CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Google Chrome V8 Engine Inappropriate Exception Handling Heap Corruption Vulnerability (CVE-2021-38003)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 95.0.4638.69
[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code by enticing a user to visit a specially crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (95.0.4638.69 or higher)
Google Chrome V8 Engine Heap Buffer Overflow Vulnerability (CVE-2021-21148) Technical Advisory
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 88.0.4324.150
[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (88.0.4324.150 or higher)
Google Chrome V8 Engine Type Confusion Remote Code Execution Vulnerability (CVE-2020-6418) Analysis and Mitigation Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 80.0.3987.122, and runtime environments utilizing the V8 engine
[Impact] Remote attackers can exploit heap corruption via a crafted HTML page, potentially leading to arbitrary remote code execution (RCE) on the target system
[Mitigation] Immediately update Google Chrome to the latest stable version (80.0.3987.122 or higher) and apply system package updates for V8 dependencies
Google Chrome V8 Engine Integer Overflow Heap Corruption Vulnerability (CVE-2018-6065) Technical Advisory
[Affected Scope] Google Chrome versions prior to 65.0.3325.146 and applications utilizing affected V8 JavaScript engine releases
[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code via a specially crafted HTML page
[Mitigation] Immediately upgrade Google Chrome to the latest stable channel (65.0.3325.146 or higher) and apply OS-level package updates
Google Chrome V8 Engine Type Confusion Remote Code Execution Vulnerability (CVE-2018-17463)
[Affected Scope] Google Chrome versions prior to 70.0.3538.64 and applications utilizing vulnerable V8 engine releases
[Impact] Remote attackers can execute arbitrary code within the browser renderer sandbox by enticing a user to visit a specially crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (70.0.3538.64 or higher) and rebuild V8-dependent frameworks
Google Chrome V8 Engine Incorrect Optimization Remote Code Execution Vulnerability (CVE-2016-5198)
[Affected Scope] Google Chrome V8 engine prior to 54.0.2840.90 for Linux, 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac
[Impact] Remote attackers can perform arbitrary memory read/write operations and execute arbitrary code via a specially crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (54.0.2840.90/87/85 or higher depending on the OS platform)
Google Chrome V8 Engine Array.prototype.concat Out-of-Bounds Read and Remote Code Execution Vulnerability (CVE-2016-1646)
[Affected Scope] Google Chrome browser versions prior to 49.0.2623.108 and applications utilizing vulnerable V8 JavaScript engine releases
[Impact] Remote attackers can trigger a denial of service (browser crash) or potentially execute arbitrary code via crafted JavaScript payloads that exploit memory corruption
[Mitigation] Immediately update Google Chrome to the latest stable channel (49.0.2623.108 or higher) and patch any V8-dependent runtime environments