CyberSIXT Search
Google product

Chromium

← All Google products

No CISA KEV deadline is open. CISA last added a Chromium CVE on 9 Sep.

Tracked since 12 Feb · latest article Thu 24 Sep · RSS

Added to KEV · 90 days
2
of 47 in the full CISA catalogue · all time
High exploit odds · current
0
EPSS top 5%, not in KEV
Articles · 7 days
0
none this week

Exploited, by due date

CSV download
CVEProductAddedDue · federal deadline

Deadlines passed

CVE-2026-87491Chromium V89 SepDeadline passed 23 Sep11 articles
CVE-2026-85046Chromium V84 SepDeadline passed 18 Sep26 articles
CVE-2026-11645Chromium V89 JunDeadline passed 23 Jun19 articles
CVE-2026-3910Chromium V813 MarDeadline passed 27 Mar12 articles
CVE-2026-2441Chromium17 FebDeadline passed 10 Mar15 articles
CVE-2025-14174Chromium12 Dec 2025Deadline passed 2 Jan5 articles
CVE-2025-13223not in CyberSIXT coverageChromium V819 Nov 2025Deadline passed 10 Dec 2025
CVE-2025-10585not in CyberSIXT coverageChromium V823 Sep 2025Deadline passed 14 Oct 2025
CVE-2025-6558not in CyberSIXT coverageChromium22 Jul 2025Deadline passed 12 Aug 2025
CVE-2025-6554not in CyberSIXT coverageChromium V82 Jul 2025Deadline passed 23 Jul 2025
37 more listed entries
CVE-2025-5419not in CyberSIXT coverageChromium V85 Jun 2025Deadline passed 26 Jun 2025
CVE-2024-7965not in CyberSIXT coverageChromium V828 Aug 2024Deadline passed 18 Sep 2024
CVE-2024-7971not in CyberSIXT coverageChromium V826 Aug 2024Deadline passed 16 Sep 2024
CVE-2024-5274not in CyberSIXT coverageChromium V828 May 2024Deadline passed 18 Jun 2024
CVE-2024-4947not in CyberSIXT coverageChromium V820 May 2024Deadline passed 10 Jun 2024
CVE-2024-4761not in CyberSIXT coverageChromium V816 May 2024Deadline passed 6 Jun 2024
CVE-2024-4671not in CyberSIXT coverageChromium13 May 2024Deadline passed 3 Jun 2024
CVE-2023-4762not in CyberSIXT coverageChromium V86 Feb 2024Deadline passed 27 Feb 2024
CVE-2024-0519not in CyberSIXT coverageChromium V817 Jan 2024Deadline passed 7 Feb 2024
CVE-2023-3079not in CyberSIXT coverageChromium V87 Jun 2023Deadline passed 28 Jun 2023
CVE-2023-2033not in CyberSIXT coverageChromium V817 Apr 2023Deadline passed 8 May 2023
CVE-2022-4262not in CyberSIXT coverageChromium V85 Dec 2022Deadline passed 26 Dec 2022
CVE-2022-3723Chromium V828 Oct 2022Deadline passed 18 Nov 20221 article
CVE-2016-1646not in CyberSIXT coverageChromium V88 Jun 2022Deadline passed 22 Jun 2022
CVE-2016-5198not in CyberSIXT coverageChromium V88 Jun 2022Deadline passed 22 Jun 2022
CVE-2017-5030not in CyberSIXT coverageChromium V88 Jun 2022Deadline passed 22 Jun 2022
CVE-2017-5070not in CyberSIXT coverageChromium V88 Jun 2022Deadline passed 22 Jun 2022
CVE-2018-17463not in CyberSIXT coverageChromium V88 Jun 2022Deadline passed 22 Jun 2022
CVE-2018-17480not in CyberSIXT coverageChromium V88 Jun 2022Deadline passed 22 Jun 2022
CVE-2018-6065not in CyberSIXT coverageChromium V88 Jun 2022Deadline passed 22 Jun 2022
CVE-2019-5825not in CyberSIXT coverageChromium V88 Jun 2022Deadline passed 22 Jun 2022
CVE-2022-1364not in CyberSIXT coverageChromium V815 Apr 2022Deadline passed 6 May 2022
CVE-2022-1096not in CyberSIXT coverageChromium V828 Mar 2022Deadline passed 18 Apr 2022
CVE-2021-4102not in CyberSIXT coverageChromium V815 Dec 2021Deadline passed 29 Dec 2021
CVE-2021-21148not in CyberSIXT coverageChromium V83 Nov 2021Deadline passed 17 Nov 2021
CVE-2021-21166not in CyberSIXT coverageChromium3 Nov 2021Deadline passed 17 Nov 2021
CVE-2021-21220not in CyberSIXT coverageChromium V83 Nov 2021Deadline passed 17 Nov 2021
CVE-2021-21224not in CyberSIXT coverageChromium V83 Nov 2021Deadline passed 17 Nov 2021
CVE-2021-30551not in CyberSIXT coverageChromium V83 Nov 2021Deadline passed 17 Nov 2021
CVE-2021-30563not in CyberSIXT coverageChromium V83 Nov 2021Deadline passed 17 Nov 2021
CVE-2021-30632not in CyberSIXT coverageChromium V83 Nov 2021Deadline passed 17 Nov 2021
CVE-2021-37975not in CyberSIXT coverageChromium V83 Nov 2021Deadline passed 17 Nov 2021
CVE-2021-37976not in CyberSIXT coverageChromium3 Nov 2021Deadline passed 17 Nov 2021
CVE-2021-38003Chromium V83 Nov 2021Deadline passed 17 Nov 20211 article
CVE-2020-16009not in CyberSIXT coverageChromium V83 Nov 2021Deadline passed 3 May 2022
CVE-2020-16013not in CyberSIXT coverageChromium V83 Nov 2021Deadline passed 3 May 2022
CVE-2020-6418not in CyberSIXT coverageChromium V83 Nov 2021Deadline passed 3 May 2022

Coverage

65 articles · all timeFull timeline

65 articles from 12 outlets; the latest 32 days ago.

Chromium: coverage over time65 articles from 12 outlets. Busiest week: 16 articles, week of 31 Aug. 0 in the last 7 days. Chromium: coverage over time65 articles from 12 outlets. Busiest week: 16 articles, week of 31 Aug. 0 in the last 7 days.
  • Article
  • Official notice
Show as table
Chromium: articles
Published (UTC)OutletHeadline
Thu 24 Sep · 09:59 UTCSecurityOnlineChinese Hackers Exploited Chrome and Windows Zero Days in Espionage Attacks
Tue 15 Sep · 11:30 UTCSecurity AffairsChina-Linked Groups Exploited Chrome Patch Gap to Target NGOs
Sat 12 Sep · 11:30 UTCSecurityWeekChrome Zero Days Fuel BlueMoon Exploit Kit’s Espionage Surge
Fri 11 Sep · 07:48 UTCThe Hacker NewsChina-Linked Hackers Exploit Sogou Flaw to Deploy GRAYRABBIT Backdoor
Thu 10 Sep · 17:25 UTCSecurityOnlineChrome Zero Day Chain Targeted NGOs Before Google’s Patch Arrived
Thu 10 Sep · 07:00 UTCSecurity AffairsChrome and Windows Zero Days Fuel BlueMoon Espionage Campaigns
Wed 9 Sep · 21:06 UTCArs TechnicaBlueMoon Exploit Kit Races to Exploit Fresh Chrome and Windows Flaws
Wed 9 Sep · 20:00 UTCThe Hacker NewsChrome Zero-Day Chain BlueMoon Drops Espionage Backdoors on Windows
Wed 9 Sep · 14:48 UTCSecurity AffairsGoogle Patches Chrome’s Seventh Zero Day of 2026 Under Attack
Wed 9 Sep · 12:26 UTCSecurityOnlineChinese-Linked Spies Exploit Chrome and Windows Zero-Days
Wed 9 Sep · 09:29 UTCThe Hacker NewsChrome Patches Exploited V8 Zero Day Allowing Code Execution
Mon 7 Sep · 16:08 UTCThe Hacker NewsGoogle Patches Chrome V8 Zero Day Exploited in Active Attacks
Mon 7 Sep · 04:31 UTCSecurityOnlineCISA KEV Missed Four Actively Exploited AI and WordPress Flaws
Sat 5 Sep · 17:01 UTCSecurityOnlineUS Offers $10 Million Reward for IRGC Cyber Commander Yaryab
Sat 5 Sep · 11:46 UTCSecurityOnlineGoogle Expands Gemini Live Voice Features Across Workspace Apps
Fri 4 Sep · 23:57 UTCSecurity AffairsCISA Flags Actively Exploited Chrome Flaw as Sixth 2026 Zero-Day
Fri 4 Sep · 21:01 UTCCISACISA Flags Chrome V8 Flaw Affecting Major Chromium Browsers
Fri 4 Sep · 21:01 UTCCISACISA Warns of Actively Exploited Chromium Flaw Allowing Code Execution
Fri 4 Sep · 19:11 UTCCISACISA Flags Actively Exploited Google Chrome V8 Flaw as High Risk
Fri 4 Sep · 12:10 UTCSecurityWeekGoogle Patches Chrome V8 Zero Day Exploited in the Wild
Fri 4 Sep · 11:36 UTCSecurityOnlineTrezor Warns 80,000 Customers After ShipMonk Data Breach
Fri 4 Sep · 11:35 UTCSecurityOnlineFreeSWITCH api-chat Flaw Exploited via SIP Messages on FusionPBX
Fri 4 Sep · 09:51 UTCSecurity AffairsGoogle Patches Actively Exploited Chrome V8 Zero Day
Fri 4 Sep · 09:16 UTCSecurityOnlineAWS Root Accounts Hit in Password Spraying Campaign Across 150 Firms
Fri 4 Sep · 09:16 UTCSecurityOnlineMicrosoft Teams Vishing Campaign Tricks 150 Workers Into Malware Attacks
Fri 4 Sep · 09:16 UTCSecurityOnlineSneaky 2FA Phishing Campaign Targets Healthcare with AiTM Attacks
Fri 4 Sep · 08:41 UTCThe Hacker NewsGoogle Patches Chrome Zero Day Exploited in V8 Attacks
Fri 4 Sep · 04:35 UTCSecurityOnlineOpenAI Drops Long Context Charges for GPT-6 Astra in Codex
Thu 3 Sep · 23:25 UTCSecurityOnlineGoogle Rushes Out Chrome Patch for Exploited V8 Zero Day
Wed 10 Jun · 11:28 UTCSecurity AffairsCISA flags Arista, Chrome, Cisco flaws; patch by June 23
Wed 10 Jun · 09:11 UTCSecurityOnlineHavoc Stager Uses Fake Invoices to Hit South American Firms
Wed 10 Jun · 09:10 UTCSecurityOnlineArchitectural Exposure: Developers Extract Apple’s Subterranean Core Prompts for Siri AI
Wed 10 Jun · 09:10 UTCSecurityOnlineCritical Check Point VPN Flaw Under Active Attack Amid New CVEs
Wed 10 Jun · 02:40 UTCSecurityOnlineCISA warns of critical flaws in Chromium, Arista and Cisco gear
Tue 9 Jun · 20:13 UTCCISACISA warns of actively exploited Chrome V8 flaw CVE-2026-11645
Tue 9 Jun · 19:13 UTCCISACISA warns of actively exploited Chrome V8 flaw CVE-2026-11645
Tue 9 Jun · 15:30 UTCSOCRadarCVE-2026-11645: Exploited Chrome V8 Bug Enables In-Browser Code Execution
Tue 9 Jun · 13:10 UTCThe Hacker NewsChrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild - Patch Now
Tue 9 Jun · 11:30 UTCSecurity AffairsGoogle patches Chrome V8 zero day being exploited in the wild
Tue 9 Jun · 10:57 UTCMalwarebytesGoogle patches Chrome V8 flaw CVE-2026-11645 amid 74 fix update
Tue 9 Jun · 10:20 UTCInfosecurityGoogle patches Chrome following exploited CVE-2026-11645 zero day
Tue 9 Jun · 06:30 UTCSecurityWeekGoogle Chrome 149 fixes critical V8 zero day flaw CVE-2026-11645
Tue 9 Jun · 00:50 UTCSecurityOnlineNew Chrome Security Update Addresses Critical V8 Exploit in the Wild
Sun 3 May · 09:49 UTCblog.googleSpyware vendors use 0-days and n-days against popular platforms
Wed 18 Mar · 21:48 UTCDark ReadingDarkSword: iPhone Exploit Kit Serves Spies & Thieves Alike
Wed 18 Mar · 15:41 UTCSecurityWeek‘DarkSword’ iOS Exploit Kit Used by State-Sponsored Hackers, Spyware Vendors
Mon 16 Mar · 15:48 UTCThe Hacker News⚡ Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents & More
Fri 13 Mar · 22:46 UTCSecurity AffairsU.S. CISA adds Google Chrome flaws to its Known Exploited Vulnerabilities catalog
Fri 13 Mar · 19:36 UTCCISACISA Adds CVE-2026-3910 to Known Exploited Vulnerabilities Catalogue
Fri 13 Mar · 19:22 UTCCISACISA Adds CVE-2026-3910 to Known Exploited Vulnerabilities Catalogue

Who reported 12 outlets, last 12 months

  • SecurityOnline20
  • Security Affairs12
  • The Hacker News12
  • CISA7
  • SecurityWeek6
  • SOCRadar2
  • Others6
  1. Chinese Hackers Exploited Chrome and Windows Zero Days in Espionage AttacksSecurityOnline
  2. China-Linked Groups Exploited Chrome Patch Gap to Target NGOsSecurity Affairs
  3. Chrome Zero Days Fuel BlueMoon Exploit Kit’s Espionage SurgeSecurityWeek
  4. China-Linked Hackers Exploit Sogou Flaw to Deploy GRAYRABBIT BackdoorThe Hacker News
  5. Chrome Zero Day Chain Targeted NGOs Before Google’s Patch ArrivedSecurityOnline
  6. Chrome and Windows Zero Days Fuel BlueMoon Espionage CampaignsSecurity Affairs
  7. BlueMoon Exploit Kit Races to Exploit Fresh Chrome and Windows FlawsArs Technica
  8. Chrome Zero-Day Chain BlueMoon Drops Espionage Backdoors on WindowsThe Hacker News
  9. Google Patches Chrome’s Seventh Zero Day of 2026 Under AttackSecurity Affairs
  10. Chinese-Linked Spies Exploit Chrome and Windows Zero-DaysSecurityOnline

All CVEs in coverage

7
CVE-2025-14174Google Chromium Out of Bounds Memory Access VulnerabilityCVSSUnratedExploited55%EPSS5articles
CVE-2026-2441Google Chromium CSS Use-After-Free VulnerabilityCVSSUnratedExploited55%EPSS15articles
CVE-2021-38003Google Chromium V8 Memory Corruption VulnerabilityCVSS8.8HighExploited39%EPSS1article
CVE-2022-3723Google Chromium V8 Type Confusion VulnerabilityCVSS8.8HighExploited7.9%EPSS1article
CVE-2026-3910Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer VulnerabilityCVSSUnratedExploited2.7%EPSS12articles
CVE-2026-11645Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityCVSS8.8HighExploited2.4%EPSS19articles
CVE-2026-85046Google Chromium V8 Type Confusion VulnerabilityCVSS8.8HighExploited1.8%EPSS26articles
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device