Class familyGoogle · Chromium Intents
Google Chrome input validation flaws, 2021–2026
65 Chromium Intents CVEs with CWE-20 weaknesses, 26 Apr 2021 to 27 Oct 2026. 5 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
2 2021’21
2 2022’22
2023’23
2024’24
1 2025’25
60 2026’26
In CISA KEVNot in KEV
20212 CVEs, 2 in KEV
20222 CVEs, 2 in KEV
20251 CVE, 1 in KEV
202660 CVEs
- CVE-2026-3545
- CVE-2026-4451
- CVE-2026-5879
- CVE-2026-7905
- CVE-2026-7967
- CVE-2026-9885
- CVE-2026-9898
- CVE-2026-9914
- CVE-2026-9969
- CVE-2026-9982
- CVE-2026-10911
- CVE-2026-10917
- CVE-2026-10974
- CVE-2026-10983
- CVE-2026-11021
- CVE-2026-11041
- CVE-2026-11066
- CVE-2026-11113
- CVE-2026-11151
- CVE-2026-11659
- CVE-2026-11666
- CVE-2026-11697
- CVE-2026-13780
- CVE-2026-13817
- CVE-2026-13829
- CVE-2026-13834
- CVE-2026-13843
- CVE-2026-13849
- CVE-2026-13920
- CVE-2026-14038
- CVE-2026-14055
- CVE-2026-14106
- CVE-2026-14382
- CVE-2026-14401
- CVE-2026-14411
- CVE-2026-14412
- CVE-2026-17651
- CVE-2026-17655
- CVE-2026-17660
- CVE-2026-17663
- CVE-2026-17671
- CVE-2026-17681
- CVE-2026-17684
- CVE-2026-17741
- CVE-2026-17806
- CVE-2026-17809
- CVE-2026-17834
- CVE-2026-17847
- CVE-2026-17867
- CVE-2026-17906
- CVE-2026-17991
- CVE-2026-19164
- CVE-2026-19177
- CVE-2026-79230
- CVE-2026-91738
- CVE-2026-113012
- CVE-2026-113117
- CVE-2026-113252
- CVE-2026-113334
- CVE-2026-118329
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2021-21220KEV | 26 Apr 2021 | Google Chromium V8 Improper Input Validation Vulnerability | Grouped by weakness | 69.0 |
| CVE-2021-38000KEV | 23 Nov 2021 | Google Chromium Intents Improper Input Validation Vulnerability | Grouped by weakness | 65.7 |
| CVE-2022-2856KEV | 26 Sep 2022 | Google Chromium Intents Insufficient Input Validation Vulnerability | Grouped by weakness | 65.9 |
| CVE-2022-3075KEV | 26 Sep 2022 | Google Chromium Mojo Insufficient Data Validation Vulnerability | Grouped by weakness | 63.4 |
| CVE-2025-6558KEV | 15 Jul 2025 | Google Chromium ANGLE and GPU Improper Input Validation Vulnerability | Grouped by weakness | 68.3 |
| CVE-2026-3545 | 4 Mar 2026 | Insufficient data validation in Navigation in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to… | Grouped by weakness | 13.7 |
| CVE-2026-4451 | 20 Mar 2026 | Insufficient validation of untrusted input in Navigation in Google Chrome prior to 146.0.7680.153 allowed a remote… | Grouped by weakness | 9.8 |
| CVE-2026-5879 | 8 Apr 2026 | Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote… | Grouped by weakness | 10.8 |
| CVE-2026-7905 | 6 May 2026 | Insufficient validation of untrusted input in Media in Google Chrome on Android prior to 148.0.7778.96 allowed a… | Grouped by weakness | 8.3 |
| CVE-2026-7967 | 6 May 2026 | Insufficient validation of untrusted input in Navigation in Google Chrome prior to 148.0.7778.96 allowed a remote… | Grouped by weakness | 8.8 |
| CVE-2026-9885 | 28 May 2026 | Insufficient validation of untrusted input in UI in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote… | Grouped by weakness | 8.5 |
| CVE-2026-9898 | 28 May 2026 | Insufficient validation of untrusted input in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote… | Grouped by weakness | 8.5 |
| CVE-2026-9914 | 28 May 2026 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker… | Grouped by weakness | 9.1 |
| CVE-2026-9969 | 28 May 2026 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker… | Grouped by weakness | 10.9 |
| CVE-2026-9982 | 28 May 2026 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker… | Grouped by weakness | 7.7 |
| CVE-2026-10911 | 4 Jun 2026 | Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker… | Grouped by weakness | 10.5 |
| CVE-2026-10917 | 4 Jun 2026 | Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker… | Grouped by weakness | 10.5 |
| CVE-2026-10974 | 4 Jun 2026 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker… | Grouped by weakness | 12.2 |
| CVE-2026-10983 | 4 Jun 2026 | Insufficient validation of untrusted input in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker… | Grouped by weakness | 11.8 |
| CVE-2026-11021 | 4 Jun 2026 | Insufficient validation of untrusted input in GPU in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote… | Grouped by weakness | 11.8 |
| CVE-2026-11041 | 4 Jun 2026 | Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 149.0.7827.53 allowed a… | Grouped by weakness | 9.0 |
| CVE-2026-11066 | 4 Jun 2026 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker… | Grouped by weakness | 10.5 |
| CVE-2026-11113 | 4 Jun 2026 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker… | Grouped by weakness | 10.8 |
| CVE-2026-11151 | 4 Jun 2026 | Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a… | Grouped by weakness | 7.8 |
| CVE-2026-11659 | 8 Jun 2026 | Integer overflow in UI in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker to potentially… | Grouped by weakness | 10.1 |
| CVE-2026-11666 | 8 Jun 2026 | Insufficient validation of untrusted input in Input in Google Chrome prior to 149.0.7827.103 allowed a remote attacker… | Grouped by weakness | 6.1 |
| CVE-2026-11697 | 8 Jun 2026 | Insufficient validation of untrusted input in UI in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to… | Grouped by weakness | 8.8 |
| CVE-2026-13780 | 30 Jun 2026 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker… | Grouped by weakness | 14.1 |
| CVE-2026-13817 | 30 Jun 2026 | Insufficient validation of untrusted input in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker… | Grouped by weakness | 11.8 |
| CVE-2026-13829 | 30 Jun 2026 | Insufficient validation of untrusted input in Settings in Google Chrome on Windows prior to 150.0.7871.47 allowed a… | Grouped by weakness | 10.9 |
| CVE-2026-13834 | 30 Jun 2026 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker… | Grouped by weakness | 12.9 |
| CVE-2026-13843 | 30 Jun 2026 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a… | Grouped by weakness | 12.3 |
| CVE-2026-13849 | 30 Jun 2026 | Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowed a… | Grouped by weakness | 6.2 |
| CVE-2026-13920 | 30 Jun 2026 | Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a… | Grouped by weakness | 12.3 |
| CVE-2026-14038 | 30 Jun 2026 | Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 150.0.7871.47 allowed a remote… | Grouped by weakness | 11.7 |
| CVE-2026-14055 | 30 Jun 2026 | Insufficient validation of untrusted input in Device Trust in Google Chrome on Windows prior to 150.0.7871.47 allowed… | Grouped by weakness | 12.3 |
| CVE-2026-14106 | 30 Jun 2026 | Insufficient validation of untrusted input in Text in Google Chrome on Android prior to 150.0.7871.47 allowed a remote… | Grouped by weakness | 12.3 |
| CVE-2026-14382 | 1 Jul 2026 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker… | Grouped by weakness | 15.8 |
| CVE-2026-14401 | 1 Jul 2026 | Insufficient validation of untrusted input in ANGLE in Google Chrome on Android prior to 150.0.7871.46 allowed a… | Grouped by weakness | 8.8 |
| CVE-2026-14411 | 1 Jul 2026 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker… | Grouped by weakness | 10.5 |
| CVE-2026-14412 | 1 Jul 2026 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker… | Grouped by weakness | 9.1 |
| CVE-2026-17651 | 30 Jul 2026 | Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 151.0.7922.72 allowed a remote… | Grouped by weakness | 12.3 |
| CVE-2026-17655 | 30 Jul 2026 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker… | Grouped by weakness | 15.9 |
| CVE-2026-17660 | 30 Jul 2026 | Insufficient validation of untrusted input in Network in Google Chrome prior to 151.0.7922.72 allowed a remote… | Grouped by weakness | 10.9 |
| CVE-2026-17663 | 30 Jul 2026 | Insufficient validation of untrusted input in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote… | Grouped by weakness | 10.9 |
| CVE-2026-17671 | 30 Jul 2026 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker… | Grouped by weakness | 15.4 |
| CVE-2026-17681 | 30 Jul 2026 | Insufficient validation of untrusted input in Web Authentication in Google Chrome on Android prior to 151.0.7922.72… | Grouped by weakness | 13.4 |
| CVE-2026-17684 | 30 Jul 2026 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a… | Grouped by weakness | 12.3 |
| CVE-2026-17741 | 30 Jul 2026 | Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a… | Grouped by weakness | 7.4 |
| CVE-2026-17806 | 30 Jul 2026 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote… | Grouped by weakness | 6.1 |
| CVE-2026-17809 | 30 Jul 2026 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote… | Grouped by weakness | 6.1 |
| CVE-2026-17834 | 30 Jul 2026 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote… | Grouped by weakness | 12.3 |
| CVE-2026-17847 | 30 Jul 2026 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker… | Grouped by weakness | 12.8 |
| CVE-2026-17867 | 30 Jul 2026 | Insufficient validation of untrusted input in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker… | Grouped by weakness | 7.4 |
| CVE-2026-17906 | 30 Jul 2026 | Insufficient validation of untrusted input in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote… | Grouped by weakness | 6.1 |
| CVE-2026-17991 | 30 Jul 2026 | Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who… | Grouped by weakness | 12.3 |
| CVE-2026-19164 | 6 Aug 2026 | Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote… | Grouped by weakness | 12.3 |
| CVE-2026-19177 | 6 Aug 2026 | Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote attacker… | Grouped by weakness | 10.9 |
| CVE-2026-79230 | 25 Aug 2026 | Improper input validation in ANGLE in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to… | Grouped by weakness | 10.5 |
| CVE-2026-91738 | 15 Sep 2026 | Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially… | Grouped by weakness | 11.9 |
| CVE-2026-113012 | 20 Oct 2026 | Improper input validation in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially… | Grouped by weakness | 13.9 |
| CVE-2026-113117 | 20 Oct 2026 | Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to… | Grouped by weakness | 13.4 |
| CVE-2026-113252 | 20 Oct 2026 | Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to… | Grouped by weakness | 17.1 |
| CVE-2026-113334 | 20 Oct 2026 | Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to… | Grouped by weakness | 13.9 |
| CVE-2026-118329 | 27 Oct 2026 | Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to… | Grouped by weakness | 12.7 |