Class familyGoogle · Chromium GPU
Google Chrome out-of-bounds write flaws, 2017–2026
82 Chromium GPU CVEs with CWE-787 weaknesses, 19 Jan 2017 to 6 Oct 2026. 22 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2017’17
2 2018’18
1 2019’19
3 2020’20
4 2021’21
4 2022’22
8 2023’23
13 2024’24
6 2025’25
40 2026’26
In CISA KEVNot in KEV
20171 CVE, 1 in KEV
20182 CVEs, 2 in KEV
20191 CVE, 1 in KEV
20203 CVEs, 3 in KEV
20214 CVEs, 4 in KEV
20224 CVEs, 1 in KEV
20238 CVEs, 3 in KEV
202413 CVEs, 3 in KEV
20256 CVEs, 2 in KEV
202640 CVEs, 2 in KEV
- CVE-2026-0899
- CVE-2026-4450
- CVE-2026-4459
- CVE-2026-5873
- CVE-2026-6314
- CVE-2026-7899
- CVE-2026-7951
- CVE-2026-8524
- CVE-2026-8526
- CVE-2026-8548
- CVE-2026-8558
- CVE-2026-9896
- CVE-2026-9900
- CVE-2026-9906
- CVE-2026-9910
- CVE-2026-9916
- CVE-2026-9930
- CVE-2026-9965
- CVE-2026-9973
- CVE-2026-9974
- CVE-2026-10907
- CVE-2026-10941
- CVE-2026-11173
- CVE-2026-11672
- CVE-2026-11645
- CVE-2026-14395
- CVE-2026-14400
- CVE-2026-15903
- CVE-2026-16413
- CVE-2026-17675
- CVE-2026-19148
- CVE-2026-19162
- CVE-2026-79048
- CVE-2026-79240
- CVE-2026-87491
- CVE-2026-87638
- CVE-2026-91711
- CVE-2026-102301
- CVE-2026-95304
- CVE-2026-106401
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2016-5198KEV | 19 Jan 2017 | Google Chromium V8 Out-of-Bounds Memory Vulnerability | Grouped by weakness | 68.8 |
| CVE-2018-6065KEV | 14 Nov 2018 | Google Chromium V8 Integer Overflow Vulnerability | Grouped by weakness | 69.0 |
| CVE-2018-17480KEV | 11 Dec 2018 | Google Chromium V8 Out-of-Bounds Write Vulnerability | Grouped by weakness | 68.9 |
| CVE-2019-5825KEV | 25 Nov 2019 | Google Chromium V8 Out-of-Bounds Write Vulnerability | Grouped by weakness | 67.4 |
| CVE-2020-15999KEV | 3 Nov 2020 | Google Chrome FreeType Heap Buffer Overflow Vulnerability | Grouped by weakness | 69.6 |
| CVE-2020-16009KEV | 3 Nov 2020 | Google Chromium V8 Type Confusion Vulnerability | Grouped by weakness | 68.9 |
| CVE-2020-16010KEV | 3 Nov 2020 | Google Chrome for Android UI Heap Buffer Overflow Vulnerability | Grouped by weakness | 63.4 |
| CVE-2020-16013KEV | 8 Jan 2021 | Google Chromium V8 Incorrect Implementation Vulnerabililty | Grouped by weakness | 61.4 |
| CVE-2021-21148KEV | 9 Feb 2021 | Google Chromium V8 Heap Buffer Overflow Vulnerability | Grouped by weakness | 68.6 |
| CVE-2021-21220KEV | 26 Apr 2021 | Google Chromium V8 Improper Input Validation Vulnerability | Grouped by weakness | 69.0 |
| CVE-2021-30632KEV | 8 Oct 2021 | Google Chromium V8 Out-of-Bounds Write Vulnerability | Grouped by weakness | 69.0 |
| CVE-2022-3045 | 26 Sep 2022 | Insufficient validation of untrusted input in V8 in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to… | Grouped by weakness | 24.6 |
| CVE-2022-3195 | 26 Sep 2022 | Out of bounds write in Storage in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to perform an out of… | Grouped by weakness | 25.2 |
| CVE-2022-3373 | 1 Nov 2022 | Out of bounds write in V8 in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to perform an out of… | Grouped by weakness | 18.6 |
| CVE-2022-4135KEV | 25 Nov 2022 | Google Chromium GPU Heap Buffer Overflow Vulnerability · fixed in 19.1.8 | Grouped by weakness | 69.4 |
| CVE-2023-0930 | 22 Feb 2023 | Heap buffer overflow in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially… | Grouped by weakness | 16.5 |
| CVE-2023-2133 | 19 Apr 2023 | Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker… | Grouped by weakness | 19.1 |
| CVE-2023-2134 | 19 Apr 2023 | Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker… | Grouped by weakness | 19.1 |
| CVE-2023-2934 | 30 May 2023 | Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially… | Grouped by weakness | 25.9 |
| CVE-2023-4355 | 15 Aug 2023 | Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially… | Grouped by weakness | 30.8 |
| CVE-2023-4863KEV | 12 Sep 2023 | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability · fixed in 27.0.0-beta.2 | Grouped by weakness | 69.2 |
| CVE-2023-5217KEV | 28 Sep 2023 | Google Chromium libvpx Heap Buffer Overflow Vulnerability · fixed in 27.0.0-beta.8 | Grouped by weakness | 68.9 |
| CVE-2023-7024KEV | 21 Dec 2023 | Google Chromium WebRTC Heap Buffer Overflow Vulnerability | Grouped by weakness | 67.9 |
| CVE-2024-0517 | 16 Jan 2024 | Out of bounds write in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit… | Grouped by weakness | 25.7 |
| CVE-2024-0519KEV | 16 Jan 2024 | Google Chromium V8 Out-of-Bounds Memory Access Vulnerability | Grouped by weakness | 67.2 |
| CVE-2024-2173 | 6 Mar 2024 | Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of… | Grouped by weakness | 24.1 |
| CVE-2024-4761KEV | 14 May 2024 | Google Chromium V8 Out-of-Bounds Memory Write Vulnerability | Grouped by weakness | 68.3 |
| CVE-2024-5499 | 30 May 2024 | Out of bounds write in Streams API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute… | Grouped by weakness | 18.6 |
| CVE-2024-5830 | 11 Jun 2024 | Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds… | Grouped by weakness | 18.3 |
| CVE-2024-3176 | 16 Jul 2024 | Out of bounds write in SwiftShader in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to perform an out… | Grouped by weakness | 11.8 |
| CVE-2024-7532 | 6 Aug 2024 | Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially… | Grouped by weakness | 19.0 |
| CVE-2024-7535 | 6 Aug 2024 | Inappropriate implementation in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially… | Grouped by weakness | 16.9 |
| CVE-2024-7965KEV | 21 Aug 2024 | Google Chromium V8 Inappropriate Implementation Vulnerability | Grouped by weakness | 68.6 |
| CVE-2024-7970 | 3 Sep 2024 | Out of bounds write in V8 in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit… | Grouped by weakness | 15.1 |
| CVE-2024-9121 | 24 Sep 2024 | Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to potentially… | Grouped by weakness | 14.9 |
| CVE-2024-12695 | 18 Dec 2024 | Out of bounds write in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.5 |
| CVE-2025-5280 | 27 May 2025 | Out of bounds write in V8 in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit… | Grouped by weakness | 23.4 |
| CVE-2025-5419KEV | 3 Jun 2025 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | Grouped by weakness | 68.1 |
| CVE-2025-8901 | 13 Aug 2025 | Out of bounds write in ANGLE in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to perform out of… | Grouped by weakness | 11.3 |
| CVE-2025-9132 | 20 Aug 2025 | Out of bounds write in V8 in Google Chrome prior to 139.0.7258.138 allowed a remote attacker to potentially exploit… | Grouped by weakness | 23.8 |
| CVE-2025-14174KEV | 12 Dec 2025 | Google Chromium Out of Bounds Memory Access Vulnerability | Grouped by weakness | 74.0 |
| CVE-2025-14766 | 16 Dec 2025 | Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially… | Grouped by weakness | 23.8 |
| CVE-2026-0899 | 20 Jan 2026 | Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially… | Grouped by weakness | 13.3 |
| CVE-2026-4450 | 20 Mar 2026 | Out of bounds write in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit… | Grouped by weakness | 10.5 |
| CVE-2026-4459 | 20 Mar 2026 | Out of bounds read and write in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to… | Grouped by weakness | 10.5 |
| CVE-2026-5873 | 8 Apr 2026 | Out of bounds read and write in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute… | Grouped by weakness | 12.5 |
| CVE-2026-6314 | 15 Apr 2026 | Out of bounds write in GPU in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the… | Grouped by weakness | 9.6 |
| CVE-2026-7899 | 6 May 2026 | Out of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute… | Grouped by weakness | 15.8 |
| CVE-2026-7951 | 6 May 2026 | Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary… | Grouped by weakness | 12.6 |
| CVE-2026-8524 | 14 May 2026 | Out of bounds write in WebAudio in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute… | Grouped by weakness | 12.6 |
| CVE-2026-8526 | 14 May 2026 | Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary… | Grouped by weakness | 12.6 |
| CVE-2026-8548 | 14 May 2026 | Out of bounds write in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised… | Grouped by weakness | 8.0 |
| CVE-2026-8558 | 14 May 2026 | Out of bounds write in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary… | Grouped by weakness | 11.0 |
| CVE-2026-9896 | 28 May 2026 | Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 10.5 |
| CVE-2026-9900 | 28 May 2026 | Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised… | Grouped by weakness | 8.5 |
| CVE-2026-9906 | 28 May 2026 | Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the… | Grouped by weakness | 8.2 |
| CVE-2026-9910 | 28 May 2026 | Out of bounds memory access in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute… | Grouped by weakness | 11.7 |
| CVE-2026-9916 | 28 May 2026 | Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised… | Grouped by weakness | 8.7 |
| CVE-2026-9930 | 28 May 2026 | Out of bounds write in Dawn in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to perform an… | Grouped by weakness | 4.8 |
| CVE-2026-9965 | 28 May 2026 | Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit… | Grouped by weakness | 9.6 |
| CVE-2026-9973 | 28 May 2026 | Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 11.0 |
| CVE-2026-9974 | 28 May 2026 | Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the… | Grouped by weakness | 8.0 |
| CVE-2026-10907 | 4 Jun 2026 | Out of bounds write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit… | Grouped by weakness | 11.6 |
| CVE-2026-10941 | 4 Jun 2026 | Out of bounds memory access in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute… | Grouped by weakness | 13.8 |
| CVE-2026-11173 | 4 Jun 2026 | Out of bounds write in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the… | Grouped by weakness | 10.3 |
| CVE-2026-11672 | 8 Jun 2026 | Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.103 allowed a remote attacker who had… | Grouped by weakness | 8.8 |
| CVE-2026-11645KEV | 9 Jun 2026 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | Grouped by weakness | 71.0 |
| CVE-2026-14395 | 1 Jul 2026 | Out of bounds write in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.3 |
| CVE-2026-14400 | 1 Jul 2026 | Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the… | Grouped by weakness | 8.7 |
| CVE-2026-15903 | 20 Jul 2026 | Out of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute… | Grouped by weakness | 13.3 |
| CVE-2026-16413 | 21 Jul 2026 | Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised… | Grouped by weakness | 9.7 |
| CVE-2026-17675 | 30 Jul 2026 | Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the… | Grouped by weakness | 14.1 |
| CVE-2026-19148 | 6 Aug 2026 | Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had… | Grouped by weakness | 10.4 |
| CVE-2026-19162 | 6 Aug 2026 | Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 13.3 |
| CVE-2026-79048 | 25 Aug 2026 | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to… | Grouped by weakness | 15.5 |
| CVE-2026-79240 | 25 Aug 2026 | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to… | Grouped by weakness | 12.1 |
| CVE-2026-87491KEV | 9 Sep 2026 | Google Chromium V8 Out of Bounds Write Vulnerability | Grouped by weakness | 77.0 |
| CVE-2026-87638 | 9 Sep 2026 | Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute… | Grouped by weakness | 14.7 |
| CVE-2026-91711 | 15 Sep 2026 | Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute… | Grouped by weakness | 11.0 |
| CVE-2026-102301 | 29 Sep 2026 | Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the… | Grouped by weakness | 10.0 |
| CVE-2026-95304 | 29 Sep 2026 | Out of bounds write in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code… | Grouped by weakness | 11.6 |
| CVE-2026-106401 | 6 Oct 2026 | Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute… | Grouped by weakness | 14.3 |