Vendor
93 of 195 Google CVEs in Patchfirst (48%) are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it. of vulnerabilities exploited in the wild.
- CVEs
- 195
- In CISA KEV
- 9348%
- Known ransomware use
- 0
- Median days to KEV
- 26
- from publication
- Latest KEV listing
- 27 Oct 2026
Products
In KEVOther CVEs
- Chromium V8 In KEV: 41 CVEs: 41
- Chromium In KEV: 6 CVEs: 6
- Framework In KEV: 6 CVEs: 6
- Pixel In KEV: 6 CVEs: 6
- Kernel In KEV: 3 CVEs: 3
- Android Kernel In KEV: 2 CVEs: 2
- Chromium Blink In KEV: 2 CVEs: 2
- Chromium Intents In KEV: 2 CVEs: 2
- Chromium Mojo In KEV: 2 CVEs: 2
- Chromium Skia In KEV: 2 CVEs: 2
Top ATT&CK techniques
What attackers do with Google CVEs- T1189Drive-by Compromise CVEs: 60
- T1203Exploitation for Client Execution CVEs: 37
- T1059Command and Scripting Interpreter CVEs: 25
- T1068Exploitation for Privilege Escalation CVEs: 20
- T1005Data from Local System CVEs: 5
Counts are Google CVEs linked to the technique. Each link’s provenance is on the CVE page.
Google CVEs
Top 100 of 195 by priority- CVE-2026-111497Google Brotli Unchecked Return Value VulnerabilityGoogle · BrotliKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+2 more82.6%Top 0.33%79.8priority
- CVE-2026-87491Google Chromium V8 Out of Bounds Write VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter3.5%Top 11%77.0priority
- CVE-2026-85046Google Chromium V8 Type Confusion VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution1.8%Top 21%74.9priority
- CVE-2011-1823Android OS Privilege Escalation VulnerabilityAndroid · Android OSKEVPublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation2 reports41.4%Top 1.3%74.3priority
- CVE-2026-2441Google Chromium CSS Use-After-Free VulnerabilityGoogle · ChromiumKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter55.0%Top 0.98%74.0priority
- CVE-2025-14174Google Chromium Out of Bounds Memory Access VulnerabilityGoogle · ChromiumKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution55.3%Top 0.97%74.0priority
- CVE-2022-0609Google Chromium Animation Use-After-Free VulnerabilityGoogle · Chromium AnimationKEVHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution22.4%Top 2.3%73.7priority
- CVE-2026-5281Google Dawn Use-After-Free VulnerabilityGoogle · DawnKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution13.7%Top 3.5%73.5priority
- CVE-2019-13720Google Chrome WebAudio Use-After-Free VulnerabilityGoogle · Chrome WebAudioKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution1 report49.4%Top 1.1%72.8priority
- CVE-2026-11645Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution2.4%Top 16%71.0priority
- CVE-2026-3909Google Skia Out-of-Bounds Write VulnerabilityGoogle · SkiaKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution2.3%Top 16%70.9priority
- CVE-2025-48595Android Framework Integer Overflow VulnerabilityAndroid · FrameworkKEVPublic exploitHigh · 8.4T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation1.9%Top 20%69.9priority
- CVE-2020-15999Google Chrome FreeType Heap Buffer Overflow VulnerabilityGoogle · Chrome FreeTypeKEVPublic exploitCritical · 9.6T1189Drive-by CompromiseT1203Exploitation for Client Execution63.9%Top 0.78%69.6priority
- CVE-2022-4135Google Chromium GPU Heap Buffer Overflow VulnerabilityGoogle · Chromium GPUKEVPublic exploitCritical · 9.6T1189Drive-by CompromiseT1211Exploitation for Stealth31.9%Top 1.7%69.4priority
- CVE-2024-7971Google Chromium V8 Type Confusion VulnerabilityGoogle · Chromium V8KEVPublic exploitCritical · 9.6T1189Drive-by CompromiseT1203Exploitation for Client Execution21.0%Top 2.4%69.2priority
- CVE-2023-4863Google Chromium WebP Heap-Based Buffer Overflow VulnerabilityGoogle · Chromium WebPKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter>99.9%Top 0.02%69.2priority
- CVE-2024-4947Google Chromium V8 Type Confusion VulnerabilityGoogle · Chromium V8KEVPublic exploitCritical · 9.6T1189Drive-by CompromiseT1059Command and Scripting Interpreter15.2%Top 3.2%69.1priority
- CVE-2021-21224Google Chromium V8 Type Confusion VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution84.2%Top 0.31%69.1priority
- CVE-2020-6418Google Chromium V8 Type Confusion VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution78.8%Top 0.41%69.1priority
- CVE-2018-17463Google Chromium V8 Remote Code Execution VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter84.6%Top 0.3%69.1priority
- CVE-2021-30632Google Chromium V8 Out-of-Bounds Write VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution63.2%Top 0.8%69.0priority
- CVE-2021-30551Google Chromium V8 Type Confusion VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution64.7%Top 0.76%69.0priority
- CVE-2021-21220Google Chromium V8 Improper Input Validation VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution70.4%Top 0.61%69.0priority
- CVE-2018-6065Google Chromium V8 Integer Overflow VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter60.3%Top 0.86%69.0priority
- CVE-2025-10585Google Chromium V8 Type Confusion VulnerabilityGoogle · Chromium V8KEVPublic exploitCritical · 9.89.0%Top 4.7%68.9priority
- CVE-2023-5217Google Chromium libvpx Heap Buffer Overflow VulnerabilityGoogle · Chromium libvpxKEVPublic exploitHigh · 8.8T1204.001Malicious LinkT1574Hijack Execution Flow49.0%Top 1.1%68.9priority
- CVE-2023-3079Google Chromium V8 Type Confusion VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter37.9%Top 1.5%68.9priority
- CVE-2023-2033Google Chromium V8 Type Confusion VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter40.8%Top 1.3%68.9priority
- CVE-2021-38003Google Chromium V8 Memory Corruption VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution38.6%Top 1.4%68.9priority
- CVE-2020-16009Google Chromium V8 Type Confusion VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution48.3%Top 1.1%68.9priority
- CVE-2018-17480Google Chromium V8 Out-of-Bounds Write VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter35.6%Top 1.5%68.9priority
- CVE-2017-5030Google Chromium V8 Memory Corruption VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution40.6%Top 1.4%68.9priority
- CVE-2016-1646Google Chromium V8 Out-of-Bounds Read VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1499.004Application or System Exploitation48.1%Top 1.1%68.9priority
- CVE-2021-37975Google Chromium V8 Use-After-Free VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1059.007JavaScriptT1203Exploitation for Client Execution34.9%Top 1.6%68.8priority
- CVE-2017-5070Google Chromium V8 Type Confusion VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution32.1%Top 1.7%68.8priority
- CVE-2016-5198Google Chromium V8 Out-of-Bounds Memory VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution34.2%Top 1.6%68.8priority
- CVE-2022-4262Google Chromium V8 Type Confusion VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter23.5%Top 2.2%68.7priority
- CVE-2022-3038Google Chromium Network Service Use-After-Free VulnerabilityGoogle · Chromium Network ServiceKEVPublic exploitHigh · 8.8T1204.001Malicious LinkT1574Hijack Execution Flow24.9%Top 2.1%68.7priority
- CVE-2022-1096Google Chromium V8 Type Confusion VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution24.7%Top 2.1%68.7priority
- CVE-2024-7965Google Chromium V8 Inappropriate Implementation VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution18.5%Top 2.8%68.6priority
- CVE-2024-5274Google Chromium V8 Type Confusion VulnerabilityGoogle · Chromium V8KEVPublic exploitCritical · 9.6T1189Drive-by CompromiseT1203Exploitation for Client Execution7.7%Top 5.4%68.6priority
- CVE-2021-21148Google Chromium V8 Heap Buffer Overflow VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1059.007JavaScriptT1203Exploitation for Client Execution20.0%Top 2.6%68.6priority
- CVE-2022-1364Google Chromium V8 Type Confusion VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution13.9%Top 3.5%68.5priority
- CVE-2025-6558Google Chromium ANGLE and GPU Improper Input Validation VulnerabilityGoogle · ChromiumKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more10.9%Top 4.1%68.3priority
- CVE-2024-4761Google Chromium V8 Out-of-Bounds Memory Write Vulnerability11.0%Top 4.1%68.3priority
- CVE-2021-21193Google Chromium Blink Use-After-Free VulnerabilityGoogle · Chromium BlinkKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1059Command and Scripting Interpreter10.0%Top 4.4%68.3priority
- CVE-2019-2215Android Kernel Use-After-Free VulnerabilityAndroid · Android KernelKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation72.1%Top 0.57%68.3priority
- CVE-2025-5419Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution7.5%Top 5.5%68.1priority
- CVE-2025-6554Google Chromium V8 Type Confusion VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.1T1189Drive-by CompromiseT1203Exploitation for Client Execution+1 more14.1%Top 3.4%68.0priority
- CVE-2025-2783Google Chromium Mojo Sandbox Escape VulnerabilityGoogle · Chromium MojoKEVPublic exploitHigh · 8.3T1203Exploitation for Client ExecutionT1548Abuse Elevation Control Mechanism+1 more9.2%Top 4.7%67.9priority
- CVE-2023-7024Google Chromium WebRTC Heap Buffer Overflow VulnerabilityGoogle · Chromium WebRTCKEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1574Hijack Execution Flow6.7%Top 6.1%67.9priority
- CVE-2025-13223Google Chromium V8 Type Confusion Vulnerability4.9%Top 7.9%67.6priority
- CVE-2019-5825Google Chromium V8 Out-of-Bounds Write VulnerabilityGoogle · Chromium V8KEVPublic exploitMedium · 6.5T1189Drive-by CompromiseT1499.004Application or System Exploitation55.9%Top 0.95%67.4priority
- CVE-2019-5786Google Chrome Blink Use-After-Free VulnerabilityGoogle · Chrome BlinkKEVPublic exploitMedium · 6.5T1189Drive-by CompromiseT1499.004Application or System Exploitation61.1%Top 0.84%67.4priority
- CVE-2024-0519Google Chromium V8 Out-of-Bounds Memory Access VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution3.8%Top 10%67.2priority
- CVE-2021-37976Google Chromium Information Disclosure Vulnerability19.9%Top 2.6%67.0priority
- CVE-2021-30533Google Chromium PopupBlocker Security Bypass VulnerabilityGoogle · Chromium PopupBlockerKEVPublic exploitMedium · 6.5T1189Drive-by CompromiseT1059Command and Scripting Interpreter16.7%Top 3%67.0priority
- CVE-2020-16040Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially…Google · ChromePublic exploit99.6%Top 0.05%66.4priority
- CVE-2026-3910Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability2.7%Top 14%66.3priority
- CVE-2020-0041Android Kernel Out-of-Bounds Write Vulnerability3.2%Top 12%66.1priority
- CVE-2022-2856Google Chromium Intents Insufficient Input Validation VulnerabilityGoogle · Chromium IntentsKEVPublic exploitMedium · 6.5T1189Drive-by CompromiseT1059Command and Scripting Interpreter4.6%Top 8.4%65.9priority
- CVE-2021-38000Google Chromium Intents Improper Input Validation VulnerabilityGoogle · Chromium IntentsKEVPublic exploitMedium · 6.1T1189Drive-by CompromiseT1204.001Malicious Link4.9%Top 7.9%65.7priority
- CVE-2024-36971Android Kernel Remote Code Execution Vulnerability2.7%Top 14%65.6priority
- CVE-2023-35674Android Framework Privilege Escalation VulnerabilityAndroid · FrameworkKEVPublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation2.6%Top 14%65.6priority
- CVE-2021-30633Google Chromium Indexed DB API Use-After-Free VulnerabilityGoogle · Chromium Indexed DB APIKEVCritical · 9.6T1189Drive-by CompromiseT1211Exploitation for Stealth33.2%Top 1.6%64.4priority
- CVE-2026-58704Google Pixel Improper Authorization Vulnerability0.6%Top 50%64.1priority
- CVE-2023-6345Google Skia Integer Overflow VulnerabilityGoogle · Chromium SkiaKEVCritical · 9.6T1203Exploitation for Client ExecutionT1068Exploitation for Privilege Escalation16.5%Top 3%64.1priority
- CVE-2023-4762Google Chromium V8 Type Confusion Vulnerability41.4%Top 1.3%63.9priority
- CVE-2021-37973Google Chromium Portals Use-After-Free Vulnerability11.7%Top 3.9%63.9priority
- CVE-2024-4671Google Chromium Visuals Use-After-Free Vulnerability8.3%Top 5.1%63.7priority
- CVE-2021-21166Google Chromium Race Condition Vulnerability24.0%Top 2.2%63.7priority
- CVE-2025-4664Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak…Google · ChromePublic exploitMedium · 4.35.4%Top 7.3%63.6priority
- CVE-2022-3075Google Chromium Mojo Insufficient Data Validation Vulnerability5.8%Top 6.8%63.4priority
- CVE-2020-16010Google Chrome for Android UI Heap Buffer Overflow VulnerabilityGoogle · Chrome for Android UIKEVCritical · 9.6T1189Drive-by CompromiseT1068Exploitation for Privilege Escalation6.4%Top 6.4%63.4priority
- CVE-2023-2136Google Chrome Skia Integer Overflow Vulnerability5.8%Top 6.9%63.3priority
- CVE-2020-6572Google Chrome Media Use-After-Free Vulnerability10.6%Top 4.2%63.3priority
- CVE-2023-20963Android Framework Privilege Escalation Vulnerability1.5%Top 26%63.2priority
- CVE-2021-30563Google Chromium V8 Type Confusion Vulnerability9.0%Top 4.7%63.2priority
- CVE-2021-21206Google Chromium Blink Use-After-Free Vulnerability9.3%Top 4.6%63.2priority
- CVE-2022-3723Google Chromium V8 Type Confusion Vulnerability7.9%Top 5.3%63.1priority
- CVE-2021-4102Google Chromium V8 Use-After-Free Vulnerability7.8%Top 5.3%63.1priority
- CVE-2021-30554Google Chromium WebGL Use-After-Free Vulnerability7.4%Top 5.6%63.0priority
- CVE-2020-16017Google Chrome Use-After-Free Vulnerability2.7%Top 14%61.9priority
- CVE-2022-2295Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap…Google · Chrome1.5%Top 26%61.7priority
- CVE-2020-16013Google Chromium V8 Incorrect Implementation Vulnerabililty2.8%Top 14%61.4priority
- CVE-2024-32896Android Pixel Privilege Escalation Vulnerability3.0%Top 13%60.9priority
- CVE-2019-5782Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute…Google · ChromePublic exploit13.4%Top 3.6%60.4priority
- CVE-2024-7014Improper multimedia file attachment validation in Telegram for Android appAndroid · Telegram for AndroidPublic exploitHigh · 7.11.4%Top 28%60.1priority
- CVE-2017-13156An elevation of privilege vulnerability in the Android system (art)Google Inc. · AndroidPublic exploit20.5%Top 2.5%59.5priority
- CVE-2025-48543Android Runtime Use-After-Free Vulnerability0.6%Top 50%59.2priority
- CVE-2024-43093Android Framework Privilege Escalation VulnerabilityAndroid · FrameworkKEVPublic exploitHigh · 7.3T1068Exploitation for Privilege EscalationT1005Data from Local System0.7%Top 47%58.8priority
- CVE-2023-40088In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption…Google · AndroidHigh · 8.81.7%Top 23%57.3priority
- CVE-2021-1048Android Kernel Use-After-Free Vulnerability1.1%Top 36%56.3priority
- CVE-2021-30538Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote…Google · Chrome15.7%Top 3.1%54.4priority
- CVE-2021-0920Android Kernel Race Condition Vulnerability0.9%Top 41%54.2priority
- CVE-2020-15994Use after free in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap…Google · Chrome12.2%Top 3.8%54.2priority
- CVE-2021-39793Google Pixel Out-of-Bounds Write Vulnerability0.7%Top 47%54.0priority
- CVE-2024-29748Android Pixel Privilege Escalation Vulnerability0.7%Top 48%53.9priority
- CVE-2025-48572Android Framework Privilege Escalation VulnerabilityAndroid · FrameworkKEVHigh · 7.8T1068Exploitation for Privilege EscalationT1548Abuse Elevation Control Mechanism0.3%Top 82%52.0priority
- CVE-2025-48633Android Framework Information Disclosure Vulnerability0.3%Top 82%50.5priority