CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Google Chrome V8 Out-of-bounds Write Remote Code Execution Advisory (CVE-2026-87491)
[Affected Scope] Google Chrome versions prior to 153.0.8010.36 and Chromium-based browsers
[Impact] Remote attackers can execute arbitrary code within the browser sandbox via a crafted HTML page
[Mitigation] Immediately update Google Chrome to version 153.0.8010.36 or later
Google Chrome V8 Type Confusion Vulnerability (CVE-2026-85046) - Remote Code Execution in Sandbox
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 152.0.7977.82
[Impact] A remote attacker can execute arbitrary code inside the browser's renderer sandbox by enticing a user to visit a specially crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (152.0.7977.82 or higher)
Google Chrome V8 Out-of-Bounds Read/Write Vulnerability (CVE-2026-11645) Advisory
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 149.0.7827.103
[Impact] Remote attackers can execute arbitrary code inside the V8 sandbox via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (149.0.7827.103 or higher)
Google Chrome Dawn Use-After-Free Vulnerability (CVE-2026-5281) Technical Advisory
[Affected Scope] Google Chrome versions prior to 146.0.7680.178
[Impact] A remote attacker who has compromised the renderer process can execute arbitrary code via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (146.0.7680.178 or higher)
Google Chrome V8 Inappropriate Implementation Sandbox Remote Code Execution Vulnerability (CVE-2026-3910)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 146.0.7680.75
[Impact] A remote attacker can execute arbitrary code inside the browser sandbox renderer process by enticing a user to visit a specially crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (146.0.7680.75 or higher)
Google Chrome Skia Graphics Engine Out-of-bounds Write Vulnerability (CVE-2026-3909) Technical Advisory
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 146.0.7680.75
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (system crash) via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (146.0.7680.75 or higher)
Google Chrome CSS Use-After-Free Vulnerability (CVE-2026-2441) Technical Security Advisory
[Affected Scope] Google Chrome browser versions prior to 145.0.7632.75
[Impact] Remote attackers can execute arbitrary code inside the browser sandbox via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (145.0.7632.75 or higher)
Google Chrome and Microsoft Edge ANGLE Engine Out-of-Bounds Memory Access Vulnerability (CVE-2025-14174) Technical Advisory
[Affected Scope] Google Chrome and Chromium-based browsers (such as Microsoft Edge) on macOS prior to version 143.0.7499.110
[Impact] A remote attacker can trigger out-of-bounds memory access via a crafted HTML page, potentially leading to arbitrary code execution (RCE) or renderer process crashes
[Mitigation] Immediately update all Chromium-based browsers to the latest stable version (143.0.7499.110 or higher) and enforce automated update policies across the enterprise
Google Chrome V8 Type Confusion Vulnerability (CVE-2025-13223) Urgent Security Advisory
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 142.0.7444.175
[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code within the browser process via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (142.0.7444.175 or higher) and enforce automatic updates across the organization
Google Chrome V8 Type Confusion Vulnerability (CVE-2025-10585) Technical Analysis and Remediation Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 140.0.7339.185
[Impact] Remote attackers can execute arbitrary code (RCE) and trigger heap corruption by enticing a user to visit a specially crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (140.0.7339.185 or higher)
Android ART and Chrome Sandbox Escape Privilege Escalation Vulnerability (CVE-2025-48543) Analysis and Mitigation Guide
[Affected Scope] Android Operating System and Chrome browser environments
[Impact] Local attackers can escape the Chrome sandbox and escalate privileges to system_server without any user interaction or additional execution privileges
[Mitigation] Immediately apply the Android Security Bulletin - September 2025 patch or later to all affected devices
Google Chrome Sandbox Escape Vulnerability via Insufficient Input Validation in ANGLE and GPU (CVE-2025-6558)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 138.0.7204.157
[Impact] A remote attacker can bypass the browser sandbox boundaries and potentially execute arbitrary code on the host system via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable channel version (138.0.7204.157 or higher)
Qualcomm Adreno GPU Driver Memory Corruption Vulnerability (CVE-2025-27038) Technical Advisory
[Affected Scope] Android devices equipped with Qualcomm Adreno GPU drivers and running Google Chrome browser
[Impact] Remote attackers can exploit GPU rendering pipelines to trigger memory corruption, potentially leading to sandbox escape and arbitrary code execution
[Mitigation] Apply the latest security patches released by Qualcomm and device OEMs, and update Google Chrome to the latest version
Google Chrome and Microsoft Edge V8 Out-of-Bounds Read/Write Vulnerability (CVE-2025-5419) Urgent Security Advisory
[Affected Scope] Google Chrome and Chromium-based browsers (including Microsoft Edge) prior to version 137.0.7151.68
[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code within the browser renderer process via a crafted HTML page
[Mitigation] Immediately update all affected browsers to the latest stable version (137.0.7151.68 or higher) and enforce automatic update policies
Google Chrome for Windows Mojo IPC Handle Validation Sandbox Escape Vulnerability (CVE-2025-2783)
[Affected Scope] Google Chrome on Windows prior to version 134.0.6998.177
[Impact] A remote attacker can exploit incorrect handle validation in the Mojo IPC framework via a malicious file to escape the browser sandbox and execute arbitrary code with elevated privileges
[Mitigation] Immediately update Google Chrome to the latest stable channel (134.0.6998.177 or higher) and enforce auto-updates via Group Policy (GPO)
Google Chrome and Chromium-based Browsers V8 Engine Type Confusion Remote Code Execution Vulnerability (CVE-2024-7971)
[Affected Scope] Google Chrome prior to 128.0.6613.84 and all affected Chromium-based browsers (e.g., Microsoft Edge)
[Impact] Remote attackers can trigger heap corruption and execute arbitrary code within the browser renderer process via a crafted HTML page
[Mitigation] Immediately update all Chromium-based browsers to the latest stable release (Chrome 128.0.6613.84 or higher)
Google Chrome V8 Inappropriate Implementation Heap Corruption Vulnerability (CVE-2024-7965)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 128.0.6613.84
[Impact] A remote attacker can trigger heap corruption via a crafted HTML page, potentially leading to arbitrary code execution (RCE) within the browser process
[Mitigation] Immediately update Google Chrome to the latest stable version (128.0.6613.84/.85 or higher)
Google Chrome V8 Engine Type Confusion Vulnerability Analysis and Mitigation Guide (CVE-2024-5274)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 125.0.6422.112
[Impact] A remote attacker can execute arbitrary code inside the browser sandbox via a crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (125.0.6422.112 or higher)
Google Chrome V8 Type Confusion Remote Code Execution Vulnerability (CVE-2024-4947)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 125.0.6422.60
[Impact] A remote attacker can execute arbitrary code within the browser sandbox by enticing a user to visit a specially crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (125.0.6422.60 or higher)
Google Chrome V8 Engine Out-of-bounds Write Vulnerability (CVE-2024-4761) Technical Analysis and Hardening Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 124.0.6367.207
[Impact] A remote attacker can trigger an out-of-bounds memory write via a crafted HTML page, potentially leading to arbitrary code execution or denial of service (DoS)
[Mitigation] Immediately update Google Chrome to the latest stable version (124.0.6367.207 or higher) and enforce automatic update policies across the enterprise