How we count
Every figure on this page is a direct count of entries in CISA’s Known Exploited Vulnerabilities catalog attributed by CISA to Google (KEV field vendorProject), refreshed daily. “Ransomware-linked” counts entries CISA marks as known to be used in ransomware campaigns; the remainder are “unknown” to CISA, not confirmed ransomware-free. A KEV listing means the vulnerability has been observed exploited in the wild. Snapshot as of 2026-08-31.
Exploited Google vulnerabilities (CISA KEV)
| CVE | Product | Vulnerability | Added | |
|---|---|---|---|---|
| CVE-2026-11645 | Chromium V8 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | 2026-06-09 | |
| CVE-2026-5281 | Dawn | Google Dawn Use-After-Free Vulnerability | 2026-04-01 | |
| CVE-2026-3910 | Chromium V8 | Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability | 2026-03-13 | |
| CVE-2026-3909 | Skia | Google Skia Out-of-Bounds Write Vulnerability | 2026-03-13 | |
| CVE-2026-2441 | Chromium | Google Chromium CSS Use-After-Free Vulnerability | 2026-02-17 | |
| CVE-2025-14174 | Chromium | Google Chromium Out of Bounds Memory Access Vulnerability | 2025-12-12 | |
| CVE-2025-13223 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 2025-11-19 | |
| CVE-2025-10585 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 2025-09-23 | |
| CVE-2025-6558 | Chromium | Google Chromium ANGLE and GPU Improper Input Validation Vulnerability | 2025-07-22 | |
| CVE-2025-6554 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 2025-07-02 | |
| CVE-2025-5419 | Chromium V8 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | 2025-06-05 | |
| CVE-2025-2783 | Chromium Mojo | Google Chromium Mojo Sandbox Escape Vulnerability | 2025-03-27 | |
| CVE-2024-7965 | Chromium V8 | Google Chromium V8 Inappropriate Implementation Vulnerability | 2024-08-28 | |
| CVE-2024-7971 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 2024-08-26 | |
| CVE-2024-5274 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 2024-05-28 | |
| CVE-2024-4947 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 2024-05-20 | |
| CVE-2024-4761 | Chromium V8 | Google Chromium V8 Out-of-Bounds Memory Write Vulnerability | 2024-05-16 | |
| CVE-2024-4671 | Chromium | Google Chromium Visuals Use-After-Free Vulnerability | 2024-05-13 | |
| CVE-2023-4762 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 2024-02-06 | |
| CVE-2024-0519 | Chromium V8 | Google Chromium V8 Out-of-Bounds Memory Access Vulnerability | 2024-01-17 | |
| CVE-2023-7024 | Chromium WebRTC | Google Chromium WebRTC Heap Buffer Overflow Vulnerability | 2024-01-02 | |
| CVE-2023-6345 | Chromium Skia | Google Skia Integer Overflow Vulnerability | 2023-11-30 | |
| CVE-2023-5217 | Chromium libvpx | Google Chromium libvpx Heap Buffer Overflow Vulnerability | 2023-10-02 | |
| CVE-2023-4863 | Chromium WebP | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability | 2023-09-13 | |
| CVE-2023-3079 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 2023-06-07 | |
| CVE-2023-2136 | Chromium Skia | Google Chrome Skia Integer Overflow Vulnerability | 2023-04-21 | |
| CVE-2023-2033 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 2023-04-17 | |
| CVE-2022-3038 | Chromium Network Service | Google Chromium Network Service Use-After-Free Vulnerability | 2023-03-30 | |
| CVE-2022-4262 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 2022-12-05 | |
| CVE-2022-4135 | Chromium GPU | Google Chromium GPU Heap Buffer Overflow Vulnerability | 2022-11-28 | |
| CVE-2022-3723 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 2022-10-28 | |
| CVE-2022-3075 | Chromium Mojo | Google Chromium Mojo Insufficient Data Validation Vulnerability | 2022-09-08 | |
| CVE-2022-2856 | Chromium Intents | Google Chromium Intents Insufficient Input Validation Vulnerability | 2022-08-18 | |
| CVE-2021-30533 | Chromium PopupBlocker | Google Chromium PopupBlocker Security Bypass Vulnerability | 2022-06-27 | |
| CVE-2019-5825 | Chromium V8 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 2022-06-08 | |
| CVE-2018-6065 | Chromium V8 | Google Chromium V8 Integer Overflow Vulnerability | 2022-06-08 | |
| CVE-2018-17480 | Chromium V8 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 2022-06-08 | |
| CVE-2018-17463 | Chromium V8 | Google Chromium V8 Remote Code Execution Vulnerability | 2022-06-08 | |
| CVE-2017-5070 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 2022-06-08 | |
| CVE-2017-5030 | Chromium V8 | Google Chromium V8 Memory Corruption Vulnerability | 2022-06-08 | |
| CVE-2016-5198 | Chromium V8 | Google Chromium V8 Out-of-Bounds Memory Vulnerability | 2022-06-08 | |
| CVE-2016-1646 | Chromium V8 | Google Chromium V8 Out-of-Bounds Read Vulnerability | 2022-06-08 | |
| CVE-2019-5786 | Chrome Blink | Google Chrome Blink Use-After-Free Vulnerability | 2022-05-23 | |
| CVE-2019-13720 | Chrome WebAudio | Google Chrome WebAudio Use-After-Free Vulnerability | 2022-05-23 | |
| CVE-2022-1364 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 2022-04-15 | |
| CVE-2021-39793 | Pixel | Google Pixel Out-of-Bounds Write Vulnerability | 2022-04-11 | |
| CVE-2022-1096 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 2022-03-28 | |
| CVE-2022-0609 | Chromium Animation | Google Chromium Animation Use-After-Free Vulnerability | 2022-02-15 | |
| CVE-2020-6572 | Chrome Media | Google Chrome Media Use-After-Free Vulnerability | 2022-01-10 | |
| CVE-2021-4102 | Chromium V8 | Google Chromium V8 Use-After-Free Vulnerability | 2021-12-15 | |
| CVE-2020-16010 | Chrome for Android UI | Google Chrome for Android UI Heap Buffer Overflow Vulnerability | 2021-11-03 | |
| CVE-2020-15999 | Chrome FreeType | Google Chrome FreeType Heap Buffer Overflow Vulnerability | 2021-11-03 | |
| CVE-2021-21166 | Chromium | Google Chromium Race Condition Vulnerability | 2021-11-03 | |
| CVE-2020-16017 | Chrome | Google Chrome Use-After-Free Vulnerability | 2021-11-03 | |
| CVE-2021-37976 | Chromium | Google Chromium Information Disclosure Vulnerability | 2021-11-03 | |
| CVE-2020-16009 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 2021-11-03 | |
| CVE-2021-30632 | Chromium V8 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 2021-11-03 | |
| CVE-2020-16013 | Chromium V8 | Google Chromium V8 Incorrect Implementation Vulnerabililty | 2021-11-03 | |
| CVE-2021-30633 | Chromium Indexed DB API | Google Chromium Indexed DB API Use-After-Free Vulnerability | 2021-11-03 | |
| CVE-2021-21148 | Chromium V8 | Google Chromium V8 Heap Buffer Overflow Vulnerability | 2021-11-03 |
Showing the 60 most recent of 72 Google KEV entries. Full catalog at CISA.
← All vendors by exploited-vulnerability count
🤖 Generated by defend.network from the CISA KEV catalog. Counts are deterministic aggregates of official CISA data; verify individual advisories at the linked sources.