Skip to content

Products › Brands

Brand

Google: actively exploited vulnerabilities

93 vulnerabilities in Google products (Chrome / Chromium, Android, Pixel) are in CISA’s catalog of exploited vulnerabilities, 3 of them added in the last 90 days. Last added: September 16, 2026.

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Google category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

Follow a single Google product (Chrome / Chromium, Android…) rather than the whole brand.

  • Chrome / Chromium74 vulnerabilities, Browsers
  • Android13 vulnerabilities, Phones and tablets
  • Pixel6 vulnerabilities, Phones and tablets

Names used by CISA: Android, Google, WebRTC. Product families: indicative classification by this site.

Pace of additions

Number of Google vulnerabilities added to CISA’s KEV catalog, per 30-day period (the last one, still in progress, ends on October 3, 2026). Source: CISA KEV catalog.
Catalog additions per 30-day period
PeriodVulnerabilities added
Sep 9, 2025 to Oct 8, 20251
Oct 9, 2025 to Nov 7, 20250
Nov 8, 2025 to Dec 7, 20253
Dec 8, 2025 to Jan 6, 20261
Jan 7, 2026 to Feb 5, 20260
Feb 6, 2026 to Mar 7, 20261
Mar 8, 2026 to Apr 6, 20263
Apr 7, 2026 to May 6, 20260
May 7, 2026 to Jun 5, 20261
Jun 6, 2026 to Jul 5, 20261
Jul 6, 2026 to Aug 4, 20260
Aug 5, 2026 to Sep 3, 20260
Sep 4, 2026 to Oct 3, 2026 (in progress)3

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Google list.

  1. Rank 1

    Google PixelCVE-2026-58704

    Google Pixel Improper Authorization Vulnerability

    Recently addedHunt for compromise (CISA)

    CVSS severity 8.8high

    Added Sep 16, 2026

  2. Rank 2

    Google Chrome / ChromiumCVE-2026-87491

    Google Chromium V8 Out of Bounds Write Vulnerability

    Recently added

    CVSS severity 8.8high

    Added Sep 9, 2026

  3. Rank 3

    Google Chrome / ChromiumCVE-2026-85046

    Google Chromium V8 Type Confusion Vulnerability

    Recently added

    CVSS severity 8.8high

    Added Sep 4, 2026

  4. Rank 4

    Google Chrome / ChromiumCVE-2026-11645

    Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

    CVSS severity 8.8high

    Added Jun 9, 2026

  5. Rank 5

    Google Chrome / ChromiumCVE-2026-5281

    Google Dawn Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Apr 1, 2026

  6. Rank 6

    Google Chrome / ChromiumCVE-2026-3909

    Google Skia Out-of-Bounds Write Vulnerability

    CVSS severity 8.8high

    Added Mar 13, 2026

  7. Rank 7

    Google Chrome / ChromiumCVE-2026-3910

    Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

    CVSS severity 8.8high

    Added Mar 13, 2026

  8. Rank 8

    Google Chrome / ChromiumCVE-2026-2441

    Google Chromium CSS Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Feb 17, 2026

  9. Rank 9

    Google Chrome / ChromiumCVE-2025-14174

    Google Chromium Out of Bounds Memory Access Vulnerability

    CVSS severity 8.8high

    Added Dec 12, 2025

  10. Rank 10

    Google Chrome / ChromiumCVE-2025-13223

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Nov 19, 2025

Show 83 more vulnerabilities
  1. Rank 11

    Google AndroidCVE-2025-48595

    Android Framework Integer Overflow Vulnerability

    CVSS severity 8.4high

    Added Jun 2, 2026

  2. Rank 12

    Google AndroidCVE-2025-48572

    Android Framework Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Dec 2, 2025

  3. Rank 13

    Google AndroidCVE-2025-48633

    Android Framework Information Disclosure Vulnerability

    CVSS severity 5.5medium

    Added Dec 2, 2025

  4. Rank 14

    Google Chrome / ChromiumCVE-2025-10585

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 9.8critical

    Added Sep 23, 2025

  5. Rank 15

    Google Chrome / ChromiumCVE-2024-7971

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 9.6critical

    Added Aug 26, 2024

  6. Rank 16

    Google Chrome / ChromiumCVE-2024-5274

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 9.6critical

    Added May 28, 2024

  7. Rank 17

    Google Chrome / ChromiumCVE-2024-4947

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 9.6critical

    Added May 20, 2024

  8. Rank 18

    Google Chrome / ChromiumCVE-2024-4671

    Google Chromium Visuals Use-After-Free Vulnerability

    CVSS severity 9.6critical

    Added May 13, 2024

  9. Rank 19

    Google Chrome / ChromiumCVE-2023-6345

    Google Skia Integer Overflow Vulnerability

    CVSS severity 9.6critical

    Added Nov 30, 2023

  10. Rank 20

    Google Chrome / ChromiumCVE-2023-2136

    Google Chrome Skia Integer Overflow Vulnerability

    CVSS severity 9.6critical

    Added Apr 21, 2023

  11. Rank 21

    Google Chrome / ChromiumCVE-2022-4135

    Google Chromium GPU Heap Buffer Overflow Vulnerability

    CVSS severity 9.6critical

    Added Nov 28, 2022

  12. Rank 22

    Google Chrome / ChromiumCVE-2022-3075

    Google Chromium Mojo Insufficient Data Validation Vulnerability

    CVSS severity 9.6critical

    Added Sep 8, 2022

  13. Rank 23

    Google Chrome / ChromiumCVE-2020-15999

    Google Chrome FreeType Heap Buffer Overflow Vulnerability

    CVSS severity 9.6critical

    Added Nov 3, 2021

  14. Rank 24

    Google Chrome / ChromiumCVE-2020-16010

    Google Chrome for Android UI Heap Buffer Overflow Vulnerability

    CVSS severity 9.6critical

    Added Nov 3, 2021

  15. Rank 25

    Google Chrome / ChromiumCVE-2020-16017

    Google Chrome Use-After-Free Vulnerability

    CVSS severity 9.6critical

    Added Nov 3, 2021

  16. Rank 26

    Google Chrome / ChromiumCVE-2021-30633

    Google Chromium Indexed DB API Use-After-Free Vulnerability

    CVSS severity 9.6critical

    Added Nov 3, 2021

  17. Rank 27

    Google Chrome / ChromiumCVE-2021-37973

    Google Chromium Portals Use-After-Free Vulnerability

    CVSS severity 9.6critical

    Added Nov 3, 2021

  18. Rank 28

    Google AndroidCVE-2025-48543

    Android Runtime Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Sep 4, 2025

  19. Rank 29

    Google Chrome / ChromiumCVE-2025-6558

    Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

    CVSS severity 8.8high

    Added Jul 22, 2025

  20. Rank 30

    Google Chrome / ChromiumCVE-2025-5419

    Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

    CVSS severity 8.8high

    Added Jun 5, 2025

  21. Rank 31

    Google Chrome / ChromiumCVE-2024-7965

    Google Chromium V8 Inappropriate Implementation Vulnerability

    CVSS severity 8.8high

    Added Aug 28, 2024

  22. Rank 32

    Google Chrome / ChromiumCVE-2024-4761

    Google Chromium V8 Out-of-Bounds Memory Write Vulnerability

    CVSS severity 8.8high

    Added May 16, 2024

  23. Rank 33

    Google Chrome / ChromiumCVE-2023-4762

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Feb 6, 2024

  24. Rank 34

    Google Chrome / ChromiumCVE-2024-0519

    Google Chromium V8 Out-of-Bounds Memory Access Vulnerability

    CVSS severity 8.8high

    Added Jan 17, 2024

  25. Rank 35

    Google Chrome / ChromiumCVE-2023-7024

    Google Chromium WebRTC Heap Buffer Overflow Vulnerability

    CVSS severity 8.8high

    Added Jan 2, 2024

  26. Rank 36

    Google Chrome / ChromiumCVE-2023-5217

    Google Chromium libvpx Heap Buffer Overflow Vulnerability

    CVSS severity 8.8high

    Added Oct 2, 2023

  27. Rank 37

    Google Chrome / ChromiumCVE-2023-4863

    Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

    CVSS severity 8.8high

    Added Sep 13, 2023

  28. Rank 38

    Google Chrome / ChromiumCVE-2023-3079

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Jun 7, 2023

  29. Rank 39

    Google Chrome / ChromiumCVE-2023-2033

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Apr 17, 2023

  30. Rank 40

    Google Chrome / ChromiumCVE-2022-3038

    Google Chromium Network Service Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Mar 30, 2023

  31. Rank 41

    Google Chrome / ChromiumCVE-2022-4262

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Dec 5, 2022

  32. Rank 42

    Google Chrome / ChromiumCVE-2022-3723

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Oct 28, 2022

  33. Rank 43

    Google Chrome / ChromiumCVE-2022-2294

    WebRTC Heap Buffer Overflow Vulnerability

    Ransomware

    CVSS severity 8.8high

    Added Aug 25, 2022

  34. Rank 44

    Google Chrome / ChromiumCVE-2016-1646

    Google Chromium V8 Out-of-Bounds Read Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  35. Rank 45

    Google Chrome / ChromiumCVE-2016-5198

    Google Chromium V8 Out-of-Bounds Memory Vulnerability

    CVE from 2016, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  36. Rank 46

    Google Chrome / ChromiumCVE-2017-5030

    Google Chromium V8 Memory Corruption Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  37. Rank 47

    Google Chrome / ChromiumCVE-2017-5070

    Google Chromium V8 Type Confusion Vulnerability

    CVE from 2017, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  38. Rank 48

    Google Chrome / ChromiumCVE-2018-17463

    Google Chromium V8 Remote Code Execution Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  39. Rank 49

    Google Chrome / ChromiumCVE-2018-17480

    Google Chromium V8 Out-of-Bounds Write Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  40. Rank 50

    Google Chrome / ChromiumCVE-2018-6065

    Google Chromium V8 Integer Overflow Vulnerability

    CVE from 2018, added in 2022

    CVSS severity 8.8high

    Added Jun 8, 2022

  41. Rank 51

    Google Chrome / ChromiumCVE-2019-13720

    Google Chrome WebAudio Use-After-Free Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 8.8high

    Added May 23, 2022

  42. Rank 52

    Google Chrome / ChromiumCVE-2022-1364

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Apr 15, 2022

  43. Rank 53

    Google Chrome / ChromiumCVE-2022-1096

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Mar 28, 2022

  44. Rank 54

    Google Chrome / ChromiumCVE-2022-0609

    Google Chromium Animation Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Feb 15, 2022

  45. Rank 55

    Google Chrome / ChromiumCVE-2020-6572

    Google Chrome Media Use-After-Free Vulnerability

    CVE from 2020, added in 2022

    CVSS severity 8.8high

    Added Jan 10, 2022

  46. Rank 56

    Google Chrome / ChromiumCVE-2021-4102

    Google Chromium V8 Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Dec 15, 2021

  47. Rank 57

    Google Chrome / ChromiumCVE-2020-16009

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  48. Rank 58

    Google Chrome / ChromiumCVE-2020-16013

    Google Chromium V8 Incorrect Implementation Vulnerabililty

    CVSS severity 8.8high

    Added Nov 3, 2021

  49. Rank 59

    Google Chrome / ChromiumCVE-2020-6418

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  50. Rank 60

    Google Chrome / ChromiumCVE-2021-21148

    Google Chromium V8 Heap Buffer Overflow Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  51. Rank 61

    Google Chrome / ChromiumCVE-2021-21166

    Google Chromium Race Condition Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  52. Rank 62

    Google Chrome / ChromiumCVE-2021-21193

    Google Chromium Blink Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  53. Rank 63

    Google Chrome / ChromiumCVE-2021-21206

    Google Chromium Blink Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  54. Rank 64

    Google Chrome / ChromiumCVE-2021-21220

    Google Chromium V8 Improper Input Validation Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  55. Rank 65

    Google Chrome / ChromiumCVE-2021-21224

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  56. Rank 66

    Google Chrome / ChromiumCVE-2021-30551

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  57. Rank 67

    Google Chrome / ChromiumCVE-2021-30554

    Google Chromium WebGL Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  58. Rank 68

    Google Chrome / ChromiumCVE-2021-30563

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  59. Rank 69

    Google Chrome / ChromiumCVE-2021-30632

    Google Chromium V8 Out-of-Bounds Write Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  60. Rank 70

    Google Chrome / ChromiumCVE-2021-37975

    Google Chromium V8 Use-After-Free Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  61. Rank 71

    Google Chrome / ChromiumCVE-2021-38003

    Google Chromium V8 Memory Corruption Vulnerability

    CVSS severity 8.8high

    Added Nov 3, 2021

  62. Rank 72

    Google Chrome / ChromiumCVE-2025-2783

    Google Chromium Mojo Sandbox Escape Vulnerability

    CVSS severity 8.3high

    Added Mar 27, 2025

  63. Rank 73

    Google Chrome / ChromiumCVE-2025-6554

    Google Chromium V8 Type Confusion Vulnerability

    CVSS severity 8.1high

    Added Jul 2, 2025

  64. Rank 74

    Google AndroidCVE-2024-36971

    Android Kernel Remote Code Execution Vulnerability

    CVSS severity 7.8high

    Added Aug 7, 2024

  65. Rank 75

    Google PixelCVE-2024-32896

    Android Pixel Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Jun 13, 2024

  66. Rank 76

    Google PixelCVE-2024-29748

    Android Pixel Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Apr 4, 2024

  67. Rank 77

    Google AndroidCVE-2023-35674

    Android Framework Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Sep 13, 2023

  68. Rank 78

    Google AndroidCVE-2023-20963

    Android Framework Privilege Escalation Vulnerability

    CVSS severity 7.8high

    Added Apr 13, 2023

  69. Rank 79

    Google AndroidCVE-2011-1823

    Android OS Privilege Escalation Vulnerability

    CVE from 2011, added in 2022

    CVSS severity 7.8high

    Added Sep 8, 2022

  70. Rank 80

    Google AndroidCVE-2021-1048

    Android Kernel Use-After-Free Vulnerability

    CVSS severity 7.8high

    Added May 23, 2022

  71. Rank 81

    Google PixelCVE-2021-39793

    Google Pixel Out-of-Bounds Write Vulnerability

    CVSS severity 7.8high

    Added Apr 11, 2022

  72. Rank 82

    Google AndroidCVE-2019-2215

    Android Kernel Use-After-Free Vulnerability

    CVE from 2019, added in 2021

    CVSS severity 7.8high

    Added Nov 3, 2021

  73. Rank 83

    Google AndroidCVE-2020-0041

    Android Kernel Out-of-Bounds Write Vulnerability

    CVSS severity 7.8high

    Added Nov 3, 2021

  74. Rank 84

    Google AndroidCVE-2024-43093

    Android Framework Privilege Escalation Vulnerability

    CVSS severity 7.3high

    Added Nov 7, 2024

  75. Rank 85

    Google Chrome / ChromiumCVE-2022-2856

    Google Chromium Intents Insufficient Input Validation Vulnerability

    CVSS severity 6.5medium

    Added Aug 18, 2022

  76. Rank 86

    Google Chrome / ChromiumCVE-2021-30533

    Google Chromium PopupBlocker Security Bypass Vulnerability

    CVSS severity 6.5medium

    Added Jun 27, 2022

  77. Rank 87

    Google Chrome / ChromiumCVE-2019-5825

    Google Chromium V8 Out-of-Bounds Write Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 6.5medium

    Added Jun 8, 2022

  78. Rank 88

    Google Chrome / ChromiumCVE-2019-5786

    Google Chrome Blink Use-After-Free Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 6.5medium

    Added May 23, 2022

  79. Rank 89

    Google Chrome / ChromiumCVE-2021-37976

    Google Chromium Information Disclosure Vulnerability

    CVSS severity 6.5medium

    Added Nov 3, 2021

  80. Rank 90

    Google AndroidCVE-2021-0920

    Android Kernel Race Condition Vulnerability

    CVSS severity 6.4medium

    Added May 23, 2022

  81. Rank 91

    Google Chrome / ChromiumCVE-2021-38000

    Google Chromium Intents Improper Input Validation Vulnerability

    CVSS severity 6.1medium

    Added Nov 3, 2021

  82. Rank 92

    Google PixelCVE-2024-29745

    Android Pixel Information Disclosure Vulnerability

    CVSS severity 5.5medium

    Added Apr 4, 2024

  83. Rank 93

    Google PixelCVE-2023-21237

    Android Pixel Information Disclosure Vulnerability

    CVSS severity 5.5medium

    Added Mar 5, 2024

Follow and verify

Get new Google vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.