Google Chrome
productEUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
129critical1216high874medium8low
updated 2026-10-26
01
vulnerabilities (5,833)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2023-4863US | high8.8OT critical | KEV |
| CVE-2018-17463US | high8.8OT critical | KEV |
| CVE-2020-6418US | high8.8OT critical | KEV |
| CVE-2021-21220US | high8.8OT critical | KEV |
| CVE-2021-30551US | high8.8OT critical | KEV |
| CVE-2020-15999US | critical9.6OT critical | KEV |
| CVE-2021-30632US | high8.8OT critical | KEV |
| CVE-2019-5786US | medium6.5OT critical | KEV |
| CVE-2018-6065US | high8.8OT critical | KEV |
| CVE-2019-5825US | medium6.5OT critical | KEV |
| CVE-2025-14174US | —OT critical | KEV |
| CVE-2026-2441US | high8.8OT critical | KEV |
| CVE-2019-13720US | high8.8OT critical | KEV |
| CVE-2023-5217US | high8.8OT critical | KEV |
| CVE-2023-4762US | high8.8OT critical | KEV |
| CVE-2023-2033US | high8.8OT critical | KEV |
| CVE-2021-38003US | high8.8OT critical | KEV |
| CVE-2023-3079US | high8.8OT critical | KEV |
| CVE-2021-37975US | high8.8OT critical | KEV |
| CVE-2022-1096US | high8.8OT critical | KEV |
| CVE-2022-4262US | high8.8OT critical | KEV |
| CVE-2024-7971US | critical9.6OT critical | KEV |
| CVE-2021-21148US | high8.8OT critical | KEV |
| CVE-2024-7965US | high8.8OT critical | KEV |
| CVE-2024-4947US | critical9.6OT critical | KEV |
| CVE-2025-6554US | —OT critical | KEV |
| CVE-2022-1364US | high8.8OT critical | KEV |
| CVE-2026-5281US | —OT critical | KEV |
| CVE-2024-4761US | high8.8OT critical | KEV |
| CVE-2025-6558US | —OT critical | KEV |
| CVE-2021-21193US | high8.8OT critical | KEV |
| CVE-2025-2783US | —OT critical | KEV |
| CVE-2025-5419US | —OT critical | KEV |
| CVE-2024-5274US | critical9.6OT critical | KEV |
| CVE-2023-7024US | high8.8OT critical | KEV |
| CVE-2025-10585US | critical9.8OT critical | KEV |
| CVE-2024-0519US | high8.8OT critical | KEV |
| CVE-2026-87491US | —OT critical | KEV |
| CVE-2026-3910US | high8.8OT critical | KEV |
| CVE-2026-11645US | —OT critical | KEV |
| CVE-2026-3909US | high8.8OT critical | KEV |
| CVE-2026-85046US | —OT critical | KEV |
| CVE-2021-21224US | high8.8OT critical | KEV |
| CVE-2022-2294US | high8.8OT critical | KEV |
| CVE-2020-16009US | high8.8OT critical | KEV |
| CVE-2018-17480US | high8.8OT critical | KEV |
| CVE-2021-30633US | critical9.6OT critical | KEV |
| CVE-2022-4135US | critical9.6OT critical | KEV |
| CVE-2022-3038US | high8.8OT critical | KEV |
| CVE-2021-21166US | high8.8OT critical | KEV |
showing 50 of 5,833
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-416Use After Free1,628 CVEs
- CWE-20Improper Input Validation747 CVEs
- CWE-787Out-of-bounds Write495 CVEs
- CWE-451User Interface (UI) Misrepresentation of Critical Information294 CVEs
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer281 CVEs
- CWE-125Out-of-bounds Read278 CVEs
- CWE-358Improperly Implemented Security Check for Standard216 CVEs
- CWE-843Access of Resource Using Incompatible Type ('Type Confusion')208 CVEs
03
sources (3)
Which sources assert this record, and when.
- EUEU Vulnerability Database (ENISA)4,308 CVEs
- DECERT-Bund (BSI CSAF)3,873 CVEs
- NLNCSC-NL (CSAF)23 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan