Most severe exploited vulnerabilities for "google chromium"

Where

AND

Sort:

Microsoft Edge (Chromium-based)Google Chromium Visuals Use-After-Free Vulnerability

Risk 76

Severity

9.6

Exploited

EPSS

0.10%

Use After Free

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium: CVE-2024-4671 Use after free in Visuals

1 / 4

Source: Microsoft

First published (updated )

CVE-2024-4671

Microsoft Edge (Chromium-based)Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

Risk 75

Severity

8.8

Exploited

EPSS

0.08%

Input Validation, Use After Free, Race Condition, Double Free, SQL Injection

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 89

Source: Apple

First published (updated )

CVE-2025-6558

Google ChromeOut of bounds memory access in ANGLE

Risk 95

Severity

8.8

Exploited

Trending

Year

Integer Overflow, Input Validation, Use After Free, Race Condition, Buffer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 77

Source: Apple

First published (updated )

CVE-2025-14174

Google ChromeGoogle Chromium CSS Use-After-Free Vulnerability

Risk 74

Severity

8.8

Exploited

EPSS

0.53%

Use After Free

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2026-2441 Use after free in CSS

1 / 4

Source: Microsoft

First published (updated )

CVE-2026-2441

debian/chromiumObject lifecycle issue in audio

Risk 95

Severity

8.8

Exploited

Race Condition

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

1 / 2

First published (updated )

CVE-2021-21166

debian/chromiumInformation leak in core

Risk 65

Severity

6.5

Exploited

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Google Chromium contains an information disclosure vulnerability within the core memory component that allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

1 / 2

Source: CISA

First published (updated )

CVE-2021-37976

Google ChromiumGoogle Chromium Loader Insufficient Policy Enforcement Vulnerability

Risk 65

Severity

4.3

Exploited

Zeroday

EPSS

6.30%

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2025-4664 Insufficient policy enforcement in Loader

1 / 4

Source: Microsoft

Remedy

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

First published (updated )

CVE-2025-4664

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.