76 Google flaws are on CISA's list of vulnerabilities attackers have used, 9 of them added in 2026. The latest was added Oct 27, 2026.
76on CISA's list, all time
9added in 2026
4in the last 90 days
0used by ransomware
40zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| Chromium V8 | 41 | Sep 9, 2026 |
| Chromium | 6 | Feb 17, 2026 |
| Pixel | 2 | Sep 16, 2026 |
| Chromium Mojo | 2 | Mar 27, 2025 |
| Chromium Skia | 2 | Nov 30, 2023 |
| Chromium Intents | 2 | Aug 18, 2022 |
| Chromium Blink | 2 | Nov 3, 2021 |
| Brotli | 1 | Oct 27, 2026 |
| Dawn | 1 | Apr 1, 2026 |
| Skia | 1 | Mar 13, 2026 |
Latest Google flaws
- BrotliGoogle Brotli Unchecked Return Value Vulnerability
- PixelGoogle Pixel Improper Authorization Vulnerability
- Chromium V8Google Chromium V8 Out of Bounds Write Vulnerability
- Chromium V8Google Chromium V8 Type Confusion Vulnerability
- Chromium V8Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
- DawnGoogle Dawn Use-After-Free Vulnerability
- SkiaGoogle Skia Out-of-Bounds Write Vulnerability
- Chromium V8Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
- ChromiumGoogle Chromium CSS Use-After-Free Vulnerability
- ChromiumGoogle Chromium Out of Bounds Memory Access Vulnerability
- Chromium V8Google Chromium V8 Type Confusion Vulnerability
- Chromium V8Google Chromium V8 Type Confusion Vulnerability
- ChromiumGoogle Chromium ANGLE and GPU Improper Input Validation Vulnerability
- Chromium V8Google Chromium V8 Type Confusion Vulnerability
- Chromium V8Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.