← All tracked CVEs
Updated 09:00
Critical severity
Critical7d SLAWe fix a critical vulnerability within 7 days of publication, under our service-level agreement (SLA). We track 174 CVEs here: in progress, or fixed in the last 30 days.
| CVE | Status | Summary | Distribution | Fixed |
|---|---|---|---|---|
| Fixed | GPU out-of-bounds write in Chrome Android enables remote sandbox escape RCE pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical Chrome WindowDialog UAF before 154.0.8037.57 allows sandbox escape RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical Chrome Android ANGLE buffer overflow allows remote code execution outside sandbox | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical WebGL buffer overflow in Chrome Android prior to 154.0.8037.57 allows remote out-of-sandbox RCE | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Mac Chrome Updater use-after-free pre-154.0.8037.57 enables remote code execution outside sandbox via network | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome pre-154.0.8037.57 ServiceWorker use-after-free enables RCE outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | ANGLE out-of-bounds write enables remote code execution outside sandbox in Chrome <154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | WebGL out-of-bounds write in Chrome Android <154.0.8037.57 allows remote code execution outside sandbox | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | ANGLE use-after-free in Chrome <154.0.8037.57 allows RCE outside sandbox via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Video buffer overflow prior to 154.0.8037.57 enables RCE outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Fullscreen use-after-free enables RCE outside sandbox pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome <154.0.8037.57 Fonts non-heap free bug allows code execution outside sandbox via crafted HTML. | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Use-after-free in Chrome AdFilter enables RCE outside sandbox via crafted HTML (pre-154.0.8037.57) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Pre-154.0.8037.57 Chrome GPU use-after-free enables remote code execution outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical ANGLE buffer overflow in Chrome Android <154.0.8037.57 enables sandbox-escape remote code execution | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Tint buffer overflow in Chrome for Android allows sandbox escape RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical ANGLE buffer overflow allows remote sandbox-escape RCE in Chrome Android before 154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Use-after-free in Chrome Views pre-154.0.8037.57 allows RCE outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Hugo 0.162.0 tailwindcss allowlist bypasses Node permissions, enabling RCE via tailwind.config.js | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Android: ANGLE use-after-free enables RCE outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome <155.0.8059.39 Media integer overflow enables RCE outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome iOS <155.0.8059.39 input validation flaw enables sandbox-escape RCE via crafted HTML with social engineering | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Media out-of-bounds write enables RCE outside sandbox via crafted HTML pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chromecast use-after-free in Chrome <155.0.8059.39 allows RCE outside sandbox via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Incomplete Dawn cleanup in Chrome <155.0.8059.39 allows sandbox-escape RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Google Chrome <155.0.8059.39 UI auth flaw enables RCE outside sandbox via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Incorrect FileSystem authorization in Chrome <155.0.8059.39 enables RCE outside sandbox via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome iOS <155.0.8059.39 missing authorization enables RCE outside sandbox via crafted HTML High severity | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Use-after-free in Chrome Tabs on Mac pre-155.0.8059.39 enables RCE outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Tint use-after-free in Chrome <155.0.8059.39 enables RCE outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Android Search auth bug allows RCE outside sandbox via crafted HTML pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | WebGL integer overflow in Chrome Android <155.0.8059.39 enables RCE outside sandbox | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Google Chrome Permissions info leak pre-155.0.8059.39 enables site isolation bypass via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Network use-after-free before 155.0.8059.39 enables RCE outside sandbox via crafted extension, social engineering | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Google Chrome Core use-after-free before 155.0.8059.39 allows remote RCE outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Google Chrome <154.0.8037.97 FedCM use-after-free enables remote code execution outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome <154.0.8037.97 WebGL out-of-bounds write enabling sandbox-escape RCE via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome <154.0.8037.97 Windows FileSystem authorization flaw enables sandbox escape and RCE. | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical Android Chrome ANGLE buffer overflow pre-154.0.8037.92 enables remote sandbox-escape RCE | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Use-after-free in Chrome Views <154.0.8037.92 enables remote code exec outside sandbox | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome FullScreen use-after-free allows remote code execution outside sandbox via crafted HTML pre-154.0.8037.92 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Views use-after-free (<154.0.8037.92) allows arbitrary code execution outside sandbox | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Use-after-free in Chrome Bluetooth pre-154.0.8037.92 allows remote sandbox escape and RCE | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome pre-154.0.8037.92 Passwords use-after-free enabling remote code execution outside sandbox via crafted HTML page | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome FedCM use-after-free before 154.0.8037.97 enables remote code execution outside sandbox via HTML | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Critical WebGL out-of-bounds write in Chrome <154.0.8037.97 enables remote sandbox-escape RCE | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Chrome Windows FileSystem auth bug enables sandbox escape and RCE via crafted HTML page | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | PyJWT pre-2.14.0 PEM detection bug allows HMAC token forgery with public keys | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | PyJWT <2.14.0 PyJWKClient follows unvalidated JWKS redirects, allowing key substitution and credential disclosure | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | PyJWT 2.13–2.14 HMAC from_jwk skips prepare_key; empty 'k' enables zero-key JWT forgery | secure-packages-rolling | Oct 9, 2026 |