E
CVE Numbering Authority

Chrome

Country
USA
Organization type
Vendor, Open Source, Researcher
Program role
CNA
Root
Google
Scope
Chrome issues and projects that are not in another CNA’s scope.

CVE Program partner profile

42.75/100 over 3,373 records in the last 180 days · 39.65/100 over 7,068 all-time
The rules, last 180 days Share of the records earning each credit, and the points it is worth.

Describe: can a reader tell what the vulnerability is?

17.74 / 25
Description
An English description that is not a placeholder: full credit from 200 characters, 0.7 from 80, 0.4 from 40, none below.
91% · 9.14/10
Title
A title.
0% · 0.0/5
Cwe
A weakness as a CWE identifier in problemTypes; a free-text problem type without one earns a quarter.
86% · 8.6/10

Scope: can a reader tell whether they are affected?

18.0 / 25
Affected
An affected entry naming both a vendor and a product; one side missing or 'n/a' earns half.
100% · 10.0/10
Versions
An affected entry stating versions, as a version or a bound; a defaultStatus alone earns half.
100% · 8.0/8
Cpe
A CPE on an affected entry, or a cpeApplicability block.
0% · 0.0/7

Assess: can a reader tell how bad it is?

0.0 / 25
Severity
A severity statement in the CNA container: a CVSS v3 or v4 vector, an SSVC decision, or a vendor rating as an 'other' metric. A CVSS v2 vector alone earns half.
0% · 0.0/15
Modern severity
A CVSS v4 vector or an SSVC decision.
0% · 0.0/5
Impacts
An impacts entry (a CAPEC identifier or an impact description).
0% · 0.0/5

Act: can a reader tell what to do about it?

7.0 / 25
References
At least one reference.
100% · 7.0/7
Reference tags
At least one reference carrying tags.
0% · 0.0/5
Remediation
A reference tagged 'patch'; one tagged 'vendor-advisory', 'mitigation' or 'release-notes' earns 0.6.
0% · 0.0/8
Solutions
A solution or a workaround.
0% · 0.0/5
Context, not score
Severity supplied by an ADP
98% (3317 records)
Weakness supplied by an ADP
19% (628 records)
No severity statement
100%
Descriptions under 100 characters
0%
Known exploited
3 · 3 published without a severity
Reservation to publication
median 0.6 days · p90 2.0 days
Rejected records
4
Score per publication year
2011: 22.26 (165 records) 2012: 24.14 (194 records) 2013: 24.67 (219 records) 2014: 25.4 (116 records) 2015: 26.11 (178 records) 2016: 27.62 (171 records) 2017: 39.22 (164 records) 2018: 42.64 (163 records) 2019: 42.84 (358 records) 2020: 44.38 (262 records) 2021: 43.26 (375 records) 2022: 43.94 (357 records) 2023: 37.15 (297 records) 2024: 37.93 (261 records) 2025: 40.03 (195 records) 2026: 42.64 (3593 records)
202642.643,593
202540.03195
202437.93261
202337.15297
202243.94357
202143.26375
202044.38262
201942.84358
201842.64163
201739.22164
201627.62171
201526.11178
201425.4116
201324.67219
201224.14194
201122.26165
Badge

Embed the current grade; it follows the rolling window and reads "unranked" under the threshold.

[![Chrome scorecard](https://cve.circl.lu/assigners/chrome/badge.svg)](https://cve.circl.lu/assigners/chrome)