CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Google Chrome V8 Engine Use-After-Free Vulnerability (CVE-2021-4102) Technical Advisory
[Affected Scope] Google Chrome prior to version 96.0.4664.110
[Impact] A remote attacker can exploit heap corruption via a crafted HTML page to potentially execute arbitrary code
[Mitigation] Immediately update Google Chrome to version 96.0.4664.110 or later
Google Chrome V8 Engine Inappropriate Exception Handling Heap Corruption Vulnerability (CVE-2021-38003)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 95.0.4638.69
[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code by enticing a user to visit a specially crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (95.0.4638.69 or higher)
Google Chrome V8 Use-After-Free Vulnerability (CVE-2021-37975) Technical Analysis and Mitigation Guide
[Affected Scope] Google Chrome prior to version 94.0.4606.71
[Impact] A remote attacker can exploit a heap corruption vulnerability via a crafted HTML page, potentially leading to arbitrary remote code execution (RCE) within the browser renderer process.
[Mitigation] Immediately update Google Chrome to the latest stable version (94.0.4606.71 or higher).
Google Chrome V8 Engine Out-of-Bounds Write Vulnerability Analysis and Mitigation Guide (CVE-2021-30632)
[Affected Scope] Google Chrome prior to version 93.0.4577.82 and Chromium-based browsers utilizing the V8 engine
[Impact] Remote attackers can execute arbitrary code within the browser renderer process and compromise the host system via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (93.0.4577.82 or higher)
Google Chrome V8 Type Confusion Remote Code Execution Vulnerability (CVE-2021-30563) Technical Analysis and Mitigation Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 91.0.4472.164
[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code within the browser renderer process via a crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (91.0.4472.164 or higher)
Google Chrome V8 Type Confusion Vulnerability (CVE-2021-30551) Technical Advisory
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 91.0.4472.101
[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (91.0.4472.101 or higher)
Google Chrome V8 Engine Type Confusion Remote Code Execution Vulnerability (CVE-2021-21224) Analysis and Mitigation Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 90.0.4430.85
[Impact] A remote attacker can execute arbitrary code inside the browser sandbox by enticing a user to visit a specially crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (90.0.4430.85 or higher)
Google Chrome V8 JIT Compiler Input Validation Vulnerability leading to Remote Code Execution (CVE-2021-21220)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 89.0.4389.128
[Impact] Remote attackers can trigger heap corruption and execute arbitrary code within the browser renderer process via a crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (89.0.4389.128 or higher)
Google Chrome V8 Engine Heap Buffer Overflow Vulnerability (CVE-2021-21148) Technical Advisory
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 88.0.4324.150
[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (88.0.4324.150 or higher)
Google Chrome V8 Engine Heap Corruption Vulnerability (CVE-2020-16013) Technical Advisory
[Affected Scope] Google Chrome prior to version 86.0.4240.198 (specifically the V8 JavaScript engine component)
[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable channel version (86.0.4240.198 or higher)
Google Chrome V8 Engine Type Confusion Remote Code Execution Vulnerability (CVE-2020-16009)
[Affected Scope] Google Chrome versions prior to 86.0.4240.183 utilizing the V8 JavaScript engine
[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code via a specially crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (86.0.4240.183 or higher) across all endpoints
Google Chrome V8 Engine Type Confusion Remote Code Execution Vulnerability (CVE-2020-6418) Analysis and Mitigation Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 80.0.3987.122, and runtime environments utilizing the V8 engine
[Impact] Remote attackers can exploit heap corruption via a crafted HTML page, potentially leading to arbitrary remote code execution (RCE) on the target system
[Mitigation] Immediately update Google Chrome to the latest stable version (80.0.3987.122 or higher) and apply system package updates for V8 dependencies
Google Chrome V8 Engine Out-of-Bounds Write Vulnerability Analysis and Mitigation Guide (CVE-2019-5825)
[Affected Scope] Google Chrome prior to version 73.0.3683.86
[Impact] A remote attacker can exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution within the browser renderer process
[Mitigation] Immediately update Google Chrome to the latest stable version (73.0.3683.86 or higher)
Google Chrome V8 Engine Array Deserialization Out-of-Bounds Write Vulnerability (CVE-2018-17480) Analysis and Mitigation Guide
[Affected Scope] Google Chrome prior to version 71.0.3578.80
[Impact] Remote attackers can execute arbitrary code inside the browser sandbox by enticing a user to visit a specially crafted HTML page.
[Mitigation] Immediately update Google Chrome to the latest stable version (71.0.3578.80 or higher) across all enterprise endpoints.
Google Chrome V8 Engine Integer Overflow Heap Corruption Vulnerability (CVE-2018-6065) Technical Advisory
[Affected Scope] Google Chrome versions prior to 65.0.3325.146 and applications utilizing affected V8 JavaScript engine releases
[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code via a specially crafted HTML page
[Mitigation] Immediately upgrade Google Chrome to the latest stable channel (65.0.3325.146 or higher) and apply OS-level package updates
Google Chrome V8 Engine Type Confusion Remote Code Execution Vulnerability (CVE-2018-17463)
[Affected Scope] Google Chrome versions prior to 70.0.3538.64 and applications utilizing vulnerable V8 engine releases
[Impact] Remote attackers can execute arbitrary code within the browser renderer sandbox by enticing a user to visit a specially crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (70.0.3538.64 or higher) and rebuild V8-dependent frameworks
Google Chrome V8 Engine Type Confusion Remote Code Execution Vulnerability (CVE-2017-5070)
[Affected Scope] Google Chrome prior to 59.0.3071.86 for Linux, Windows, and macOS, and prior to 59.0.3071.92 for Android
[Impact] A remote attacker can execute arbitrary code within the Chrome renderer sandbox by enticing a user to visit a specially crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (59.0.3071.86 or higher) and enforce automatic updates across the enterprise
Google Chrome V8 Complex Species Handling Remote Code Execution Vulnerability (CVE-2017-5030)
[Affected Scope] Google Chrome prior to 57.0.2987.98 for desktop (Windows, macOS, Linux) and prior to 57.0.2987.108 for Android
[Impact] Successful exploitation allows remote attackers to execute arbitrary code within the context of the browser renderer process or bypass sandbox boundaries via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable channel release (57.0.2987.98 / 108 or higher)
Google Chrome V8 Engine Incorrect Optimization Remote Code Execution Vulnerability (CVE-2016-5198)
[Affected Scope] Google Chrome V8 engine prior to 54.0.2840.90 for Linux, 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac
[Impact] Remote attackers can perform arbitrary memory read/write operations and execute arbitrary code via a specially crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (54.0.2840.90/87/85 or higher depending on the OS platform)
Google Chrome V8 Engine Array.prototype.concat Out-of-Bounds Read and Remote Code Execution Vulnerability (CVE-2016-1646)
[Affected Scope] Google Chrome browser versions prior to 49.0.2623.108 and applications utilizing vulnerable V8 JavaScript engine releases
[Impact] Remote attackers can trigger a denial of service (browser crash) or potentially execute arbitrary code via crafted JavaScript payloads that exploit memory corruption
[Mitigation] Immediately update Google Chrome to the latest stable channel (49.0.2623.108 or higher) and patch any V8-dependent runtime environments