Product · KEV exposure
Google Chromium V8 known exploited vulnerabilities
We track 40 CVEs in Google Chromium V8. All of them are on CISA's Known Exploited Vulnerabilities catalog, meaning CISA has evidence of exploitation in the wild (listed 2021–2026). The most recent is CVE-2026-87491, added to KEV on .
- CVEs tracked
- 40
- On CISA KEV
- 40
- Ransomware use
- 0
- Rated critical
- 4
Every Google Chromium V8 CVE we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV | Patch by |
|---|---|---|---|---|---|
| CVE-2026-87491 Google Chromium V8 Out of Bounds Write Vulnerability | [ HIGH ] | 8.8 | 3.1% | ||
| CVE-2026-11645 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | [ HIGH ] | 8.8 | 2.4% | ||
| CVE-2026-3910 Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability | [ HIGH ] | 8.8 | 1.1% | ||
| CVE-2025-13223 Google Chromium V8 Type Confusion Vulnerability | [ HIGH ] | 8.8 | 4.9% | ||
| CVE-2025-10585 Google Chromium V8 Type Confusion Vulnerability | [ CRITICAL ] | 9.8 | 5.4% | ||
| CVE-2025-6554 Google Chromium V8 Type Confusion Vulnerability | [ HIGH ] | 8.1 | 14.1% | ||
| CVE-2025-5419 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | [ HIGH ] | 8.8 | 7.8% | ||
| CVE-2024-7965 Google Chromium V8 Inappropriate Implementation Vulnerability | [ HIGH ] | 8.8 | 18.5% | ||
| CVE-2024-7971 Google Chromium V8 Type Confusion Vulnerability | [ CRITICAL ] | 9.6 | 21.1% | ||
| CVE-2024-5274 Google Chromium V8 Type Confusion Vulnerability | [ CRITICAL ] | 9.6 | 7.5% | ||
| CVE-2024-4947 Google Chromium V8 Type Confusion Vulnerability | [ CRITICAL ] | 9.6 | 15.2% | ||
| CVE-2024-4761 Google Chromium V8 Out-of-Bounds Memory Write Vulnerability | [ HIGH ] | 8.8 | 11.0% | ||
| CVE-2023-4762 Google Chromium V8 Type Confusion Vulnerability | [ HIGH ] | 8.8 | 41.4% | ||
| CVE-2024-0519 Google Chromium V8 Out-of-Bounds Memory Access Vulnerability | [ HIGH ] | 8.8 | 3.8% | ||
| CVE-2023-3079 Google Chromium V8 Type Confusion Vulnerability | [ HIGH ] | 8.8 | 37.9% | ||
| CVE-2023-2033 Google Chromium V8 Type Confusion Vulnerability | [ HIGH ] | 8.8 | 40.8% | ||
| CVE-2022-4262 Google Chromium V8 Type Confusion Vulnerability | [ HIGH ] | 8.8 | 23.5% | ||
| CVE-2022-3723 Google Chromium V8 Type Confusion Vulnerability | [ HIGH ] | 8.8 | 7.9% | ||
| CVE-2019-5825 Google Chromium V8 Out-of-Bounds Write Vulnerability | [ MEDIUM ] | 6.5 | 55.9% | ||
| CVE-2018-6065 Google Chromium V8 Integer Overflow Vulnerability | [ HIGH ] | 8.8 | 60.3% | ||
| CVE-2018-17480 Google Chromium V8 Out-of-Bounds Write Vulnerability | [ HIGH ] | 8.8 | 35.6% | ||
| CVE-2018-17463 Google Chromium V8 Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 84.6% | ||
| CVE-2017-5070 Google Chromium V8 Type Confusion Vulnerability | [ HIGH ] | 8.8 | 32.1% | ||
| CVE-2017-5030 Google Chromium V8 Memory Corruption Vulnerability | [ HIGH ] | 8.8 | 40.6% | ||
| CVE-2016-5198 Google Chromium V8 Out-of-Bounds Memory Vulnerability | [ HIGH ] | 8.8 | 34.2% | ||
| CVE-2016-1646 Google Chromium V8 Out-of-Bounds Read Vulnerability | [ HIGH ] | 8.8 | 48.1% | ||
| CVE-2022-1364 Google Chromium V8 Type Confusion Vulnerability | [ HIGH ] | 8.8 | 13.9% | ||
| CVE-2022-1096 Google Chromium V8 Type Confusion Vulnerability | [ HIGH ] | 8.8 | 24.7% | ||
| CVE-2021-4102 Google Chromium V8 Use-After-Free Vulnerability | [ HIGH ] | 8.8 | 7.8% | ||
| CVE-2021-38003 Google Chromium V8 Memory Corruption Vulnerability | [ HIGH ] | 8.8 | 38.6% | ||
| CVE-2021-37975 Google Chromium V8 Use-After-Free Vulnerability | [ HIGH ] | 8.8 | 34.9% | ||
| CVE-2021-30632 Google Chromium V8 Out-of-Bounds Write Vulnerability | [ HIGH ] | 8.8 | 63.2% | ||
| CVE-2021-30563 Google Chromium V8 Type Confusion Vulnerability | [ HIGH ] | 8.8 | 9.0% | ||
| CVE-2021-30551 Google Chromium V8 Type Confusion Vulnerability | [ HIGH ] | 8.8 | 64.7% | ||
| CVE-2021-21224 Google Chromium V8 Type Confusion Vulnerability | [ HIGH ] | 8.8 | 84.2% | ||
| CVE-2021-21220 Google Chromium V8 Improper Input Validation Vulnerability | [ HIGH ] | 8.8 | 70.4% | ||
| CVE-2021-21148 Google Chromium V8 Heap Buffer Overflow Vulnerability | [ HIGH ] | 8.8 | 20.0% | ||
| CVE-2020-6418 Google Chromium V8 Type Confusion Vulnerability | [ HIGH ] | 8.8 | 78.8% | ||
| CVE-2020-16013 Google Chromium V8 Incorrect Implementation Vulnerabililty | [ HIGH ] | 8.8 | 2.8% | ||
| CVE-2020-16009 Google Chromium V8 Type Confusion Vulnerability | [ HIGH ] | 8.8 | 48.3% |
Sorted by date added to KEV. Severity and CVSS as stated by NVD or the vendor; EPSS from FIRST.org. "Patch by" is CISA's BOD 22-01 deadline for US federal agencies, a useful priority signal for everyone else. Machine-readable: /api/v1/vendors/google.json.
Other Google products
Every row links to its CVE record with the CISA required action, catalog coverage and primary sources. We describe impact and remediation only; no exploit code. See the full KEV tracker or compare KEV catalogs.