Class familyGoogle · Chromium V8
Google Chrome memory corruption flaws, 2016–2026
63 Chromium V8 CVEs with CWE-119 weaknesses, 29 Mar 2016 to 30 Oct 2026. 3 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2016’16
2017’17
2018’18
2019’19
2020’20
2021’21
2022’22
2023’23
2 2024’24
1 2025’25
59 2026’26
In CISA KEVNot in KEV
20161 CVE, 1 in KEV
20242 CVEs
20251 CVE, 1 in KEV
202659 CVEs, 1 in KEV
- CVE-2026-3910
- CVE-2026-10904
- CVE-2026-14383
- CVE-2026-14407
- CVE-2026-87444
- CVE-2026-110913
- CVE-2026-110920
- CVE-2026-112994
- CVE-2026-112998
- CVE-2026-113000
- CVE-2026-113004
- CVE-2026-113034
- CVE-2026-113036
- CVE-2026-113049
- CVE-2026-113052
- CVE-2026-113083
- CVE-2026-113094
- CVE-2026-113104
- CVE-2026-113109
- CVE-2026-113127
- CVE-2026-113134
- CVE-2026-113143
- CVE-2026-113154
- CVE-2026-113167
- CVE-2026-113182
- CVE-2026-113188
- CVE-2026-113192
- CVE-2026-113193
- CVE-2026-113194
- CVE-2026-113225
- CVE-2026-113226
- CVE-2026-113234
- CVE-2026-113242
- CVE-2026-113248
- CVE-2026-113260
- CVE-2026-113266
- CVE-2026-113273
- CVE-2026-113284
- CVE-2026-113285
- CVE-2026-113288
- CVE-2026-113315
- CVE-2026-113318
- CVE-2026-113331
- CVE-2026-113343
- CVE-2026-118311
- CVE-2026-118317
- CVE-2026-118320
- CVE-2026-118322
- CVE-2026-118327
- CVE-2026-118349
- CVE-2026-118351
- CVE-2026-118352
- CVE-2026-118359
- CVE-2026-119264
- CVE-2026-119265
- CVE-2026-119267
- CVE-2026-76026
- CVE-2026-76029
- CVE-2026-76030
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2016-1646KEV | 29 Mar 2016 | Google Chromium V8 Out-of-Bounds Read Vulnerability | Grouped by weakness | 68.9 |
| CVE-2024-7972 | 21 Aug 2024 | Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially… | Grouped by weakness | 15.3 |
| CVE-2024-7024 | 23 Sep 2024 | Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially… | Grouped by weakness | 12.2 |
| CVE-2025-14174KEV | 12 Dec 2025 | Google Chromium Out of Bounds Memory Access Vulnerability | Grouped by weakness | 74.0 |
| CVE-2026-3910KEV | 13 Mar 2026 | Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability | Grouped by weakness | 66.3 |
| CVE-2026-10904 | 4 Jun 2026 | Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute… | Grouped by weakness | 14.1 |
| CVE-2026-14383 | 1 Jul 2026 | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute… | Grouped by weakness | 14.5 |
| CVE-2026-14407 | 1 Jul 2026 | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute… | Grouped by weakness | 13.7 |
| CVE-2026-87444 | 9 Sep 2026 | Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary… | Grouped by weakness | 13.3 |
| CVE-2026-110913 | 15 Oct 2026 | Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 11.3 |
| CVE-2026-110920 | 15 Oct 2026 | Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 9.5 |
| CVE-2026-112994 | 20 Oct 2026 | Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary… | Grouped by weakness | 14.9 |
| CVE-2026-112998 | 20 Oct 2026 | Memory corruption in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.4 |
| CVE-2026-113000 | 20 Oct 2026 | Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.4 |
| CVE-2026-113004 | 20 Oct 2026 | Memory corruption in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.4 |
| CVE-2026-113034 | 20 Oct 2026 | Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary… | Grouped by weakness | 13.5 |
| CVE-2026-113036 | 20 Oct 2026 | Memory corruption in HTML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute… | Grouped by weakness | 12.5 |
| CVE-2026-113049 | 20 Oct 2026 | Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute… | Grouped by weakness | 13.4 |
| CVE-2026-113052 | 20 Oct 2026 | Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.4 |
| CVE-2026-113083 | 20 Oct 2026 | Memory corruption in Actor in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute… | Grouped by weakness | 13.1 |
| CVE-2026-113094 | 20 Oct 2026 | Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.4 |
| CVE-2026-113104 | 20 Oct 2026 | Memory corruption in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute… | Grouped by weakness | 13.4 |
| CVE-2026-113109 | 20 Oct 2026 | Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute… | Grouped by weakness | 13.4 |
| CVE-2026-113127 | 20 Oct 2026 | Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute… | Grouped by weakness | 15.1 |
| CVE-2026-113134 | 20 Oct 2026 | Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute… | Grouped by weakness | 13.4 |
| CVE-2026-113143 | 20 Oct 2026 | Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory via a… | Grouped by weakness | 7.9 |
| CVE-2026-113154 | 20 Oct 2026 | Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute… | Grouped by weakness | 13.4 |
| CVE-2026-113167 | 20 Oct 2026 | Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute… | Grouped by weakness | 13.9 |
| CVE-2026-113182 | 20 Oct 2026 | Memory corruption in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary… | Grouped by weakness | 14.0 |
| CVE-2026-113188 | 20 Oct 2026 | Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute… | Grouped by weakness | 13.5 |
| CVE-2026-113192 | 20 Oct 2026 | Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.9 |
| CVE-2026-113193 | 20 Oct 2026 | Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory… | Grouped by weakness | 9.6 |
| CVE-2026-113194 | 20 Oct 2026 | Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.9 |
| CVE-2026-113225 | 20 Oct 2026 | Memory corruption in Browser in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to… | Grouped by weakness | 9.8 |
| CVE-2026-113226 | 20 Oct 2026 | Memory corruption in Model in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.4 |
| CVE-2026-113234 | 20 Oct 2026 | Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute… | Grouped by weakness | 13.4 |
| CVE-2026-113242 | 20 Oct 2026 | Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute… | Grouped by weakness | 13.9 |
| CVE-2026-113248 | 20 Oct 2026 | Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially… | Grouped by weakness | 13.9 |
| CVE-2026-113260 | 20 Oct 2026 | Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute… | Grouped by weakness | 13.5 |
| CVE-2026-113266 | 20 Oct 2026 | Memory corruption in ANGLE in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to… | Grouped by weakness | 13.0 |
| CVE-2026-113273 | 20 Oct 2026 | Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.5 |
| CVE-2026-113284 | 20 Oct 2026 | Memory corruption in XML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute… | Grouped by weakness | 13.5 |
| CVE-2026-113285 | 20 Oct 2026 | Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute… | Grouped by weakness | 13.5 |
| CVE-2026-113288 | 20 Oct 2026 | Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.5 |
| CVE-2026-113315 | 20 Oct 2026 | Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute… | Grouped by weakness | 13.9 |
| CVE-2026-113318 | 20 Oct 2026 | Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute… | Grouped by weakness | 13.9 |
| CVE-2026-113331 | 20 Oct 2026 | Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute… | Grouped by weakness | 14.0 |
| CVE-2026-113343 | 20 Oct 2026 | Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary… | Grouped by weakness | 13.5 |
| CVE-2026-118311 | 27 Oct 2026 | Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute… | Grouped by weakness | 10.2 |
| CVE-2026-118317 | 27 Oct 2026 | Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute… | Grouped by weakness | 11.1 |
| CVE-2026-118320 | 27 Oct 2026 | Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute… | Grouped by weakness | 11.1 |
| CVE-2026-118322 | 27 Oct 2026 | Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read… | Grouped by weakness | 5.1 |
| CVE-2026-118327 | 27 Oct 2026 | Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute… | Grouped by weakness | 10.2 |
| CVE-2026-118349 | 27 Oct 2026 | Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary… | Grouped by weakness | 9.8 |
| CVE-2026-118351 | 27 Oct 2026 | Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 9.8 |
| CVE-2026-118352 | 27 Oct 2026 | Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute… | Grouped by weakness | 9.8 |
| CVE-2026-118359 | 27 Oct 2026 | Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute… | Grouped by weakness | 10.3 |
| CVE-2026-119264 | 30 Oct 2026 | Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute… | Grouped by weakness | 8.1 |
| CVE-2026-119265 | 30 Oct 2026 | Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute… | Grouped by weakness | 8.1 |
| CVE-2026-119267 | 30 Oct 2026 | Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute… | Grouped by weakness | 8.1 |
| CVE-2026-76026 | 30 Oct 2026 | Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary… | Grouped by weakness | 8.1 |
| CVE-2026-76029 | 30 Oct 2026 | Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute… | Grouped by weakness | 8.1 |
| CVE-2026-76030 | 30 Oct 2026 | Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially… | Grouped by weakness | 8.1 |