Class familyGoogle · Chromium V8
Google Chrome out-of-bounds read flaws, 2016–2026
66 Chromium V8 CVEs with CWE-125 weaknesses, 29 Mar 2016 to 30 Oct 2026. 6 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2016’16
2 2017’17
2018’18
2019’19
2020’20
2021’21
2022’22
2 2023’23
10 2024’24
10 2025’25
41 2026’26
In CISA KEVNot in KEV
20161 CVE, 1 in KEV
20172 CVEs, 2 in KEV
20232 CVEs
202410 CVEs, 1 in KEV
202510 CVEs, 1 in KEV
202641 CVEs, 1 in KEV
- CVE-2026-0899
- CVE-2026-3061
- CVE-2026-3920
- CVE-2026-3926
- CVE-2026-4459
- CVE-2026-4674
- CVE-2026-5873
- CVE-2026-7354
- CVE-2026-7899
- CVE-2026-7902
- CVE-2026-9121
- CVE-2026-9910
- CVE-2026-9928
- CVE-2026-10941
- CVE-2026-10979
- CVE-2026-11279
- CVE-2026-11690
- CVE-2026-11645
- CVE-2026-15114
- CVE-2026-15903
- CVE-2026-16419
- CVE-2026-78989
- CVE-2026-82072
- CVE-2026-87440
- CVE-2026-87596
- CVE-2026-102318
- CVE-2026-113006
- CVE-2026-113010
- CVE-2026-113035
- CVE-2026-113045
- CVE-2026-113050
- CVE-2026-113095
- CVE-2026-113102
- CVE-2026-113151
- CVE-2026-113199
- CVE-2026-113233
- CVE-2026-113295
- CVE-2026-113309
- CVE-2026-113310
- CVE-2026-113329
- CVE-2026-119272
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2016-1646KEV | 29 Mar 2016 | Google Chromium V8 Out-of-Bounds Read Vulnerability | Grouped by weakness | 68.9 |
| CVE-2016-5198KEV | 19 Jan 2017 | Google Chromium V8 Out-of-Bounds Memory Vulnerability | Grouped by weakness | 68.8 |
| CVE-2017-5030KEV | 24 Apr 2017 | Google Chromium V8 Memory Corruption Vulnerability | Grouped by weakness | 68.9 |
| CVE-2023-1532 | 21 Mar 2023 | Out of bounds read in GPU Video in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially… | Grouped by weakness | 25.2 |
| CVE-2023-4428 | 22 Aug 2023 | Out of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an… | Grouped by weakness | 24.9 |
| CVE-2024-0519KEV | 16 Jan 2024 | Google Chromium V8 Out-of-Bounds Memory Access Vulnerability | Grouped by weakness | 67.2 |
| CVE-2024-1669 | 21 Feb 2024 | Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out… | Grouped by weakness | 16.9 |
| CVE-2024-3156 | 6 Apr 2024 | Inappropriate implementation in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially… | Grouped by weakness | 25.4 |
| CVE-2024-3159 | 6 Apr 2024 | Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to perform… | Grouped by weakness | 21.3 |
| CVE-2024-4059 | 1 May 2024 | Out of bounds read in V8 API in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to leak cross-site data… | Grouped by weakness | 16.4 |
| CVE-2024-5159 | 22 May 2024 | Heap buffer overflow in ANGLE in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of… | Grouped by weakness | 16.3 |
| CVE-2024-6102 | 19 Jun 2024 | Out of bounds memory access in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially… | Grouped by weakness | 16.7 |
| CVE-2024-2884 | 16 Jul 2024 | Out of bounds read in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially perform out… | Grouped by weakness | 7.6 |
| CVE-2024-6779 | 16 Jul 2024 | Out of bounds memory access in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially… | Grouped by weakness | 24.9 |
| CVE-2024-12693 | 18 Dec 2024 | Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute… | Grouped by weakness | 13.4 |
| CVE-2025-0437 | 15 Jan 2025 | Out of bounds read in Metrics in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit… | Grouped by weakness | 9.0 |
| CVE-2025-0612 | 22 Jan 2025 | Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially… | Grouped by weakness | 13.5 |
| CVE-2025-1914 | 5 Mar 2025 | Out of bounds read in V8 in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to perform out of bounds… | Grouped by weakness | 12.8 |
| CVE-2025-1919 | 5 Mar 2025 | Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform… | Grouped by weakness | 12.8 |
| CVE-2025-2137 | 10 Mar 2025 | Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perform out of bounds… | Grouped by weakness | 12.4 |
| CVE-2025-5419KEV | 3 Jun 2025 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | Grouped by weakness | 68.1 |
| CVE-2025-11211 | 6 Nov 2025 | Out of bounds read in Media in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform… | Grouped by weakness | 11.6 |
| CVE-2025-12036 | 6 Nov 2025 | Out of bounds memory access in V8 in Google Chrome prior to 141.0.7390.122 allowed a remote attacker to perform out of… | Grouped by weakness | 24.1 |
| CVE-2025-9479 | 14 Nov 2025 | Out of bounds read in V8 in Google Chrome prior to 133.0.6943.141 allowed a remote attacker to potentially exploit… | Grouped by weakness | 5.1 |
| CVE-2025-14766 | 16 Dec 2025 | Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially… | Grouped by weakness | 23.8 |
| CVE-2026-0899 | 20 Jan 2026 | Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially… | Grouped by weakness | 13.3 |
| CVE-2026-3061 | 23 Feb 2026 | Out of bounds read in Media in Google Chrome prior to 145.0.7632.116 allowed a remote attacker to perform an out of… | Grouped by weakness | 11.7 |
| CVE-2026-3920 | 11 Mar 2026 | Out of bounds memory access in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially… | Grouped by weakness | 10.8 |
| CVE-2026-3926 | 11 Mar 2026 | Out of bounds read in V8 in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform out of bounds… | Grouped by weakness | 9.1 |
| CVE-2026-4459 | 20 Mar 2026 | Out of bounds read and write in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to… | Grouped by weakness | 10.5 |
| CVE-2026-4674 | 24 Mar 2026 | Out of bounds read in CSS in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform out of bounds… | Grouped by weakness | 14.2 |
| CVE-2026-5873 | 8 Apr 2026 | Out of bounds read and write in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute… | Grouped by weakness | 12.5 |
| CVE-2026-7354 | 28 Apr 2026 | Out of bounds read and write in Angle in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to… | Grouped by weakness | 11.9 |
| CVE-2026-7899 | 6 May 2026 | Out of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute… | Grouped by weakness | 15.8 |
| CVE-2026-7902 | 6 May 2026 | Out of bounds memory access in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute… | Grouped by weakness | 11.7 |
| CVE-2026-9121 | 20 May 2026 | Out of bounds read in GPU in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to potentially exploit… | Grouped by weakness | 11.4 |
| CVE-2026-9910 | 28 May 2026 | Out of bounds memory access in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute… | Grouped by weakness | 11.7 |
| CVE-2026-9928 | 28 May 2026 | Out of bounds read in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute… | Grouped by weakness | 10.8 |
| CVE-2026-10941 | 4 Jun 2026 | Out of bounds memory access in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute… | Grouped by weakness | 13.8 |
| CVE-2026-10979 | 4 Jun 2026 | Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially… | Grouped by weakness | 9.6 |
| CVE-2026-11279 | 4 Jun 2026 | Out of bounds read in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary… | Grouped by weakness | 10.5 |
| CVE-2026-11690 | 8 Jun 2026 | Out of bounds read and write in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who… | Grouped by weakness | 7.6 |
| CVE-2026-11645KEV | 9 Jun 2026 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | Grouped by weakness | 71.0 |
| CVE-2026-15114 | 8 Jul 2026 | Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to… | Grouped by weakness | 11.1 |
| CVE-2026-15903 | 20 Jul 2026 | Out of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute… | Grouped by weakness | 13.3 |
| CVE-2026-16419 | 21 Jul 2026 | Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker to… | Grouped by weakness | 10.1 |
| CVE-2026-78989 | 25 Aug 2026 | Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to… | Grouped by weakness | 16.0 |
| CVE-2026-82072 | 27 Aug 2026 | Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.3 |
| CVE-2026-87440 | 9 Sep 2026 | Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary… | Grouped by weakness | 13.3 |
| CVE-2026-87596 | 9 Sep 2026 | Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside… | Grouped by weakness | 6.3 |
| CVE-2026-102318 | 29 Sep 2026 | Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside… | Grouped by weakness | 5.7 |
| CVE-2026-113006 | 20 Oct 2026 | Out of bounds read in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially… | Grouped by weakness | 13.4 |
| CVE-2026-113010 | 20 Oct 2026 | Out of bounds read in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory… | Grouped by weakness | 8.8 |
| CVE-2026-113035 | 20 Oct 2026 | Out of bounds read in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory… | Grouped by weakness | 9.3 |
| CVE-2026-113045 | 20 Oct 2026 | Out of bounds read in Offline in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to… | Grouped by weakness | 10.1 |
| CVE-2026-113050 | 20 Oct 2026 | Out of bounds read in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the… | Grouped by weakness | 9.1 |
| CVE-2026-113095 | 20 Oct 2026 | Out of bounds read in Focus in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary… | Grouped by weakness | 13.4 |
| CVE-2026-113102 | 20 Oct 2026 | Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory… | Grouped by weakness | 9.8 |
| CVE-2026-113151 | 20 Oct 2026 | Out of bounds read in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside… | Grouped by weakness | 9.8 |
| CVE-2026-113199 | 20 Oct 2026 | Out of bounds read in Payments in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside… | Grouped by weakness | 9.6 |
| CVE-2026-113233 | 20 Oct 2026 | Out of bounds read in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to… | Grouped by weakness | 13.4 |
| CVE-2026-113295 | 20 Oct 2026 | Out of bounds read in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read… | Grouped by weakness | 10.1 |
| CVE-2026-113309 | 20 Oct 2026 | Out of bounds read in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside… | Grouped by weakness | 10.1 |
| CVE-2026-113310 | 20 Oct 2026 | Out of bounds read in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory… | Grouped by weakness | 10.1 |
| CVE-2026-113329 | 20 Oct 2026 | Out of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to… | Grouped by weakness | 9.9 |
| CVE-2026-119272 | 30 Oct 2026 | Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory… | Grouped by weakness | 4.1 |