Product by Google

Google Chrome

25 known vulnerabilities in Google Chrome (Google), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Google Chrome (Google)

High	CVE-2021-30560	Google Chrome: Use-After-Free also in 5 other products	8.8	03.08.2021
Critical	CVE-2019-11068	XMLSoft libxslt: security vulnerability also in 21 other products	9.8	10.04.2019
Critical	CVE-2016-4609	Apple iCloud: Memory Corruption also in 8 other products	9.8	22.07.2016
Critical	CVE-2016-4607	Apple iCloud: Memory Corruption also in 7 other products	9.8	22.07.2016
Critical	CVE-2016-4610	Apple iCloud: Memory Corruption also in 4 other products	9.8	22.07.2016
Critical	CVE-2016-4608	Apple iCloud: Memory Corruption also in 3 other products	9.8	22.07.2016
High	CVE-2019-18197	XMLSoft libxslt: security vulnerability also in 2 other products	7.5	18.10.2019
High	CVE-2017-5029	Google Chrome: Out-of-Bounds Access also in 5 other products	8.8	24.04.2017
Medium	CVE-2022-29824	XMLSoft libxml2: Out-of-Bounds Access also in 20 other products	6.5	03.05.2022
Medium	CVE-2019-13117	XMLSoft libxslt: Format String also in 5 other products	5.3	01.07.2019
Medium	CVE-2019-13118	XMLSoft libxslt: security vulnerability also in 24 other products	5.3	01.07.2019
High	CVE-2016-1683	Google Chrome: Out-of-Bounds Access also in 9 other products	7.5	05.06.2016
High	CVE-2016-1684	Google Chrome: Integer Overflow also in 1 other product	7.5	05.06.2016
High	CVE-2019-5815	Google Chrome: Type Confusion also in 2 other products	7.5	11.12.2019
High	CVE-2025-7424	Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes also in 14 other products	7.5	10.07.2025
Medium	CVE-2015-9019	XMLSoft libxslt: security vulnerability	5.3	05.04.2017
Not rated	CVE-2008-2935	XMLSoft libxslt: Heap-Based Buffer Overflow	—	01.08.2008
Not rated	CVE-2012-6139	XMLSoft libxslt: NULL Pointer Dereference also in 1 other product	—	12.04.2013
Not rated	CVE-2015-7995	XMLSoft libxslt: Type Confusion also in 4 other products	—	17.11.2015
High	CVE-2025-24855	XMLSoft libxslt: Use After Free also in 9 other products	7.8	14.03.2025
Not rated	CVE-2011-1202	Google Chrome: security vulnerability also in 1 other product	—	11.03.2011
Not rated	CVE-2012-2870	Google Chrome: Denial of Service also in 2 other products	—	31.08.2012
Not rated	CVE-2013-4520	XMLSoft libxslt: Denial of Service	—	14.12.2013
High	CVE-2024-55549	XMLSoft libxslt: Use After Free also in 2 other products	7.8	14.03.2025
Not rated	CVE-2011-3970	Google Chrome: Out-of-Bounds Read also in 4 other products	—	09.02.2012

All products by Google

Key figures

Vulnerabilities