021-11-17 | Google Chromium V8 Engine contains a use-after-free vulnerability that allows a | |
CVE-2020-6418 |
Chromium V8 | — | — | 2021-11-03 | 2022-05-03 | Google Chromium V8 Engine contains a type confusion vulnerability allows a remot | |
CVE-2021-30554 |
Chromium WebGL | — | — | 2021-11-03 | 2021-11-17 | Google Chromium WebGL contains a use-after-free vulnerability that allows a remo | |
CVE-2021-21206 |
Chromium Blink | — | — | 2021-11-03 | 2021-11-17 | Google Chromium Blink contains a use-after-free vulnerability that allows a remo | |
CVE-2021-38000 |
Chromium Intents | — | — | 2021-11-03 | 2021-11-17 | Google Chromium Intents contains an improper input validation vulnerability that | |
CVE-2021-38003 |
Chromium V8 | — | — | 2021-11-03 | 2021-11-17 | Google Chromium V8 Engine has a bug in JSON.stringify, where the internal TheHol | |
CVE-2021-21224 |
Chromium V8 | — | — | 2021-11-03 | 2021-11-17 | Google Chromium V8 Engine contains a type confusion vulnerability that allows a | |
CVE-2021-21193 |
Chromium Blink | — | — | 2021-11-03 | 2021-11-17 | Google Chromium Blink contains a use-after-free vulnerability that allows a remo | |
CVE-2021-21220 |
Chromium V8 | — | — | 2021-11-03 | 2021-11-17 | Google Chromium V8 Engine contains an improper input validation vulnerability th | |
CVE-2021-30563 |
Chromium V8 | — | — | 2021-11-03 | 2021-11-17 | Google Chromium V8 Engine contains a type confusion vulnerability that allows a |