Class familyGoogle · Chromium Skia
Google Chrome integer overflow flaws, 2018–2026
39 Chromium Skia CVEs with CWE-190 weaknesses, 14 Nov 2018 to 30 Oct 2026. 3 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2018’18
2019’19
2020’20
2021’21
2022’22
5 2023’23
1 2024’24
1 2025’25
31 2026’26
In CISA KEVNot in KEV
20181 CVE, 1 in KEV
20235 CVEs, 2 in KEV
20241 CVE
20251 CVE
202631 CVEs
- CVE-2026-3536
- CVE-2026-11044
- CVE-2026-11085
- CVE-2026-11088
- CVE-2026-11281
- CVE-2026-11290
- CVE-2026-11299
- CVE-2026-15108
- CVE-2026-16416
- CVE-2026-17673
- CVE-2026-17682
- CVE-2026-17705
- CVE-2026-17717
- CVE-2026-17726
- CVE-2026-19167
- CVE-2026-19174
- CVE-2026-78950
- CVE-2026-79215
- CVE-2026-79223
- CVE-2026-79292
- CVE-2026-87630
- CVE-2026-87643
- CVE-2026-91728
- CVE-2026-91746
- CVE-2026-95308
- CVE-2026-103621
- CVE-2026-103629
- CVE-2026-106239
- CVE-2026-106332
- CVE-2026-106417
- CVE-2026-119268
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2018-6065KEV | 14 Nov 2018 | Google Chromium V8 Integer Overflow Vulnerability | Grouped by weakness | 69.0 |
| CVE-2023-0705 | 7 Feb 2023 | Integer overflow in Core in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who had one a race… | Grouped by weakness | 16.1 |
| CVE-2023-0933 | 22 Feb 2023 | Integer overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap… | Grouped by weakness | 15.9 |
| CVE-2023-2136KEV | 19 Apr 2023 | Google Chrome Skia Integer Overflow Vulnerability | Grouped by weakness | 63.3 |
| CVE-2023-5849 | 1 Nov 2023 | Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap… | Grouped by weakness | 20.0 |
| CVE-2023-6345KEV | 29 Nov 2023 | Google Skia Integer Overflow Vulnerability | Grouped by weakness | 64.1 |
| CVE-2024-9123 | 24 Sep 2024 | Integer overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform an out of bounds… | Grouped by weakness | 14.5 |
| CVE-2025-6191 | 18 Jun 2025 | Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out… | Grouped by weakness | 25.4 |
| CVE-2026-3536 | 4 Mar 2026 | Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform… | Grouped by weakness | 16.8 |
| CVE-2026-11044 | 4 Jun 2026 | Integer overflow in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain… | Grouped by weakness | 8.8 |
| CVE-2026-11085 | 4 Jun 2026 | Integer overflow in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially… | Grouped by weakness | 9.4 |
| CVE-2026-11088 | 4 Jun 2026 | Integer overflow in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the… | Grouped by weakness | 12.2 |
| CVE-2026-11281 | 4 Jun 2026 | Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain… | Grouped by weakness | 3.6 |
| CVE-2026-11290 | 4 Jun 2026 | Integer overflow in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to cause a… | Grouped by weakness | 3.5 |
| CVE-2026-11299 | 4 Jun 2026 | Integer overflow in Fonts in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially… | Grouped by weakness | 6.5 |
| CVE-2026-15108 | 8 Jul 2026 | Integer overflow in Extensions API in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user… | Grouped by weakness | 4.9 |
| CVE-2026-16416 | 21 Jul 2026 | Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially… | Grouped by weakness | 7.0 |
| CVE-2026-17673 | 30 Jul 2026 | Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the… | Grouped by weakness | 12.3 |
| CVE-2026-17682 | 30 Jul 2026 | Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the… | Grouped by weakness | 15.4 |
| CVE-2026-17705 | 30 Jul 2026 | Integer overflow in libxml in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.3 |
| CVE-2026-17717 | 30 Jul 2026 | Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a… | Grouped by weakness | 15.4 |
| CVE-2026-17726 | 30 Jul 2026 | Integer overflow in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially… | Grouped by weakness | 12.3 |
| CVE-2026-19167 | 6 Aug 2026 | Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the… | Grouped by weakness | 5.0 |
| CVE-2026-19174 | 6 Aug 2026 | Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.3 |
| CVE-2026-78950 | 25 Aug 2026 | Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute… | Grouped by weakness | 15.0 |
| CVE-2026-79215 | 25 Aug 2026 | Integer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute… | Grouped by weakness | 15.0 |
| CVE-2026-79223 | 25 Aug 2026 | Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside… | Grouped by weakness | 11.1 |
| CVE-2026-79292 | 25 Aug 2026 | Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised… | Grouped by weakness | 12.7 |
| CVE-2026-87630 | 9 Sep 2026 | Integer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the… | Grouped by weakness | 6.5 |
| CVE-2026-87643 | 9 Sep 2026 | Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially… | Grouped by weakness | 14.7 |
| CVE-2026-91728 | 15 Sep 2026 | Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.7 |
| CVE-2026-91746 | 15 Sep 2026 | Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain… | Grouped by weakness | 5.7 |
| CVE-2026-95308 | 29 Sep 2026 | Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the… | Grouped by weakness | 4.2 |
| CVE-2026-103621 | 2 Oct 2026 | Integer overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin… | Grouped by weakness | 5.0 |
| CVE-2026-103629 | 2 Oct 2026 | Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data… | Grouped by weakness | 5.0 |
| CVE-2026-106239 | 6 Oct 2026 | Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to… | Grouped by weakness | 16.4 |
| CVE-2026-106332 | 6 Oct 2026 | Integer overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain… | Grouped by weakness | 5.4 |
| CVE-2026-106417 | 6 Oct 2026 | Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute… | Grouped by weakness | 14.3 |
| CVE-2026-119268 | 30 Oct 2026 | Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute… | Grouped by weakness | 8.1 |