How many Google chrome CVEs are in CISA KEV?

Yes — 75 of Google chrome's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Google chrome are affected?

3,383 distinct Google chrome versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Google chrome CVEs?

Google chrome's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-451 (User Interface (UI) Misrepresentation of Critical Information), CWE-346 (Origin Validation Error), CWE-20 (Improper Input Validation).

How many critical Google chrome vulnerabilities are there?

Google chrome has 561 critical and 2,918 high-severity CVEs.

What is the average severity of Google chrome CVEs?

The average CVSS base score across Google chrome's scored CVEs is 7.2.

Google chrome Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Google chrome has 6,279 published CVE records since 2008, of which 75 are in CISA's Known Exploited Vulnerabilities catalog and 252 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Google chrome, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include android, chrome os, fedora, frame, fuchsia, hero.

Severity and exploitation

How the CVSS severity of Google chrome's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical561

High2,918

Medium2,658

Low116

26 additional CVEs have no CVSS severity score.

In CISA’s Known Exploited Vulnerabilities catalog

75 of Google chrome's CVEs are confirmed exploited in the wild.

Public exploits

252

252 of Google chrome's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Google chrome version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 149.0.7827.53427 CVEs
149.0.7827.53 <= v < 149.0.7827.53427 CVEs
150.0.7871.47 <= v < 150.0.7871.47382 CVEs
151.0.7922.72 <= v < 151.0.7922.72371 CVEs
< 151.0.7922.72369 CVEs
< 152.0.7977.65327 CVEs
152.0.7977.65 <= v < 152.0.7977.65327 CVEs
< 150.0.7871.47306 CVEs
148.0.7778.216 <= v < 148.0.7778.216151 CVEs
< 148.0.7778.216149 CVEs
< 150.0.7871.46

Frequently asked questions

Common questions about Google chrome vulnerabilities.

How many CVEs does Google chrome have?: Google chrome has 6,279 published CVE records since 2008.
How many Google chrome CVEs are in CISA KEV?: Yes — 75 of Google chrome's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Google chrome vulnerabilities?: Yes — 252 of Google chrome's CVEs have a known public exploit.
Which versions of Google chrome are affected?: 3,383 distinct Google chrome versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Google chrome CVEs?: Google chrome's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-451 (User Interface (UI) Misrepresentation of Critical Information), CWE-346 (Origin Validation Error), CWE-20 (Improper Input Validation).
How many critical Google chrome vulnerabilities are there?: Google chrome has 561 critical and 2,918 high-severity CVEs.
What is the average severity of Google chrome CVEs?: The average CVSS base score across Google chrome's scored CVEs is 7.2.

Google chrome Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Common weakness types

Disclosure activity by year

Other Google products

Frequently asked questions

References

Track Google chrome vulnerabilities

Fixed in