Google: exploited vulnerabilities and priority patches

75 exploited vulnerabilities in the catalog
10 added in the last 12 months
0 used by ransomware
25 products affected

Affected products

Chromium V841
Chromium6
Chromium Blink2
Chromium Intents2
Chromium Mojo2
Chromium Skia2
Pixel2
Chrome1
Chrome Blink1
Chrome for Android UI1
Chrome FreeType1
Chrome Media1
Chrome WebAudio1
Chromium Animation1
Chromium GPU1
Chromium Indexed DB API1
Chromium libvpx1
Chromium Network Service1
Chromium PopupBlocker1
Chromium Portals1
Chromium WebGL1
Chromium WebP1
Chromium WebRTC1
Dawn1
Skia1

Our analyses

Fake Claude pages: a Google ad hijacks Bing to trap Mac users

Push Security spotted an "Adception" campaign: a Google ad displaying bing.com leads to a fake Claude install page that tricks macOS users into running a malicious command.

Oct 12, 20262 min read

CERT-FR alerts and notices

Recent CERT-FR publications naming this vendor (alerts: immediate threat; notices: patches released). In French.

CERTFR-2026-AVI-1270Oct 7

Multiples vulnérabilités dans Google Pixel (07 octobre 2026)
CERTFR-2026-AVI-1268Oct 7

Multiples vulnérabilités dans Google Chrome (07 octobre 2026)
CERTFR-2026-AVI-1265Oct 6

Multiples vulnérabilités dans Google Android (06 octobre 2026)
CERTFR-2026-AVI-1259Oct 5

Multiples vulnérabilités dans Google Chrome (05 octobre 2026)

All exploited vulnerabilities

CISA KEV catalog, newest first: each entry corresponds to observed exploitation.

2026 8 vulnerabilities

CVE-2026-58704added Sep 16

Google Pixel Improper Authorization Vulnerability

NVD entry CISA catalog
CVE-2026-87491added Sep 9

Google Chromium V8 Out of Bounds Write Vulnerability

NVD entry CISA catalog
CVE-2026-85046added Sep 4

Google Chromium V8 Type Confusion Vulnerability

NVD entry CISA catalog
CVE-2026-11645added Jun 9

Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

NVD entry CISA catalog
CVE-2026-5281added Apr 1

Google Dawn Use-After-Free Vulnerability

NVD entry CISA catalog
CVE-2026-3910added Mar 13

Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

NVD entry CISA catalog
CVE-2026-3909added Mar 13

Google Skia Out-of-Bounds Write Vulnerability

NVD entry CISA catalog
CVE-2026-2441added Feb 17

Google Chromium CSS Use-After-Free Vulnerability

NVD entry CISA catalog

2025 7 vulnerabilities

CVE-2025-14174added Dec 12 2025

Google Chromium Out of Bounds Memory Access Vulnerability

NVD entry CISA catalog
CVE-2025-13223added Nov 19 2025

Google Chromium V8 Type Confusion Vulnerability

NVD entry CISA catalog
CVE-2025-10585added Sep 23 2025

Google Chromium V8 Type Confusion Vulnerability

NVD entry CISA catalog
CVE-2025-6558added Jul 22 2025

Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

NVD entry CISA catalog
CVE-2025-6554added Jul 2 2025

Google Chromium V8 Type Confusion Vulnerability

NVD entry CISA catalog
CVE-2025-5419added Jun 5 2025

Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

NVD entry CISA catalog
CVE-2025-2783added Mar 27 2025

Google Chromium Mojo Sandbox Escape Vulnerability

NVD entry CISA catalog

2024 9 vulnerabilities

CVE-2024-7965added Aug 28 2024

Google Chromium V8 Inappropriate Implementation Vulnerability

NVD entry CISA catalog
CVE-2024-7971added Aug 26 2024

Google Chromium V8 Type Confusion Vulnerability

NVD entry CISA catalog
CVE-2024-5274added May 28 2024

Google Chromium V8 Type Confusion Vulnerability

NVD entry CISA catalog
CVE-2024-4947added May 20 2024

Google Chromium V8 Type Confusion Vulnerability

NVD entry CISA catalog
CVE-2024-4761added May 16 2024

Google Chromium V8 Out-of-Bounds Memory Write Vulnerability

NVD entry CISA catalog
CVE-2024-4671added May 13 2024

Google Chromium Visuals Use-After-Free Vulnerability

NVD entry CISA catalog
CVE-2023-4762added Feb 6 2024

Google Chromium V8 Type Confusion Vulnerability

NVD entry CISA catalog
CVE-2024-0519added Jan 17 2024

Google Chromium V8 Out-of-Bounds Memory Access Vulnerability

NVD entry CISA catalog
CVE-2023-7024added Jan 2 2024

Google Chromium WebRTC Heap Buffer Overflow Vulnerability

NVD entry CISA catalog

2023 7 vulnerabilities

CVE-2023-6345added Nov 30 2023

Google Skia Integer Overflow Vulnerability

NVD entry CISA catalog
CVE-2023-5217added Oct 2 2023

Google Chromium libvpx Heap Buffer Overflow Vulnerability

NVD entry CISA catalog
CVE-2023-4863added Sep 13 2023

Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

NVD entry CISA catalog
CVE-2023-3079added Jun 7 2023

Google Chromium V8 Type Confusion Vulnerability

NVD entry CISA catalog
CVE-2023-2136added Apr 21 2023

Google Chrome Skia Integer Overflow Vulnerability

NVD entry CISA catalog
CVE-2023-2033added Apr 17 2023

Google Chromium V8 Type Confusion Vulnerability

NVD entry CISA catalog
CVE-2022-3038added Mar 30 2023

Google Chromium Network Service Use-After-Free Vulnerability

NVD entry CISA catalog

2022 21 vulnerabilities

CVE-2022-4262added Dec 5 2022

Google Chromium V8 Type Confusion Vulnerability

NVD entry CISA catalog
CVE-2022-4135added Nov 28 2022

Google Chromium GPU Heap Buffer Overflow Vulnerability

NVD entry CISA catalog
CVE-2022-3723added Oct 28 2022

Google Chromium V8 Type Confusion Vulnerability

NVD entry CISA catalog
CVE-2022-3075added Sep 8 2022

Google Chromium Mojo Insufficient Data Validation Vulnerability

NVD entry CISA catalog
CVE-2022-2856added Aug 18 2022

Google Chromium Intents Insufficient Input Validation Vulnerability

NVD entry CISA catalog
CVE-2021-30533added Jun 27 2022

Google Chromium PopupBlocker Security Bypass Vulnerability

NVD entry CISA catalog
CVE-2019-5825added Jun 8 2022

Google Chromium V8 Out-of-Bounds Write Vulnerability

NVD entry CISA catalog
CVE-2018-6065added Jun 8 2022

Google Chromium V8 Integer Overflow Vulnerability

NVD entry CISA catalog
CVE-2018-17480added Jun 8 2022

Google Chromium V8 Out-of-Bounds Write Vulnerability

NVD entry CISA catalog
CVE-2018-17463added Jun 8 2022

Google Chromium V8 Remote Code Execution Vulnerability

NVD entry CISA catalog
CVE-2017-5070added Jun 8 2022

Google Chromium V8 Type Confusion Vulnerability

NVD entry CISA catalog
CVE-2017-5030added Jun 8 2022

Google Chromium V8 Memory Corruption Vulnerability

NVD entry CISA catalog
CVE-2016-5198added Jun 8 2022

Google Chromium V8 Out-of-Bounds Memory Vulnerability

NVD entry CISA catalog
CVE-2016-1646added Jun 8 2022

Google Chromium V8 Out-of-Bounds Read Vulnerability

NVD entry CISA catalog
CVE-2019-5786added May 23 2022

Google Chrome Blink Use-After-Free Vulnerability

NVD entry CISA catalog
CVE-2019-13720added May 23 2022

Google Chrome WebAudio Use-After-Free Vulnerability

NVD entry CISA catalog
CVE-2022-1364added Apr 15 2022

Google Chromium V8 Type Confusion Vulnerability

NVD entry CISA catalog
CVE-2021-39793added Apr 11 2022

Google Pixel Out-of-Bounds Write Vulnerability

NVD entry CISA catalog
CVE-2022-1096added Mar 28 2022

Google Chromium V8 Type Confusion Vulnerability

NVD entry CISA catalog
CVE-2022-0609added Feb 15 2022

Google Chromium Animation Use-After-Free Vulnerability

NVD entry CISA catalog
CVE-2020-6572added Jan 10 2022

Google Chrome Media Use-After-Free Vulnerability

NVD entry CISA catalog

2021 23 vulnerabilities

CVE-2021-4102added Dec 15 2021

Google Chromium V8 Use-After-Free Vulnerability

NVD entry CISA catalog
CVE-2021-38003added Nov 3 2021

Google Chromium V8 Memory Corruption Vulnerability

NVD entry CISA catalog
CVE-2021-38000added Nov 3 2021

Google Chromium Intents Improper Input Validation Vulnerability

NVD entry CISA catalog
CVE-2021-37976added Nov 3 2021

Google Chromium Information Disclosure Vulnerability

NVD entry CISA catalog
CVE-2021-37975added Nov 3 2021

Google Chromium V8 Use-After-Free Vulnerability

NVD entry CISA catalog
CVE-2021-37973added Nov 3 2021

Google Chromium Portals Use-After-Free Vulnerability

NVD entry CISA catalog
CVE-2021-30633added Nov 3 2021

Google Chromium Indexed DB API Use-After-Free Vulnerability

NVD entry CISA catalog
CVE-2021-30632added Nov 3 2021

Google Chromium V8 Out-of-Bounds Write Vulnerability

NVD entry CISA catalog
CVE-2021-30563added Nov 3 2021

Google Chromium V8 Type Confusion Vulnerability

NVD entry CISA catalog
CVE-2021-30554added Nov 3 2021

Google Chromium WebGL Use-After-Free Vulnerability

NVD entry CISA catalog
CVE-2021-30551added Nov 3 2021

Google Chromium V8 Type Confusion Vulnerability

NVD entry CISA catalog
CVE-2021-21224added Nov 3 2021

Google Chromium V8 Type Confusion Vulnerability

NVD entry CISA catalog
CVE-2021-21220added Nov 3 2021

Google Chromium V8 Improper Input Validation Vulnerability

NVD entry CISA catalog
CVE-2021-21206added Nov 3 2021

Google Chromium Blink Use-After-Free Vulnerability

NVD entry CISA catalog
CVE-2021-21193added Nov 3 2021

Google Chromium Blink Use-After-Free Vulnerability

NVD entry CISA catalog
CVE-2021-21166added Nov 3 2021

Google Chromium Race Condition Vulnerability

NVD entry CISA catalog
CVE-2021-21148added Nov 3 2021

Google Chromium V8 Heap Buffer Overflow Vulnerability

NVD entry CISA catalog
CVE-2020-6418added Nov 3 2021

Google Chromium V8 Type Confusion Vulnerability

NVD entry CISA catalog
CVE-2020-16017added Nov 3 2021

Google Chrome Use-After-Free Vulnerability

NVD entry CISA catalog
CVE-2020-16013added Nov 3 2021

Google Chromium V8 Incorrect Implementation Vulnerabililty

NVD entry CISA catalog
CVE-2020-16010added Nov 3 2021

Google Chrome for Android UI Heap Buffer Overflow Vulnerability

NVD entry CISA catalog
CVE-2020-16009added Nov 3 2021

Google Chromium V8 Type Confusion Vulnerability

NVD entry CISA catalog
CVE-2020-15999added Nov 3 2021

Google Chrome FreeType Heap Buffer Overflow Vulnerability

NVD entry CISA catalog

What to do

If your estate includes any of these products, make sure the vendor’s patches are applied, starting with the most recent vulnerabilities and those used by ransomware, then look for signs of compromise: an exploited vulnerability has often been used before it was fixed.

Additions from all vendors are tracked on the Actively exploited vulnerabilities page, updated several times a day. Sources: CISA KEV catalog (US public domain) and CERT-FR.

Affected products

Our analyses

Fake Claude pages: a Google ad hijacks Bing to trap Mac users

CERT-FR alerts and notices

Multiples vulnérabilités dans Google Pixel (07 octobre 2026)

Multiples vulnérabilités dans Google Chrome (07 octobre 2026)

Multiples vulnérabilités dans Google Android (06 octobre 2026)

Multiples vulnérabilités dans Google Chrome (05 octobre 2026)

All exploited vulnerabilities

2026 8 vulnerabilities

Google Pixel Improper Authorization Vulnerability

Google Chromium V8 Out of Bounds Write Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

Google Dawn Use-After-Free Vulnerability

Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

Google Skia Out-of-Bounds Write Vulnerability

Google Chromium CSS Use-After-Free Vulnerability

2025 7 vulnerabilities

Google Chromium Out of Bounds Memory Access Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

Google Chromium Mojo Sandbox Escape Vulnerability

2024 9 vulnerabilities

Google Chromium V8 Inappropriate Implementation Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Out-of-Bounds Memory Write Vulnerability

Google Chromium Visuals Use-After-Free Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Out-of-Bounds Memory Access Vulnerability

Google Chromium WebRTC Heap Buffer Overflow Vulnerability

2023 7 vulnerabilities

Google Skia Integer Overflow Vulnerability

Google Chromium libvpx Heap Buffer Overflow Vulnerability

Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chrome Skia Integer Overflow Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium Network Service Use-After-Free Vulnerability

2022 21 vulnerabilities

Google Chromium V8 Type Confusion Vulnerability

Google Chromium GPU Heap Buffer Overflow Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium Mojo Insufficient Data Validation Vulnerability

Google Chromium Intents Insufficient Input Validation Vulnerability

Google Chromium PopupBlocker Security Bypass Vulnerability

Google Chromium V8 Out-of-Bounds Write Vulnerability

Google Chromium V8 Integer Overflow Vulnerability

Google Chromium V8 Out-of-Bounds Write Vulnerability

Google Chromium V8 Remote Code Execution Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Memory Corruption Vulnerability

Google Chromium V8 Out-of-Bounds Memory Vulnerability

Google Chromium V8 Out-of-Bounds Read Vulnerability

Google Chrome Blink Use-After-Free Vulnerability

Google Chrome WebAudio Use-After-Free Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Pixel Out-of-Bounds Write Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium Animation Use-After-Free Vulnerability

Google Chrome Media Use-After-Free Vulnerability

2021 23 vulnerabilities

Google Chromium V8 Use-After-Free Vulnerability

Google Chromium V8 Memory Corruption Vulnerability

Google Chromium Intents Improper Input Validation Vulnerability

Google Chromium Information Disclosure Vulnerability

Google Chromium V8 Use-After-Free Vulnerability

Google Chromium Portals Use-After-Free Vulnerability

Google Chromium Indexed DB API Use-After-Free Vulnerability

Google Chromium V8 Out-of-Bounds Write Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium WebGL Use-After-Free Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Improper Input Validation Vulnerability