CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Google Chrome V8 Engine Use-After-Free Vulnerability (CVE-2021-4102) Technical Advisory
[Affected Scope] Google Chrome prior to version 96.0.4664.110
[Impact] A remote attacker can exploit heap corruption via a crafted HTML page to potentially execute arbitrary code
[Mitigation] Immediately update Google Chrome to version 96.0.4664.110 or later
Google Chrome V8 Engine Inappropriate Exception Handling Heap Corruption Vulnerability (CVE-2021-38003)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 95.0.4638.69
[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code by enticing a user to visit a specially crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (95.0.4638.69 or higher)
Google Chrome on Android Intent Insufficient Validation Open Redirect Vulnerability (CVE-2021-38000, CISA KEV)
[Affected Scope] Google Chrome on Android prior to version 95.0.4638.69
[Impact] Remote attackers can force the browser to navigate to arbitrary malicious URLs via crafted HTML pages, leading to credential phishing or drive-by downloads
[Mitigation] Immediately update Google Chrome on Android to the latest version (95.0.4638.69 or higher) via the Google Play Store
Google Chrome Memory Implementation Information Disclosure Vulnerability (CVE-2021-37976) Analysis and Mitigation Guide
[Affected Scope] Google Chrome prior to version 94.0.4606.71
[Impact] A remote attacker can retrieve potentially sensitive information from process memory via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (94.0.4606.71 or higher)
Google Chrome V8 Use-After-Free Vulnerability (CVE-2021-37975) Technical Analysis and Mitigation Guide
[Affected Scope] Google Chrome prior to version 94.0.4606.71
[Impact] A remote attacker can exploit a heap corruption vulnerability via a crafted HTML page, potentially leading to arbitrary remote code execution (RCE) within the browser renderer process.
[Mitigation] Immediately update Google Chrome to the latest stable version (94.0.4606.71 or higher).
Google Chrome Portals Use-After-Free Sandbox Escape and Remote Code Execution (CVE-2021-37973)
[Affected Scope] Google Chrome prior to version 94.0.4606.61 on desktop platforms
[Impact] A remote attacker who has compromised the renderer process can potentially bypass the Chrome sandbox and execute arbitrary code on the host system via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (94.0.4606.61 or higher) and enforce automatic updates across enterprise endpoints
Google Chrome Indexed DB API Use-After-Free Vulnerability (CVE-2021-30633) Analysis and Mitigation Guide
[Affected Scope] Google Chrome prior to version 93.0.4577.82
[Impact] A remote attacker who has compromised the renderer process can potentially execute arbitrary code and escape the browser sandbox via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (93.0.4577.82 or higher)
Google Chrome V8 Engine Out-of-Bounds Write Vulnerability Analysis and Mitigation Guide (CVE-2021-30632)
[Affected Scope] Google Chrome prior to version 93.0.4577.82 and Chromium-based browsers utilizing the V8 engine
[Impact] Remote attackers can execute arbitrary code within the browser renderer process and compromise the host system via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (93.0.4577.82 or higher)
Google Chrome V8 Type Confusion Remote Code Execution Vulnerability (CVE-2021-30563) Technical Analysis and Mitigation Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 91.0.4472.164
[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code within the browser renderer process via a crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (91.0.4472.164 or higher)
Google Chrome WebGL Use-After-Free Vulnerability (CVE-2021-30554) Analysis and Mitigation Guide
[Affected Scope] Google Chrome browser versions prior to 91.0.4472.114
[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (91.0.4472.114 or higher)
Google Chrome V8 Type Confusion Vulnerability (CVE-2021-30551) Technical Advisory
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 91.0.4472.101
[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (91.0.4472.101 or higher)
Google Chrome PopupBlocker Policy Bypass Vulnerability via Crafted iframe (CVE-2021-30533)
[Affected Scope] Google Chrome prior to version 91.0.4472.77
[Impact] Remote attackers can bypass navigation restrictions and popup blocking policies via a crafted iframe, leading to unauthorized redirections
[Mitigation] Immediately update Google Chrome to the latest stable version (91.0.4472.77 or higher)
Google Chrome V8 Engine Type Confusion Remote Code Execution Vulnerability (CVE-2021-21224) Analysis and Mitigation Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 90.0.4430.85
[Impact] A remote attacker can execute arbitrary code inside the browser sandbox by enticing a user to visit a specially crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (90.0.4430.85 or higher)
Google Chrome V8 JIT Compiler Input Validation Vulnerability leading to Remote Code Execution (CVE-2021-21220)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 89.0.4389.128
[Impact] Remote attackers can trigger heap corruption and execute arbitrary code within the browser renderer process via a crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (89.0.4389.128 or higher)
Google Chrome Blink Engine Use-After-Free Vulnerability (CVE-2021-21206) Analysis and Mitigation Guide
[Affected Scope] Google Chrome browser versions prior to 89.0.4389.128
[Impact] A remote attacker can exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution (RCE)
[Mitigation] Immediately update Google Chrome to the latest stable version (89.0.4389.128 or higher)
Google Chrome Blink Use-After-Free Vulnerability (CVE-2021-21193) Technical Advisory
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 89.0.4389.90
[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code via a crafted HTML page
[Mitigation] Immediately update Google Chrome and related packages to the latest stable version (89.0.4389.90 or higher)
Google Chrome Audio Component Data Race Remote Code Execution Vulnerability (CVE-2021-21166)
[Affected Scope] Google Chrome prior to version 89.0.4389.72
[Impact] Remote attackers can trigger heap corruption via a crafted HTML page, potentially leading to arbitrary code execution within the browser process
[Mitigation] Immediately update Google Chrome to the latest stable version (89.0.4389.72 or higher)
Google Chrome V8 Engine Heap Buffer Overflow Vulnerability (CVE-2021-21148) Technical Advisory
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 88.0.4324.150
[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (88.0.4324.150 or higher)
Google Chrome Media Component Use-After-Free Vulnerability (CVE-2020-6572) Technical Analysis and Mitigation Guide
[Affected Scope] Google Chrome prior to version 81.0.4044.92
[Impact] Remote attackers can execute arbitrary code or compromise the browser sandbox via a specially crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (81.0.4044.92 or higher)
Google Chrome Site Isolation Use-After-Free Sandbox Escape Vulnerability (CVE-2020-16017)
[Affected Scope] Google Chrome prior to version 86.0.4240.198
[Impact] A remote attacker who has compromised the renderer process can bypass sandbox boundaries and potentially execute arbitrary code on the host system via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (86.0.4240.198 or higher)