Google Uses LLMs for vuln discovery
CPE vendor key: google ·
3,492 CVEs published in the last 24 months.
CVEs (365 d)
2,887
▼ -108 vs prior 30d
Avg CVSS (365 d)
7.12
over 2,887 CVEs
Avg EPSS pct (365 d)
0.15
higher = more likely exploited
KEV hit rate (365 d)
0.4%
12 of 2,887 added to CISA KEV
LLM-credited CVEs
647
Openai 647
Monthly CVE volume — last 24 months
Each point is one calendar month. Bars in the
severity card to the right slice the same volume by CVSS band.
Severity mix
Stacked by CVSS band (Critical / High / Medium /
Low) using the best available metric per CVE.
Top affected products (24 mo)
2,400
1,266
38
9
3
3
3
3
3
3
Distinct CVEs that include each product in their
CPE configuration.
Top CWEs (24 mo)
726
436
328
251
196
136
126
106
103
85
Distinct CVEs assigned each weakness.
Recent CISA KEV adds (last 12 months)
| Added | CVE | Product | KEV name |
|---|---|---|---|
| 2026-06-09 | CVE-2026-11645 | Chromium V8 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability |
| 2026-04-01 | CVE-2026-5281 | Dawn | Google Dawn Use-After-Free Vulnerability |
| 2026-03-13 | CVE-2026-3910 | Chromium V8 | Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability |
| 2026-03-13 | CVE-2026-3909 | Skia | Google Skia Out-of-Bounds Write Vulnerability |
| 2026-02-17 | CVE-2026-2441 | Chromium | Google Chromium CSS Use-After-Free Vulnerability |
| 2025-12-12 | CVE-2025-14174 | Chromium | Google Chromium Out of Bounds Memory Access Vulnerability |
| 2025-11-19 | CVE-2025-13223 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability |
| 2025-09-23 | CVE-2025-10585 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability |
Filtered to KEV entries whose CISA vendor or product name matches this
vendor exactly, to drop cross-OS noise (e.g. third-party Windows apps
that CPE-map to Microsoft).
LLM-credited CVEs from this vendor
| Published | CVE | LLM family | Model(s) |
|---|---|---|---|
| 2026-08-18 | CVE-2026-76047 | openai | OpenAI |
| 2026-08-18 | CVE-2026-76046 | openai | OpenAI |
| 2026-08-18 | CVE-2026-76045 | openai | OpenAI |
| 2026-08-18 | CVE-2026-76044 | openai | OpenAI |
| 2026-08-18 | CVE-2026-76043 | openai | OpenAI |
| 2026-08-18 | CVE-2026-76042 | openai | OpenAI |
| 2026-08-18 | CVE-2026-76041 | openai | OpenAI |
| 2026-08-18 | CVE-2026-76040 | openai | OpenAI |
| 2026-08-18 | CVE-2026-76039 | openai | OpenAI |
| 2026-08-18 | CVE-2026-76038 | openai | OpenAI |
| 2026-08-18 | CVE-2026-76037 | openai | OpenAI |
| 2026-08-18 | CVE-2026-76036 | openai | OpenAI |
| 2026-08-18 | CVE-2026-76034 | openai | OpenAI |
| 2026-08-18 | CVE-2026-76033 | openai | OpenAI |
| 2026-08-06 | CVE-2026-19177 | openai | OpenAI |
| 2026-08-06 | CVE-2026-19176 | openai | OpenAI |
| 2026-08-06 | CVE-2026-19175 | openai | OpenAI |
| 2026-08-06 | CVE-2026-19174 | openai | OpenAI |
| 2026-08-06 | CVE-2026-19173 | openai | OpenAI |
| 2026-08-06 | CVE-2026-19172 | openai | OpenAI |
| 2026-08-06 | CVE-2026-19171 | openai | OpenAI |
| 2026-08-06 | CVE-2026-19170 | openai | OpenAI |
| 2026-08-06 | CVE-2026-19169 | openai | OpenAI |
| 2026-08-06 | CVE-2026-19168 | openai | OpenAI |
| 2026-08-06 | CVE-2026-19167 | openai | OpenAI |
From
mythos_attributed_cves: CVEs whose NVD description
or vendor advisory credits an LLM-assisted discovery. Confidence is
high for every row.
Generated 23 August 2026 00:24 UTC .