{"schema_version":"1","data":[{"id":3579,"advisory_id":"4d58bcd7-d656-44fb-8ee9-c3dd8e39e825","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30563","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:47.073321+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2021-30563"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Type Confusion Vulnerability","summary":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-30563","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-30563","aliases":["CVE-2021-30563"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-122","CWE-843"],"cveID":"CVE-2021-30563","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30563","dueDate":"2021-11-17","product":"Chromium V8","dateAdded":"2021-11-03","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-30563","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3578,"advisory_id":"b78297c5-511f-4677-b698-016311f114eb","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21220","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:46.504625+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2021-21220"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Improper Input Validation Vulnerability","summary":"Google Chromium V8 Engine contains an improper input validation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-21220","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-21220","aliases":["CVE-2021-21220"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20","CWE-122"],"cveID":"CVE-2021-21220","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-21220","dueDate":"2021-11-17","product":"Chromium V8","dateAdded":"2021-11-03","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains an improper input validation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Improper Input Validation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-21220","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3576,"advisory_id":"0dd847a7-f560-4e6a-aa46-a0cab10aa406","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21224","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:45.193435+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2021-21224"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Type Confusion Vulnerability","summary":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-21224","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-21224","aliases":["CVE-2021-21224"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2021-21224","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-21224","dueDate":"2021-11-17","product":"Chromium V8","dateAdded":"2021-11-03","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-21224","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3575,"advisory_id":"ff59633d-5acd-4408-acdc-597f8fb3f3a9","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-38003","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:44.631368+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2021-38003"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Memory Corruption Vulnerability","summary":"Google Chromium V8 Engine has a bug in JSON.stringify, where the internal TheHole value can leak to script code, causing memory corruption. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-38003","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-38003","aliases":["CVE-2021-38003"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-122","CWE-755"],"cveID":"CVE-2021-38003","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-38003","dueDate":"2021-11-17","product":"Chromium V8","dateAdded":"2021-11-03","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine has a bug in JSON.stringify, where the internal TheHole value can leak to script code, causing memory corruption. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-38003","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3571,"advisory_id":"2c2b15b3-676e-45bd-91f3-e28a472f571a","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-6418","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:42.098892+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2020-6418"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Type Confusion Vulnerability","summary":"Google Chromium V8 Engine contains a type confusion vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-6418","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-6418","aliases":["CVE-2020-6418"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2020-6418","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-6418","dueDate":"2022-05-03","product":"Chromium V8","dateAdded":"2021-11-03","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains a type confusion vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-6418","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3570,"advisory_id":"5f292295-fce4-43f3-8bda-c6a6d328ba73","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-37975","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:41.547498+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2021-37975"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Use-After-Free Vulnerability","summary":"Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-37975","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-37975","aliases":["CVE-2021-37975"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2021-37975","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-37975","dueDate":"2021-11-17","product":"Chromium V8","dateAdded":"2021-11-03","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-37975","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3569,"advisory_id":"5d785c38-f778-4c99-a303-e762b2e9f7b1","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30551","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:41.006905+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2021-30551"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Type Confusion Vulnerability","summary":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-30551","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-30551","aliases":["CVE-2021-30551"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-122","CWE-843"],"cveID":"CVE-2021-30551","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30551","dueDate":"2021-11-17","product":"Chromium V8","dateAdded":"2021-11-03","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-30551","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3567,"advisory_id":"bf879350-4287-49c2-b9fa-4286f867811b","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21148","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:39.800516+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2021-21148"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Heap Buffer Overflow Vulnerability","summary":"Google Chromium V8 Engine contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-21148","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-21148","aliases":["CVE-2021-21148"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-122"],"cveID":"CVE-2021-21148","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-21148","dueDate":"2021-11-17","product":"Chromium V8","dateAdded":"2021-11-03","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Heap Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-21148","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3565,"advisory_id":"f06fa71e-d81e-4db6-8312-eb6fbbddc376","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-16013","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:38.28566+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2020-16013"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Incorrect Implementation Vulnerabililty","summary":"Google Chromium V8 Engine contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-16013","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-16013","aliases":["CVE-2020-16013"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2020-16013","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-16013","dueDate":"2022-05-03","product":"Chromium V8","dateAdded":"2021-11-03","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Incorrect Implementation Vulnerabililty","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-16013","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3564,"advisory_id":"f7b7885f-6117-4203-9f38-a57f8e391c2b","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-16009","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:37.504323+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2020-16009"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Type Confusion Vulnerability","summary":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-16009","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-16009","aliases":["CVE-2020-16009"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787","CWE-843"],"cveID":"CVE-2020-16009","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-16009","dueDate":"2022-05-03","product":"Chromium V8","dateAdded":"2021-11-03","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-16009","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3563,"advisory_id":"a73a6b8b-9eac-4cf3-bc9c-406c10d55c77","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30632","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:36.904219+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2021-30632"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Out-of-Bounds Write Vulnerability","summary":"Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-30632","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-30632","aliases":["CVE-2021-30632"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-122"],"cveID":"CVE-2021-30632","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30632","dueDate":"2021-11-17","product":"Chromium V8","dateAdded":"2021-11-03","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Write Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-30632","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2946,"advisory_id":"62985a1b-0a90-4dbc-8a13-536059325a57","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-4102","source_published_at":"2021-12-15T00:00:00+00:00","published_at":"2026-10-24T21:26:43.744979+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2021-4102"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Use-After-Free Vulnerability","summary":"Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-4102","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-4102","aliases":["CVE-2021-4102"],"affected":[],"modified":"2021-12-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2021-4102","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-4102","dueDate":"2021-12-29","product":"Chromium V8","dateAdded":"2021-12-15","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-4102","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2653,"advisory_id":"9cff6e4f-026d-400d-b92c-0976ec19a605","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-1096","source_published_at":"2022-03-28T00:00:00+00:00","published_at":"2026-10-24T21:22:09.868792+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2022-1096"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Type Confusion Vulnerability","summary":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-1096","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-1096","aliases":["CVE-2022-1096"],"affected":[],"modified":"2022-03-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2022-1096","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-1096","dueDate":"2022-04-18","product":"Chromium V8","dateAdded":"2022-03-28","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-1096","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2613,"advisory_id":"b16b4467-20b1-47e7-98ce-da4f14c899b7","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-1364","source_published_at":"2022-04-15T00:00:00+00:00","published_at":"2026-10-24T21:21:45.487997+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2022-1364"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Type Confusion Vulnerability","summary":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-1364","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-1364","aliases":["CVE-2022-1364"],"affected":[],"modified":"2022-04-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2022-1364","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-1364","dueDate":"2022-05-06","product":"Chromium V8","dateAdded":"2022-04-15","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-1364","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1497,"advisory_id":"849decc5-90c8-4411-b400-125b89d1d1b5","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-1646","source_published_at":"2022-06-08T00:00:00+00:00","published_at":"2026-10-24T21:03:11.991153+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2016-1646"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Out-of-Bounds Read Vulnerability","summary":"Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-1646","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-1646","aliases":["CVE-2016-1646"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2016-1646","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-1646","dueDate":"2022-06-22","product":"Chromium V8","dateAdded":"2022-06-08","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Read Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-1646","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1496,"advisory_id":"7e35978e-7705-46ff-b28c-2d3b67fc2505","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-5198","source_published_at":"2022-06-08T00:00:00+00:00","published_at":"2026-10-24T21:03:11.351414+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2016-5198"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Out-of-Bounds Memory Vulnerability","summary":"Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read/write operations, leading to code execution, via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-5198","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-5198","aliases":["CVE-2016-5198"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-125","CWE-787"],"cveID":"CVE-2016-5198","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-5198","dueDate":"2022-06-22","product":"Chromium V8","dateAdded":"2022-06-08","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read/write operations, leading to code execution, via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Memory Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-5198","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1495,"advisory_id":"257e8c97-f327-4406-8c12-f9b74e5fc260","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-5030","source_published_at":"2022-06-08T00:00:00+00:00","published_at":"2026-10-24T21:03:10.676007+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2017-5030"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Memory Corruption Vulnerability","summary":"Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2017-5030","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-5030","aliases":["CVE-2017-5030"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-125"],"cveID":"CVE-2017-5030","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-5030","dueDate":"2022-06-22","product":"Chromium V8","dateAdded":"2022-06-08","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2017-5030","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1494,"advisory_id":"688da774-3e69-4214-8a86-22d6c755a470","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-5070","source_published_at":"2022-06-08T00:00:00+00:00","published_at":"2026-10-24T21:03:09.989901+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2017-5070"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Type Confusion Vulnerability","summary":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2017-5070","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-5070","aliases":["CVE-2017-5070"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2017-5070","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-5070","dueDate":"2022-06-22","product":"Chromium V8","dateAdded":"2022-06-08","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2017-5070","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1492,"advisory_id":"bfa6b8fe-3307-4440-9935-1d8e26e20bb6","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-17463","source_published_at":"2022-06-08T00:00:00+00:00","published_at":"2026-10-24T21:03:08.703817+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2018-17463"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Remote Code Execution Vulnerability","summary":"Google Chromium V8 Engine contains an unspecified vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-17463","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-17463","aliases":["CVE-2018-17463"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2018-17463","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-17463","dueDate":"2022-06-22","product":"Chromium V8","dateAdded":"2022-06-08","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains an unspecified vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2018-17463","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1491,"advisory_id":"2970fd60-5377-4fb2-ac79-d32e86c0e3ca","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-17480","source_published_at":"2022-06-08T00:00:00+00:00","published_at":"2026-10-24T21:03:08.074526+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2018-17480"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Out-of-Bounds Write Vulnerability","summary":"Google Chromium V8 Engine contains out-of-bounds write vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-17480","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-17480","aliases":["CVE-2018-17480"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2018-17480","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-17480","dueDate":"2022-06-22","product":"Chromium V8","dateAdded":"2022-06-08","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains out-of-bounds write vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Write Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2018-17480","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1489,"advisory_id":"c0d1fcd8-4155-4aa5-8336-5c653d883c68","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-6065","source_published_at":"2022-06-08T00:00:00+00:00","published_at":"2026-10-24T21:03:06.809747+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2018-6065"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Integer Overflow Vulnerability","summary":"Google Chromium V8 Engine contains an integer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-6065","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-6065","aliases":["CVE-2018-6065"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-190","CWE-787"],"cveID":"CVE-2018-6065","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-6065","dueDate":"2022-06-22","product":"Chromium V8","dateAdded":"2022-06-08","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains an integer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Integer Overflow Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2018-6065","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1485,"advisory_id":"8addb5f5-5ec9-44e2-ba5b-162a9ac128a0","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-5825","source_published_at":"2022-06-08T00:00:00+00:00","published_at":"2026-10-24T21:03:04.280943+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2019-5825"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Out-of-Bounds Write Vulnerability","summary":"Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-5825","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-5825","aliases":["CVE-2019-5825"],"affected":[],"modified":"2022-06-08T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2019-5825","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-5825","dueDate":"2022-06-22","product":"Chromium V8","dateAdded":"2022-06-08","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Write Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-5825","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1410,"advisory_id":"00fc8866-610a-40ed-8518-ca351a1ecb3a","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-3723","source_published_at":"2022-10-28T00:00:00+00:00","published_at":"2026-10-24T21:02:11.516858+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2022-3723"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Type Confusion Vulnerability","summary":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-3723","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-3723","aliases":["CVE-2022-3723"],"affected":[],"modified":"2022-10-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-122","CWE-843"],"cveID":"CVE-2022-3723","notes":"https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_27.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-3723","dueDate":"2022-11-18","product":"Chromium V8","dateAdded":"2022-10-28","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-3723","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1397,"advisory_id":"478c45a0-4507-42b9-aad2-3aaf598b510c","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-4262","source_published_at":"2022-12-05T00:00:00+00:00","published_at":"2026-10-24T21:02:03.160526+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2022-4262"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Type Confusion Vulnerability","summary":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-4262","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-4262","aliases":["CVE-2022-4262"],"affected":[],"modified":"2022-12-05T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-122","CWE-843"],"cveID":"CVE-2022-4262","notes":"https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-4262","dueDate":"2022-12-26","product":"Chromium V8","dateAdded":"2022-12-05","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-4262","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1341,"advisory_id":"b2fe6d46-d3a8-4ff1-8122-3cfa69f0eea2","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-2033","source_published_at":"2023-04-17T00:00:00+00:00","published_at":"2026-10-24T21:01:25.291783+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2023-2033"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Type Confusion Vulnerability","summary":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2023-2033","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-2033","aliases":["CVE-2023-2033"],"affected":[],"modified":"2023-04-17T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2023-2033","notes":"https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_14.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-2033","dueDate":"2023-05-08","product":"Chromium V8","dateAdded":"2023-04-17","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2023-2033","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1313,"advisory_id":"e5270675-998a-45b5-83f8-25cb4ecb73cf","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-3079","source_published_at":"2023-06-07T00:00:00+00:00","published_at":"2026-10-24T20:59:28.618494+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2023-3079"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Type Confusion Vulnerability","summary":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2023-3079","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-3079","aliases":["CVE-2023-3079"],"affected":[],"modified":"2023-06-07T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2023-3079","notes":"https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop.html; https://nvd.nist.gov/vuln/detail/CVE-2023-3079","dueDate":"2023-06-28","product":"Chromium V8","dateAdded":"2023-06-07","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2023-3079","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1188,"advisory_id":"7b672282-c501-47d4-918d-3b1fa3b73433","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-0519","source_published_at":"2024-01-17T00:00:00+00:00","published_at":"2026-10-24T20:57:26.764476+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2024-0519"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Out-of-Bounds Memory Access Vulnerability","summary":"Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-0519","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-0519","aliases":["CVE-2024-0519"],"affected":[],"modified":"2024-01-17T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2024-0519","notes":"https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_16.html; https://nvd.nist.gov/vuln/detail/CVE-2024-0519","dueDate":"2024-02-07","product":"Chromium V8","dateAdded":"2024-01-17","vendorProject":"Google","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Memory Access Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-0519","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1182,"advisory_id":"b3edc73f-a87a-40ee-abd5-a0b400074c16","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-4762","source_published_at":"2024-02-06T00:00:00+00:00","published_at":"2026-10-24T20:57:23.336657+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2023-4762"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Type Confusion Vulnerability","summary":"Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2023-4762","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-4762","aliases":["CVE-2023-4762"],"affected":[],"modified":"2024-02-06T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2023-4762","notes":"https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop.html; https://nvd.nist.gov/vuln/detail/CVE-2023-4762","dueDate":"2024-02-27","product":"Chromium V8","dateAdded":"2024-02-06","vendorProject":"Google","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2023-4762","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1146,"advisory_id":"57b84e5b-5f2d-406e-82ef-0e35c1629ab6","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4947","source_published_at":"2024-05-20T00:00:00+00:00","published_at":"2026-10-24T20:57:01.4564+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2024-4947"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Type Confusion Vulnerability","summary":"Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-4947","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-4947","aliases":["CVE-2024-4947"],"affected":[],"modified":"2024-05-20T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2024-4947","notes":"https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_15.html; https://nvd.nist.gov/vuln/detail/CVE-2024-4947","dueDate":"2024-06-10","product":"Chromium V8","dateAdded":"2024-05-20","vendorProject":"Google","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page.","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-4947","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1144,"advisory_id":"fefaa27f-6842-48b8-8842-b18e8be36551","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4761","source_published_at":"2024-05-16T00:00:00+00:00","published_at":"2026-10-24T20:57:00.282079+00:00","extraction_method":"structured","technologies":["chromium-v8","core-kev"],"cve_ids":["CVE-2024-4761"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium V8 Out-of-Bounds Memory Write Vulnerability","summary":"Google Chromium V8 Engine contains an unspecified out-of-bounds memory write vulnerability via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-4761","products":[{"name":{"value":"Chromium V8","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-4761","aliases":["CVE-2024-4761"],"affected":[],"modified":"2024-05-16T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2024-4761","notes":"https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_13.html; https://nvd.nist.gov/vuln/detail/CVE-2024-4761","dueDate":"2024-06-06","product":"Chromium V8","dateAdded":"2024-05-16","vendorProject":"Google","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Google Chromium V8 Engine contains an unspecified out-of-bounds memory write vulnerability via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. ","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Memory Write Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-4761","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3579,"next_before":1144}