CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Google Chrome V8 Out-of-bounds Write Remote Code Execution Advisory (CVE-2026-87491)
[Affected Scope] Google Chrome versions prior to 153.0.8010.36 and Chromium-based browsers
[Impact] Remote attackers can execute arbitrary code within the browser sandbox via a crafted HTML page
[Mitigation] Immediately update Google Chrome to version 153.0.8010.36 or later
Google Chrome V8 Type Confusion Vulnerability (CVE-2026-85046) - Remote Code Execution in Sandbox
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 152.0.7977.82
[Impact] A remote attacker can execute arbitrary code inside the browser's renderer sandbox by enticing a user to visit a specially crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (152.0.7977.82 or higher)
Google Chrome V8 Out-of-Bounds Read/Write Vulnerability (CVE-2026-11645) Advisory
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 149.0.7827.103
[Impact] Remote attackers can execute arbitrary code inside the V8 sandbox via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (149.0.7827.103 or higher)
Google Chrome V8 Inappropriate Implementation Sandbox Remote Code Execution Vulnerability (CVE-2026-3910)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 146.0.7680.75
[Impact] A remote attacker can execute arbitrary code inside the browser sandbox renderer process by enticing a user to visit a specially crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (146.0.7680.75 or higher)
Google Chrome V8 Type Confusion Vulnerability (CVE-2025-13223) Urgent Security Advisory
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 142.0.7444.175
[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code within the browser process via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (142.0.7444.175 or higher) and enforce automatic updates across the organization
Google Chrome V8 Type Confusion Vulnerability (CVE-2025-10585) Technical Analysis and Remediation Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 140.0.7339.185
[Impact] Remote attackers can execute arbitrary code (RCE) and trigger heap corruption by enticing a user to visit a specially crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (140.0.7339.185 or higher)
Google Chrome and Microsoft Edge V8 Out-of-Bounds Read/Write Vulnerability (CVE-2025-5419) Urgent Security Advisory
[Affected Scope] Google Chrome and Chromium-based browsers (including Microsoft Edge) prior to version 137.0.7151.68
[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code within the browser renderer process via a crafted HTML page
[Mitigation] Immediately update all affected browsers to the latest stable version (137.0.7151.68 or higher) and enforce automatic update policies
Google Chrome and Chromium-based Browsers V8 Engine Type Confusion Remote Code Execution Vulnerability (CVE-2024-7971)
[Affected Scope] Google Chrome prior to 128.0.6613.84 and all affected Chromium-based browsers (e.g., Microsoft Edge)
[Impact] Remote attackers can trigger heap corruption and execute arbitrary code within the browser renderer process via a crafted HTML page
[Mitigation] Immediately update all Chromium-based browsers to the latest stable release (Chrome 128.0.6613.84 or higher)
Google Chrome V8 Inappropriate Implementation Heap Corruption Vulnerability (CVE-2024-7965)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 128.0.6613.84
[Impact] A remote attacker can trigger heap corruption via a crafted HTML page, potentially leading to arbitrary code execution (RCE) within the browser process
[Mitigation] Immediately update Google Chrome to the latest stable version (128.0.6613.84/.85 or higher)
Google Chrome V8 Engine Type Confusion Vulnerability Analysis and Mitigation Guide (CVE-2024-5274)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 125.0.6422.112
[Impact] A remote attacker can execute arbitrary code inside the browser sandbox via a crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (125.0.6422.112 or higher)
Google Chrome V8 Type Confusion Remote Code Execution Vulnerability (CVE-2024-4947)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 125.0.6422.60
[Impact] A remote attacker can execute arbitrary code within the browser sandbox by enticing a user to visit a specially crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (125.0.6422.60 or higher)
Google Chrome V8 Engine Out-of-bounds Write Vulnerability (CVE-2024-4761) Technical Analysis and Hardening Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 124.0.6367.207
[Impact] A remote attacker can trigger an out-of-bounds memory write via a crafted HTML page, potentially leading to arbitrary code execution or denial of service (DoS)
[Mitigation] Immediately update Google Chrome to the latest stable version (124.0.6367.207 or higher) and enforce automatic update policies across the enterprise
Google Chrome V8 Out-of-Bounds Memory Access Vulnerability (CVE-2024-0519) Technical Advisory
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 120.0.6099.224
[Impact] A remote attacker can trigger heap corruption via a crafted HTML page, potentially leading to arbitrary code execution (RCE) or sensitive information disclosure within the browser renderer process
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (120.0.6099.224 or higher)
Google Chrome and Chromium-based Browsers V8 Engine Type Confusion Remote Code Execution Vulnerability (CVE-2023-4762)
[Affected Scope] Google Chrome and Chromium-based browsers (such as Microsoft Edge) prior to version 116.0.5845.179
[Impact] A remote attacker can execute arbitrary code and compromise the target system by enticing a user to visit a specially crafted HTML page
[Mitigation] Immediately update your browser to the latest stable version (116.0.5845.179 or higher)
Google Chrome V8 Engine Type Confusion Remote Code Execution Vulnerability (CVE-2023-3079)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 114.0.5735.110
[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code by enticing a user to visit a specially crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (114.0.5735.110 or higher) and enforce automatic update policies
Google Chrome V8 Type Confusion Vulnerability (CVE-2023-2033) Technical Analysis and Mitigation Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 112.0.5615.121
[Impact] Remote attackers can exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution (RCE) within the browser process
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (112.0.5615.121 or higher)
Google Chrome V8 Engine Type Confusion Remote Code Execution Vulnerability (CVE-2022-4262)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 108.0.5359.94
[Impact] A remote attacker can exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution within the browser process
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (108.0.5359.94 or higher)
Google Chrome V8 Engine Type Confusion Remote Code Execution Vulnerability (CVE-2022-3723) Analysis and Mitigation Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 107.0.5304.87
[Impact] A remote attacker can potentially exploit heap corruption via a crafted HTML page, leading to arbitrary remote code execution (RCE) within the browser renderer process
[Mitigation] Immediately update Google Chrome to the latest stable version (107.0.5304.87 or higher) and enforce automatic updates across enterprise environments
Google Chrome V8 Turbofan Type Confusion Remote Code Execution Vulnerability (CVE-2022-1364) Analysis and Mitigation Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 100.0.4896.127
[Impact] A remote attacker can exploit heap corruption via a crafted HTML page to execute arbitrary code within the browser process context
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (100.0.4896.127 or higher)
Google Chrome and Chromium-based Browsers V8 Engine Type Confusion Remote Code Execution Vulnerability (CVE-2022-1096)
[Affected Scope] Google Chrome versions prior to 99.0.4844.84 and all affected Chromium-based browsers (Edge, Brave, Opera, etc.)
[Impact] A remote attacker can exploit heap corruption via a specially crafted HTML page, potentially leading to arbitrary code execution (RCE) within the browser process context
[Mitigation] Immediately update all Chromium-based browsers to the latest stable release (Chrome 99.0.4844.84 or higher)