Google: every exploited CVE on CISA KEV
All 76 Google bugs attackers are confirmed to be using, with attack scores and free detection rules.
Generated by VEDAS. Scores as of 2026-11-01 19:19 UTC. Rebuilt every few hours from cve-scores, CISA KEV and vedas-signatures. How this works and its limits.
76
Google bugs on CISA’s exploited list
9 added in 2026.
0
are linked to ransomware
Every Google vulnerability the US government has confirmed attackers are using, newest first, with each bug’s EPSS (predicted attack chance) and VEDAS (exploit evidence) scores and any free Nuclei or Suricata detection rule. US federal agencies must fix KEV-listed bugs by a deadline; everyone else should treat the list as “patch first”.
| Added | CVE | Product | Bug | EPSS | VEDAS | Detection rule | Ransomware |
|---|---|---|---|---|---|---|---|
| 2026-10-27 | CVE-2026-111497 | Google Brotli | Google Brotli Unchecked Return Value Vulnerability | 0.83 | 0.98 | None yet | No |
| 2026-09-16 | CVE-2026-58704 | Google Pixel | Google Pixel Improper Authorization Vulnerability | 0.01 | 0.51 | None yet | No |
| 2026-09-09 | CVE-2026-87491 | Google Chromium V8 | Google Chromium V8 Out of Bounds Write Vulnerability | 0.04 | 0.98 | None yet | No |
| 2026-09-04 | CVE-2026-85046 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.02 | 0.98 | None yet | No |
| 2026-06-09 | CVE-2026-11645 | Google Chromium V8 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | 0.02 | 0.98 | None yet | No |
| 2026-04-01 | CVE-2026-5281 | Google Dawn | Google Dawn Use-After-Free Vulnerability | 0.14 | 0.98 | None yet | No |
| 2026-03-13 | CVE-2026-3910 | Google Chromium V8 | Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability | 0.03 | 0.98 | None yet | No |
| 2026-03-13 | CVE-2026-3909 | Google Skia | Google Skia Out-of-Bounds Write Vulnerability | 0.02 | 0.97 | None yet | No |
| 2026-02-17 | CVE-2026-2441 | Google Chromium | Google Chromium CSS Use-After-Free Vulnerability | 0.55 | 0.98 | None yet | No |
| 2025-12-12 | CVE-2025-14174 | Google Chromium | Google Chromium Out of Bounds Memory Access Vulnerability | 0.55 | 0.98 | None yet | No |
| 2025-11-19 | CVE-2025-13223 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.05 | 0.97 | None yet | No |
| 2025-09-23 | CVE-2025-10585 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.09 | 0.98 | None yet | No |
| 2025-07-22 | CVE-2025-6558 | Google Chromium | Google Chromium ANGLE and GPU Improper Input Validation Vulnerability | 0.11 | 0.97 | None yet | No |
| 2025-07-02 | CVE-2025-6554 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.14 | 0.98 | None yet | No |
| 2025-06-05 | CVE-2025-5419 | Google Chromium V8 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | 0.07 | 0.98 | None yet | No |
| 2025-03-27 | CVE-2025-2783 | Google Chromium Mojo | Google Chromium Mojo Sandbox Escape Vulnerability | 0.09 | 0.98 | None yet | No |
| 2024-08-28 | CVE-2024-7965 | Google Chromium V8 | Google Chromium V8 Inappropriate Implementation Vulnerability | 0.19 | 0.98 | None yet | No |
| 2024-08-26 | CVE-2024-7971 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.21 | 0.97 | None yet | No |
| 2024-05-28 | CVE-2024-5274 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.08 | 0.98 | None yet | No |
| 2024-05-20 | CVE-2024-4947 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.15 | 0.99 | None yet | No |
| 2024-05-16 | CVE-2024-4761 | Google Chromium V8 | Google Chromium V8 Out-of-Bounds Memory Write Vulnerability | 0.11 | 0.98 | None yet | No |
| 2024-05-13 | CVE-2024-4671 | Google Chromium | Google Chromium Visuals Use-After-Free Vulnerability | 0.08 | 0.98 | None yet | No |
| 2024-02-06 | CVE-2023-4762 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.41 | 0.97 | None yet | No |
| 2024-01-17 | CVE-2024-0519 | Google Chromium V8 | Google Chromium V8 Out-of-Bounds Memory Access Vulnerability | 0.04 | 0.99 | None yet | No |
| 2024-01-02 | CVE-2023-7024 | Google Chromium WebRTC | Google Chromium WebRTC Heap Buffer Overflow Vulnerability | 0.07 | 0.99 | None yet | No |
| 2023-11-30 | CVE-2023-6345 | Google Chromium Skia | Google Skia Integer Overflow Vulnerability | 0.16 | 0.98 | None yet | No |
| 2023-10-02 | CVE-2023-5217 | Google Chromium libvpx | Google Chromium libvpx Heap Buffer Overflow Vulnerability | 0.49 | 0.98 | None yet | No |
| 2023-09-13 | CVE-2023-4863 | Google Chromium WebP | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability | 1.00 | 0.99 | None yet | No |
| 2023-06-07 | CVE-2023-3079 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.38 | 0.98 | None yet | No |
| 2023-04-21 | CVE-2023-2136 | Google Chromium Skia | Google Chrome Skia Integer Overflow Vulnerability | 0.06 | 0.98 | None yet | No |
| 2023-04-17 | CVE-2023-2033 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.41 | 0.98 | None yet | No |
| 2023-03-30 | CVE-2022-3038 | Google Chromium Network Service | Google Chromium Network Service Use-After-Free Vulnerability | 0.25 | 0.97 | None yet | No |
| 2022-12-05 | CVE-2022-4262 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.24 | 0.97 | None yet | No |
| 2022-11-28 | CVE-2022-4135 | Google Chromium GPU | Google Chromium GPU Heap Buffer Overflow Vulnerability | 0.32 | 0.98 | None yet | No |
| 2022-10-28 | CVE-2022-3723 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.08 | 0.98 | None yet | No |
| 2022-09-08 | CVE-2022-3075 | Google Chromium Mojo | Google Chromium Mojo Insufficient Data Validation Vulnerability | 0.06 | 0.98 | None yet | No |
| 2022-08-18 | CVE-2022-2856 | Google Chromium Intents | Google Chromium Intents Insufficient Input Validation Vulnerability | 0.05 | 0.97 | None yet | No |
| 2022-06-27 | CVE-2021-30533 | Google Chromium PopupBlocker | Google Chromium PopupBlocker Security Bypass Vulnerability | 0.17 | 0.98 | None yet | No |
| 2022-06-08 | CVE-2019-5825 | Google Chromium V8 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 0.56 | 0.98 | None yet | No |
| 2022-06-08 | CVE-2018-6065 | Google Chromium V8 | Google Chromium V8 Integer Overflow Vulnerability | 0.60 | 0.98 | None yet | No |
| 2022-06-08 | CVE-2018-17480 | Google Chromium V8 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 0.36 | 0.83 | None yet | No |
| 2022-06-08 | CVE-2018-17463 | Google Chromium V8 | Google Chromium V8 Remote Code Execution Vulnerability | 0.85 | 0.98 | None yet | No |
| 2022-06-08 | CVE-2017-5070 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.32 | 0.58 | None yet | No |
| 2022-06-08 | CVE-2017-5030 | Google Chromium V8 | Google Chromium V8 Memory Corruption Vulnerability | 0.41 | 0.99 | None yet | No |
| 2022-06-08 | CVE-2016-5198 | Google Chromium V8 | Google Chromium V8 Out-of-Bounds Memory Vulnerability | 0.34 | 0.97 | None yet | No |
| 2022-06-08 | CVE-2016-1646 | Google Chromium V8 | Google Chromium V8 Out-of-Bounds Read Vulnerability | 0.48 | 0.62 | None yet | No |
| 2022-05-23 | CVE-2019-5786 | Google Chrome Blink | Google Chrome Blink Use-After-Free Vulnerability | 0.61 | 0.99 | None yet | No |
| 2022-05-23 | CVE-2019-13720 | Google Chrome WebAudio | Google Chrome WebAudio Use-After-Free Vulnerability | 0.49 | 0.98 | None yet | No |
| 2022-04-15 | CVE-2022-1364 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.14 | 0.98 | None yet | No |
| 2022-04-11 | CVE-2021-39793 | Google Pixel | Google Pixel Out-of-Bounds Write Vulnerability | 0.01 | 0.97 | Out of scope (local) | No |
| 2022-03-28 | CVE-2022-1096 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.25 | 0.99 | None yet | No |
| 2022-02-15 | CVE-2022-0609 | Google Chromium Animation | Google Chromium Animation Use-After-Free Vulnerability | 0.22 | 0.98 | None yet | No |
| 2022-01-10 | CVE-2020-6572 | Google Chrome Media | Google Chrome Media Use-After-Free Vulnerability | 0.11 | 0.98 | None yet | No |
| 2021-12-15 | CVE-2021-4102 | Google Chromium V8 | Google Chromium V8 Use-After-Free Vulnerability | 0.08 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2021-38003 | Google Chromium V8 | Google Chromium V8 Memory Corruption Vulnerability | 0.39 | 0.97 | None yet | No |
| 2021-11-03 | CVE-2021-38000 | Google Chromium Intents | Google Chromium Intents Improper Input Validation Vulnerability | 0.05 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2021-37976 | Google Chromium | Google Chromium Information Disclosure Vulnerability | 0.20 | 0.97 | None yet | No |
| 2021-11-03 | CVE-2021-37975 | Google Chromium V8 | Google Chromium V8 Use-After-Free Vulnerability | 0.35 | 0.99 | None yet | No |
| 2021-11-03 | CVE-2021-37973 | Google Chromium Portals | Google Chromium Portals Use-After-Free Vulnerability | 0.12 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2021-30633 | Google Chromium Indexed DB API | Google Chromium Indexed DB API Use-After-Free Vulnerability | 0.33 | 0.97 | None yet | No |
| 2021-11-03 | CVE-2021-30632 | Google Chromium V8 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 0.63 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2021-30563 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.09 | 0.97 | None yet | No |
| 2021-11-03 | CVE-2021-30554 | Google Chromium WebGL | Google Chromium WebGL Use-After-Free Vulnerability | 0.07 | 0.97 | None yet | No |
| 2021-11-03 | CVE-2021-30551 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.65 | 0.99 | None yet | No |
| 2021-11-03 | CVE-2021-21224 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.84 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2021-21220 | Google Chromium V8 | Google Chromium V8 Improper Input Validation Vulnerability | 0.70 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2021-21206 | Google Chromium Blink | Google Chromium Blink Use-After-Free Vulnerability | 0.09 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2021-21193 | Google Chromium Blink | Google Chromium Blink Use-After-Free Vulnerability | 0.10 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2021-21166 | Google Chromium | Google Chromium Race Condition Vulnerability | 0.24 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2021-21148 | Google Chromium V8 | Google Chromium V8 Heap Buffer Overflow Vulnerability | 0.20 | 0.99 | None yet | No |
| 2021-11-03 | CVE-2020-6418 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.79 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2020-16017 | Google Chrome | Google Chrome Use-After-Free Vulnerability | 0.03 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2020-16013 | Google Chromium V8 | Google Chromium V8 Incorrect Implementation Vulnerabililty | 0.03 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2020-16010 | Google Chrome for Android UI | Google Chrome for Android UI Heap Buffer Overflow Vulnerability | 0.06 | 0.97 | None yet | No |
| 2021-11-03 | CVE-2020-16009 | Google Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 0.48 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2020-15999 | Google Chrome FreeType | Google Chrome FreeType Heap Buffer Overflow Vulnerability | 0.64 | 0.98 | None yet | No |
Industry partners
