Google V8 vulnerabilities

• google chrome, chromium v8 +1 more Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to... CVE-2026-87491 In KEVPublic exploitFix available 8.8 HighSeptember 9, 2026
• google chrome, v8, chromium v8 +2 more Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute... CVE-2026-85046 In KEVPublic exploitFix available 8.8 HighSeptember 3, 2026
• google chrome, chromium v8 +1 more Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote... CVE-2026-11645 In KEVPublic exploitFix available 8.8 HighJune 8, 2026
• google chrome, chromium v8 +1 more Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote... CVE-2026-3910 In KEVPublic exploitFix available 8.8 HighMarch 12, 2026
• google chrome, chromium v8, siemens cadra +2 more Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to... CVE-2025-13223 In KEVFix available 8.8 HighNovember 17, 2025
• google chrome, chromium v8, siemens cadra +2 more Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to... CVE-2025-10585 In KEVPublic exploitFix available 9.8 CriticalSeptember 19, 2025
• google chrome, chromium v8 +1 more Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform... CVE-2025-6554 In KEVPublic exploitFix available EPSS 14.1% 8.1 HighJune 30, 2025
• google chrome, chromium v8, microsoft edge chromium +2 more Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote... CVE-2025-5419 In KEVPublic exploitFix available 8.8 HighJune 2, 2025
• google chrome, chromium v8, microsoft edge +2 more Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit... CVE-2024-7971 In KEVPublic exploitFix available EPSS 21.0% 9.6 CriticalAugust 21, 2024
• google chrome, chromium v8, microsoft edge chromium +2 more Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote... CVE-2024-7965 In KEVPublic exploitFix available EPSS 18.5% 8.8 HighAugust 21, 2024
• google chrome, fedoraproject fedora, google chromium v8 +2 more chromium - security update CVE-2024-5274 In KEVPublic exploitFix available 9.6 CriticalMay 24, 2024
• google chrome, fedoraproject fedora, google chromium v8 +2 more Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute... CVE-2024-4947 In KEVPublic exploitFix available EPSS 15.2% 9.6 CriticalMay 15, 2024
• google chrome, fedoraproject fedora, google chromium v8 +2 more Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to... CVE-2024-4761 In KEVPublic exploitFix available EPSS 11.0% 8.8 HighMay 14, 2024
• google chrome, v8, fedoraproject fedora +2 more Use after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to... CVE-2024-3914 Fix available 6.5 MediumApril 17, 2024
• google chrome, v8, fedoraproject fedora +2 more Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to... CVE-2024-1939 Public exploitFix available 8.8 HighFebruary 28, 2024
• google chrome, couchbase server, fedoraproject fedora +1 more +3 more Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote... CVE-2024-0519 In KEVPublic exploitFix available 8.8 HighJanuary 16, 2024
• google chrome, debian linux, fedoraproject fedora +2 more +4 more Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to... CVE-2023-4762 In KEVPublic exploitFix available EPSS 41.4% 8.8 HighSeptember 5, 2023
• google chrome, couchbase server, debian linux +2 more +4 more Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to... CVE-2023-3079 In KEVPublic exploitFix available EPSS 37.9% 8.8 HighJune 5, 2023
• google chrome, couchbase server, debian linux +2 more +4 more Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to... CVE-2023-2033 In KEVPublic exploitFix available EPSS 40.6% 8.8 HighApril 14, 2023
• google chrome, chromium v8 +1 more Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to... CVE-2022-4262 In KEVPublic exploitFix available EPSS 23.5% 8.8 HighDecember 2, 2022
• google chrome, chromium v8 +1 more Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to... CVE-2022-3723 In KEVFix available 8.8 HighOctober 29, 2022
• google chrome, chromium v8 +1 more Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker... CVE-2022-1364 In KEVPublic exploitFix available EPSS 13.9% 8.8 HighApril 16, 2022
• google chrome, chromium v8 +1 more chromium - security update CVE-2022-1096 In KEVPublic exploitFix available EPSS 24.7% 8.8 HighMarch 28, 2022
• google chrome, chromium v8 +1 more Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to... CVE-2021-4102 In KEVFix available 8.8 HighDecember 19, 2021
• google chrome, debian linux, fedoraproject fedora +1 more +3 more Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote... CVE-2021-38003 In KEVPublic exploitFix available EPSS 38.6% 8.8 HighNovember 8, 2021
• google chrome, debian linux, fedoraproject fedora +1 more +3 more Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to... CVE-2021-37975 In KEVPublic exploitFix available EPSS 34.9% 8.8 HighOctober 8, 2021
• google chrome, fedoraproject fedora, google chromium v8 +2 more Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to... CVE-2021-30632 In KEVPublic exploitFix available EPSS 63.2% 8.8 HighSeptember 21, 2021
• google chrome, chromium v8 +1 more Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to... CVE-2021-30563 In KEVFix available 8.8 HighJuly 21, 2021
• google chrome, fedoraproject fedora, google chromium v8 +2 more Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to... CVE-2021-30551 In KEVPublic exploitFix available EPSS 64.7% 8.8 HighJune 15, 2021
• google chrome, debian linux, fedoraproject fedora +1 more +3 more Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute... CVE-2021-21224 In KEVFix available EPSS 84.2% 8.8 HighApril 26, 2021
• google chrome, fedoraproject fedora, google chromium v8 +2 more Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed... CVE-2021-21220 In KEVPublic exploitFix available EPSS 70.4% 8.8 HighApril 17, 2021
• google chrome, debian linux, fedoraproject fedora +1 more +3 more Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to... CVE-2021-21148 In KEVPublic exploitFix available EPSS 20.0% 8.8 HighFebruary 9, 2021
• google chrome, chromium v8 +1 more Inappropriate implementation in V8 in CefSharp CVE-2020-16013 In KEVFix available 8.8 HighNovember 15, 2020
• google chrome, cefsharp, debian linux +6 more +8 more Inappropriate implementation in V8 CVE-2020-16009 In KEVFix available EPSS 48.3% 8.8 HighNovember 3, 2020
• google chrome, debian linux, fedoraproject fedora +4 more +6 more Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to... CVE-2020-6418 In KEVPublic exploitFix available EPSS 78.8% 8.8 HighFebruary 26, 2020
• google chrome, chromium v8 +1 more Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote... CVE-2019-5825 In KEVPublic exploitFix available EPSS 55.9% 6.5 MediumAugust 12, 2019
• google chrome, debian linux, google chromium v8 +3 more +5 more Execution of user supplied Javascript during array deserialization leading to an out of bounds... CVE-2018-17480 In KEVFix available EPSS 35.6% 8.8 HighDecember 7, 2018
• google chrome, debian linux, google chromium v8 +3 more +5 more Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote... CVE-2018-17463 In KEVPublic exploitFix available EPSS 84.6% 8.8 HighNovember 2, 2018
• google chrome, debian linux, google chromium v8 +4 more +6 more Integer overflow in computing the required allocation size when instantiating a new javascript... CVE-2018-6065 In KEVPublic exploitFix available EPSS 60.3% 8.8 HighApril 28, 2018
• google chrome, chromium v8, redhat enterprise linux desktop +2 more +4 more Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0... CVE-2017-5070 In KEVFix available EPSS 32.1% 8.8 HighJune 7, 2017
• debian linux, google chrome, chromium v8 +3 more +5 more Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux,... CVE-2017-5030 In KEVFix available EPSS 40.6% 8.8 HighMarch 10, 2017
• google chrome, chromium v8, redhat enterprise linux desktop +2 more +4 more V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840... CVE-2016-5198 In KEVFix available EPSS 34.2% 8.8 HighNovember 4, 2016
• google chrome, v8 +1 more Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly... CVE-2016-5129 Fix available 8.8 HighJuly 23, 2016
• google chrome, v8 +1 more objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not... CVE-2016-5128 Fix available 8.8 HighJuly 23, 2016
• google chrome, v8, canonical ubuntu linux +7 more +9 more The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in... CVE-2016-1688 Fix available 6.5 MediumMay 31, 2016
• google chrome, v8, canonical ubuntu linux +7 more +9 more objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not... CVE-2016-1678 Fix available 8.8 HighMay 31, 2016
• google chrome, v8, canonical ubuntu linux +7 more +9 more uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an... CVE-2016-1677 Fix available 6.5 MediumMay 31, 2016
• google chrome, v8, canonical ubuntu linux +3 more +5 more The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before... CVE-2016-1669 Fix available 8.8 HighMay 13, 2016
• google chrome, v8, canonical ubuntu linux +1 more +3 more Multiple unspecified vulnerabilities in Google V8 before 4.9.385.33, as used in Google Chrome... CVE-2016-3679 Fix available 8.8 HighMarch 29, 2016
• google chrome, canonical ubuntu linux, debian linux +8 more +10 more The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome... CVE-2016-1646 In KEVFix available EPSS 48.1% 8.8 HighMarch 25, 2016
• Show olderLoading…