CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Google Chrome V8 Engine Integer Overflow Heap Corruption Vulnerability (CVE-2018-6065) Technical Advisory
[Affected Scope] Google Chrome versions prior to 65.0.3325.146 and applications utilizing affected V8 JavaScript engine releases
[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code via a specially crafted HTML page
[Mitigation] Immediately upgrade Google Chrome to the latest stable channel (65.0.3325.146 or higher) and apply OS-level package updates
Google Chrome V8 Engine Type Confusion Remote Code Execution Vulnerability (CVE-2018-17463)
[Affected Scope] Google Chrome versions prior to 70.0.3538.64 and applications utilizing vulnerable V8 engine releases
[Impact] Remote attackers can execute arbitrary code within the browser renderer sandbox by enticing a user to visit a specially crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (70.0.3538.64 or higher) and rebuild V8-dependent frameworks
Google Chrome V8 Engine Incorrect Optimization Remote Code Execution Vulnerability (CVE-2016-5198)
[Affected Scope] Google Chrome V8 engine prior to 54.0.2840.90 for Linux, 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac
[Impact] Remote attackers can perform arbitrary memory read/write operations and execute arbitrary code via a specially crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (54.0.2840.90/87/85 or higher depending on the OS platform)
Google Chrome V8 Engine Array.prototype.concat Out-of-Bounds Read and Remote Code Execution Vulnerability (CVE-2016-1646)
[Affected Scope] Google Chrome browser versions prior to 49.0.2623.108 and applications utilizing vulnerable V8 JavaScript engine releases
[Impact] Remote attackers can trigger a denial of service (browser crash) or potentially execute arbitrary code via crafted JavaScript payloads that exploit memory corruption
[Mitigation] Immediately update Google Chrome to the latest stable channel (49.0.2623.108 or higher) and patch any V8-dependent runtime environments