Patchfirst
Patchfirst
Class familyGoogle · Chromium V8

Google Chrome heap buffer overflow flaws, 2020–2026

70 Chromium V8 CVEs with CWE-122 weaknesses, 3 Nov 2020 to 6 Oct 2026. 10 are in .

CVEs by year

Published each year. Select a CVE to open it.

Grouped by product and weakness type (CWE); not proven to share a root cause.

In CISA KEVNot in KEV

20201 CVE, 1 in KEV

20217 CVEs, 7 in KEV

20222 CVEs, 2 in KEV

202412 CVEs

20259 CVEs

202639 CVEs

CVEs in this family

Table view of the years above
CVEPublishedTitleLinked fromPriority
CVE-2020-16010KEV 3 Nov 2020 Google Chrome for Android UI Heap Buffer Overflow Vulnerability Grouped by weakness 63.4
CVE-2021-21148KEV 9 Feb 2021 Google Chromium V8 Heap Buffer Overflow Vulnerability Grouped by weakness 68.6
CVE-2021-21166KEV 9 Mar 2021 Google Chromium Race Condition Vulnerability Grouped by weakness 63.7
CVE-2021-21220KEV 26 Apr 2021 Google Chromium V8 Improper Input Validation Vulnerability Grouped by weakness 69.0
CVE-2021-30551KEV 15 Jun 2021 Google Chromium V8 Type Confusion Vulnerability Grouped by weakness 69.0
CVE-2021-30563KEV 3 Aug 2021 Google Chromium V8 Type Confusion Vulnerability Grouped by weakness 63.2
CVE-2021-30632KEV 8 Oct 2021 Google Chromium V8 Out-of-Bounds Write Vulnerability Grouped by weakness 69.0
CVE-2021-38003KEV 23 Nov 2021 Google Chromium V8 Memory Corruption Vulnerability Grouped by weakness 68.9
CVE-2022-3723KEV 1 Nov 2022 Google Chromium V8 Type Confusion Vulnerability Grouped by weakness 63.1
CVE-2022-4262KEV 2 Dec 2022 Google Chromium V8 Type Confusion Vulnerability Grouped by weakness 68.7
CVE-2024-1283 6 Feb 2024 Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit… Grouped by weakness 25.7
CVE-2024-3516 10 Apr 2024 Heap buffer overflow in ANGLE in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially… Grouped by weakness 18.8
CVE-2024-4559 7 May 2024 Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially… Grouped by weakness 18.8
CVE-2024-5493 30 May 2024 Heap buffer overflow in WebRTC in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially… Grouped by weakness 16.9
CVE-2024-6994 6 Aug 2024 Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially… Grouped by weakness 16.2
CVE-2024-7534 6 Aug 2024 Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially… Grouped by weakness 17.3
CVE-2024-7967 21 Aug 2024 Heap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit… Grouped by weakness 16.0
CVE-2024-8193 28 Aug 2024 Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised… Grouped by weakness 20.8
CVE-2024-8198 28 Aug 2024 Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised… Grouped by weakness 20.1
CVE-2024-8636 11 Sep 2024 Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit… Grouped by weakness 21.3
CVE-2024-8905 17 Sep 2024 Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially… Grouped by weakness 14.8
CVE-2024-7018 23 Sep 2024 Heap buffer overflow in PDF in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit… Grouped by weakness 9.3
CVE-2025-0434 15 Jan 2025 Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially… Grouped by weakness 24.8
CVE-2025-0611 22 Jan 2025 Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap… Grouped by weakness 12.8
CVE-2025-0999 19 Feb 2025 Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit… Grouped by weakness 16.2
CVE-2025-1426 19 Feb 2025 Heap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 allowed a remote attacker to… Grouped by weakness 15.8
CVE-2025-3619 16 Apr 2025 Heap buffer overflow in Codecs in Google Chrome on Windows prior to 135.0.7049.95 allowed a remote attacker to… Grouped by weakness 14.7
CVE-2025-4096 5 May 2025 Heap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially exploit… Grouped by weakness 13.9
CVE-2025-10502 24 Sep 2025 Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially… Grouped by weakness 10.4
CVE-2025-11205 6 Nov 2025 Heap buffer overflow in WebGPU in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who had compromised… Grouped by weakness 11.2
CVE-2025-11206 6 Nov 2025 Heap buffer overflow in Video in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform… Grouped by weakness 7.6
CVE-2026-1861 3 Feb 2026 Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially… Grouped by weakness 14.1
CVE-2026-2314 11 Feb 2026 Heap buffer overflow in Codecs in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially… Grouped by weakness 24.5
CVE-2026-2650 18 Feb 2026 Heap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially… Grouped by weakness 14.9
CVE-2026-3913 11 Mar 2026 Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit… Grouped by weakness 13.7
CVE-2026-4442 20 Mar 2026 Heap buffer overflow in CSS in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit… Grouped by weakness 10.3
CVE-2026-4448 20 Mar 2026 Heap buffer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially… Grouped by weakness 10.7
CVE-2026-4455 20 Mar 2026 Heap buffer overflow in PDFium in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially… Grouped by weakness 9.7
CVE-2026-4463 20 Mar 2026 Heap buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially… Grouped by weakness 11.0
CVE-2026-5272 1 Apr 2026 Heap buffer overflow in GPU in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary… Grouped by weakness 15.5
CVE-2026-5275 1 Apr 2026 Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a remote attacker to execute… Grouped by weakness 14.0
CVE-2026-7339 28 Apr 2026 Heap buffer overflow in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially… Grouped by weakness 11.4
CVE-2026-7353 28 Apr 2026 Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised… Grouped by weakness 11.2
CVE-2026-7900 6 May 2026 Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised… Grouped by weakness 8.8
CVE-2026-8531 14 May 2026 Heap buffer overflow in WebML in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to… Grouped by weakness 9.7
CVE-2026-9915 28 May 2026 Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised… Grouped by weakness 9.3
CVE-2026-9924 28 May 2026 Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had… Grouped by weakness 9.0
CVE-2026-9926 28 May 2026 Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised… Grouped by weakness 9.3
CVE-2026-9940 28 May 2026 Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially… Grouped by weakness 10.1
CVE-2026-10929 4 Jun 2026 Heap buffer overflow in ANGLE in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had… Grouped by weakness 10.6
CVE-2026-10949 4 Jun 2026 Heap buffer overflow in Video in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised… Grouped by weakness 10.6
CVE-2026-10989 4 Jun 2026 Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a… Grouped by weakness 11.3
CVE-2026-11124 4 Jun 2026 Integer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap… Grouped by weakness 9.4
CVE-2026-12010 11 Jun 2026 Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had… Grouped by weakness 9.4
CVE-2026-12030 11 Jun 2026 Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had… Grouped by weakness 7.4
CVE-2026-12466 17 Jun 2026 Heap buffer overflow in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to… Grouped by weakness 13.5
CVE-2026-13798 30 Jun 2026 Heap buffer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had… Grouped by weakness 13.0
CVE-2026-13835 30 Jun 2026 Inappropriate implementation in XML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially… Grouped by weakness 11.8
CVE-2026-13976 30 Jun 2026 Insufficient data validation in Storage in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had… Grouped by weakness 5.8
CVE-2026-14415 1 Jul 2026 Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who convinced a… Grouped by weakness 11.8
CVE-2026-14427 1 Jul 2026 Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the… Grouped by weakness 9.3
CVE-2026-15123 8 Jul 2026 Inappropriate implementation in DOM in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially… Grouped by weakness 11.8
CVE-2026-17680 30 Jul 2026 Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.72 allowed a remote attacker who had… Grouped by weakness 13.0
CVE-2026-19138 6 Aug 2026 Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had… Grouped by weakness 11.0
CVE-2026-76046 18 Aug 2026 Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had… Grouped by weakness 11.9
CVE-2026-76022 20 Aug 2026 Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary… Grouped by weakness 14.0
CVE-2026-79216 25 Aug 2026 Buffer overflow in Blink in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the… Grouped by weakness 12.0
CVE-2026-95318 29 Sep 2026 Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute… Grouped by weakness 13.3
CVE-2026-106247 6 Oct 2026 Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the… Grouped by weakness 11.3
CVE-2026-106292 6 Oct 2026 Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the… Grouped by weakness 11.1
↑ ↓ chooseEnter openEsc close