CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Google Chrome V8 Type Confusion Vulnerability (CVE-2025-10585) Technical Analysis and Remediation Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 140.0.7339.185
[Impact] Remote attackers can execute arbitrary code (RCE) and trigger heap corruption by enticing a user to visit a specially crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (140.0.7339.185 or higher)
Google Chrome and Chromium-based Browsers V8 Engine Type Confusion Remote Code Execution Vulnerability (CVE-2024-7971)
[Affected Scope] Google Chrome prior to 128.0.6613.84 and all affected Chromium-based browsers (e.g., Microsoft Edge)
[Impact] Remote attackers can trigger heap corruption and execute arbitrary code within the browser renderer process via a crafted HTML page
[Mitigation] Immediately update all Chromium-based browsers to the latest stable release (Chrome 128.0.6613.84 or higher)
Google Chrome V8 Engine Type Confusion Vulnerability Analysis and Mitigation Guide (CVE-2024-5274)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 125.0.6422.112
[Impact] A remote attacker can execute arbitrary code inside the browser sandbox via a crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (125.0.6422.112 or higher)
Google Chrome V8 Type Confusion Remote Code Execution Vulnerability (CVE-2024-4947)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 125.0.6422.60
[Impact] A remote attacker can execute arbitrary code within the browser sandbox by enticing a user to visit a specially crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (125.0.6422.60 or higher)
Google Chrome Visuals Use-After-Free Vulnerability (CVE-2024-4671) Technical Analysis and Mitigation Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 124.0.6367.201
[Impact] A remote attacker who has compromised the renderer process can exploit this vulnerability via a crafted HTML page to escape the browser sandbox and execute arbitrary code
[Mitigation] Immediately update Google Chrome to the latest stable version (124.0.6367.201 or higher) and enforce auto-update policies across the enterprise
Google Chrome Skia Graphics Library Integer Overflow Vulnerability (CVE-2023-6345) Technical Advisory
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 119.0.6045.199
[Impact] A remote attacker who has compromised the renderer process can exploit this vulnerability via a malicious file to escape the browser sandbox and execute arbitrary code
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable channel (119.0.6045.199 or higher)
Google Chrome Skia Graphics Library Integer Overflow Vulnerability (CVE-2023-2136) Technical Analysis and Remediation Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 112.0.5615.137
[Impact] A remote attacker who has compromised the renderer process can potentially perform a sandbox escape and execute arbitrary code via a crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (112.0.5615.137 or higher)
Google Chrome GPU Heap Buffer Overflow Vulnerability (CVE-2022-4135) Analysis and Mitigation Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 107.0.5304.121
[Impact] A remote attacker who has compromised the renderer process can bypass the browser sandbox and potentially execute arbitrary code via a crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (107.0.5304.121 or higher)
Google Chrome Mojo IPC Insufficient Data Validation Sandbox Escape Vulnerability (CVE-2022-3075)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 105.0.5195.102
[Impact] A remote attacker who has compromised the renderer process can bypass the browser sandbox and potentially execute arbitrary code on the host system via crafted Mojo IPC messages
[Mitigation] Immediately update Google Chrome and all Chromium-based browsers to version 105.0.5195.102 or later
Google Chrome Portals Use-After-Free Sandbox Escape and Remote Code Execution (CVE-2021-37973)
[Affected Scope] Google Chrome prior to version 94.0.4606.61 on desktop platforms
[Impact] A remote attacker who has compromised the renderer process can potentially bypass the Chrome sandbox and execute arbitrary code on the host system via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (94.0.4606.61 or higher) and enforce automatic updates across enterprise endpoints
Google Chrome Indexed DB API Use-After-Free Vulnerability (CVE-2021-30633) Analysis and Mitigation Guide
[Affected Scope] Google Chrome prior to version 93.0.4577.82
[Impact] A remote attacker who has compromised the renderer process can potentially execute arbitrary code and escape the browser sandbox via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (93.0.4577.82 or higher)
Google Chrome Site Isolation Use-After-Free Sandbox Escape Vulnerability (CVE-2020-16017)
[Affected Scope] Google Chrome prior to version 86.0.4240.198
[Impact] A remote attacker who has compromised the renderer process can bypass sandbox boundaries and potentially execute arbitrary code on the host system via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (86.0.4240.198 or higher)
Google Chrome for Android UI Heap Buffer Overflow Sandbox Escape Vulnerability (CVE-2020-16010) Technical Advisory
[Affected Scope] Google Chrome for Android prior to version 86.0.4240.185
[Impact] A remote attacker who has compromised the renderer process can trigger a heap buffer overflow in the UI component via a crafted HTML page, potentially leading to a complete sandbox escape and arbitrary code execution on the target device
[Mitigation] Immediately update Google Chrome for Android to version 86.0.4240.185 or later via the Google Play Store
Google Chrome and FreeType Heap Buffer Overflow Vulnerability (CVE-2020-15999) Technical Advisory
[Affected Scope] Google Chrome versions prior to 86.0.4240.111 and FreeType library versions prior to 2.10.4
[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code via a specially crafted HTML page or font file
[Mitigation] Immediately upgrade Google Chrome to version 86.0.4240.111 or later, and update the FreeType library to version 2.10.4 or higher