Skip to content
← All tracked CVEs

Updated 05:00

Critical severity

Critical7d SLA

Our service-level agreement (SLA) gives a critical vulnerability a fix within 7 days of publication. 100 CVEs are tracked here: open, or fixed in the last 30 days.

Status
CVEStatusSummaryReleaseClock startedDeadlineFixedTime to fix
Fixed within SLACritical Dawn buffer overflow allows remote code execution outside sandbox on Android Chrome <151.0.7922.169secure-packages-rollingAug 24, 2026Aug 31, 2026Aug 25, 20261 day
Fixed within SLAChrome Android Dawn buffer overflow enables remote code execution outside sandbox pre-151.0.7922.169 via crafted HTMLsecure-packages-26.05Aug 25, 2026Sep 1, 2026Aug 25, 2026same day
Fixed within SLALinux kernel netfs potential tearing and i_size_seqcount corruption updating remote_i_size/zero_point without i_locksecure-packages-rollingAug 18, 2026Aug 25, 2026Aug 25, 20266 days
Fixed within SLALinux kernel netfs potential tearing in remote_i_size/zero_point risking i_size_seqcount corruptionsecure-packages-26.05Aug 19, 2026Aug 26, 2026Aug 19, 2026same day
Fixed within SLANetfs: Tearing in remote_i_size/zero_point may corrupt i_size_seqcountsecure-packages-25.11Aug 18, 2026Aug 25, 2026Aug 19, 20261 day
Fixed within SLAUAF in netfs_unlock_abandoned_read_pages and netfs_unlock_read_folio after request progress clearedsecure-packages-25.11Aug 12, 2026Aug 19, 2026Aug 18, 20266 days
Fixed within SLAUse-after-free in Chrome Payments allows remote sandbox escape via crafted HTML pre-151.0.7922.109secure-packages-26.05Aug 11, 2026Aug 18, 2026Aug 11, 2026same day
Fixed within SLAUse-after-free in Chrome Media on Windows pre-151.0.7922.109 enables remote sandbox escape via crafted HTMLsecure-packages-26.05Aug 11, 2026Aug 18, 2026Aug 11, 2026same day
Fixed within SLACritical WebGL use-after-free allows remote sandbox escape in Android Chrome <151.0.7922.109secure-packages-26.05Aug 11, 2026Aug 18, 2026Aug 11, 2026same day
Fixed within SLAGoogle Chrome WebAuthn use-after-free allows remote sandbox escape via crafted HTML (pre-151.0.7922.109)secure-packages-26.05Aug 11, 2026Aug 18, 2026Aug 11, 2026same day
Fixed within SLAInsufficient Chrome Codecs input validation enables remote sandbox escape via crafted HTML (pre-151.0.7922.109)secure-packages-26.05Aug 11, 2026Aug 18, 2026Aug 11, 2026same day
Fixed within SLAANGLE out-of-bounds write in Chrome Android pre-151.0.7922.109 enables remote sandbox escapesecure-packages-26.05Aug 11, 2026Aug 18, 2026Aug 11, 2026same day
Fixed within SLACritical use-after-free in Google Chrome Aura on Linux <151.0.7922.109 enables remote sandbox escapesecure-packages-26.05Aug 11, 2026Aug 18, 2026Aug 11, 2026same day
Fixed within SLAUse-after-free in Google Chrome Payments enables sandbox escape via crafted HTML (pre-151.0.7922.109)secure-packages-25.11Aug 10, 2026Aug 17, 2026Aug 11, 20261 day
Fixed within SLAUse-after-free in Chrome Media on Windows enables remote sandbox escape (pre-151.0.7922.109)secure-packages-25.11Aug 10, 2026Aug 17, 2026Aug 11, 20261 day
Fixed within SLAWebGL use-after-free in Chrome Android enables remote sandbox escape pre-151.0.7922.109secure-packages-25.11Aug 10, 2026Aug 17, 2026Aug 11, 20261 day
Fixed within SLAHigh-severity WebAuthn use-after-free in Google Chrome <151.0.7922.109 enables remote sandbox escape via crafted HTML pagesecure-packages-25.11Aug 10, 2026Aug 17, 2026Aug 11, 20261 day
Fixed within SLAChrome pre-151.0.7922.109 Codecs validation flaw allows remote sandbox escape via crafted HTML, high severitysecure-packages-25.11Aug 10, 2026Aug 17, 2026Aug 11, 20261 day
Fixed within SLACritical OOB write in ANGLE on Chrome Android before 151.0.7922.109 enabling sandbox escape via HTMLsecure-packages-25.11Aug 10, 2026Aug 17, 2026Aug 11, 20261 day
Fixed within SLAAura UAF enables remote sandbox escape via crafted HTML in Chrome Linux <151.0.7922.109secure-packages-25.11Aug 10, 2026Aug 17, 2026Aug 11, 20261 day
Fixed within SLAUse-after-free in Chrome Payments allows remote sandbox escape via crafted HTML (pre-151.0.7922.109)secure-packages-rollingAug 10, 2026Aug 17, 2026Aug 11, 20261 day
Fixed within SLAChrome Windows <151.0.7922.109 Media use-after-free enables remote sandbox escape via HTMLsecure-packages-rollingAug 10, 2026Aug 17, 2026Aug 11, 20261 day
Fixed within SLAUse-after-free in Chrome Android WebGL enables remote sandbox escape (pre-151.0.7922.109)secure-packages-rollingAug 10, 2026Aug 17, 2026Aug 11, 20261 day
Fixed within SLAUse-after-free in Chrome WebAuthn pre-151.0.7922.109 allows remote sandbox escape via HTMLsecure-packages-rollingAug 10, 2026Aug 17, 2026Aug 11, 20261 day
Fixed within SLAInsufficient input validation in Chrome Codecs pre-151.0.7922.109 allows remote sandbox escape via HTMLsecure-packages-rollingAug 10, 2026Aug 17, 2026Aug 11, 20261 day
Fixed within SLACritical ANGLE out-of-bounds write enables sandbox escape via crafted HTML in Chrome Android <151.0.7922.109secure-packages-rollingAug 10, 2026Aug 17, 2026Aug 11, 20261 day
Fixed within SLACritical UAF in Chrome Aura on Linux enables remote sandbox escape via crafted HTML pre-151.0.7922.109secure-packages-rollingAug 10, 2026Aug 17, 2026Aug 11, 20261 day
Fixed within SLACritical Chrome Ozone use-after-free enables remote sandbox escape via crafted HTML (pre-151.0.7922.72)secure-packages-25.11Aug 10, 2026Aug 17, 2026Aug 11, 20261 day
Fixed within SLAANGLE input validation flaw in Chrome <151.0.7922.72 enables remote sandbox escape via crafted HTMLsecure-packages-25.11Aug 10, 2026Aug 17, 2026Aug 11, 20261 day
Fixed within SLACritical use-after-free in Chrome Views enables sandbox escape from compromised renderer prior to 151.0.7922.72secure-packages-25.11Aug 10, 2026Aug 17, 2026Aug 11, 20261 day
Fixed within SLATint implementation flaw in Chrome Mac before 151.0.7922.72 allows sandbox escape via crafted HTMLsecure-packages-rollingAug 5, 2026Aug 12, 2026Aug 11, 20266 days
Fixed within SLAChrome <151.0.7922.72 WebSocket input validation bug enables sandbox escape from compromised renderersecure-packages-rollingAug 5, 2026Aug 12, 2026Aug 11, 20266 days
Fixed within SLACritical use-after-free in Chrome Ozone pre-151.0.7922.72 enables remote crafted-HTML sandbox escapesecure-packages-rollingAug 7, 2026Aug 14, 2026Aug 11, 20264 days
Fixed within SLACritical ANGLE input validation flaw enables remote sandbox escape via crafted HTML in Chrome <151.0.7922.72secure-packages-rollingAug 7, 2026Aug 14, 2026Aug 11, 20264 days
Fixed within SLAChrome <151.0.7922.72: Views use-after-free enables sandbox escape via crafted HTMLsecure-packages-rollingAug 7, 2026Aug 14, 2026Aug 11, 20264 days
Fixed within SLAPre-151.0.7922.72 Chrome for Mac Tint flaw enabled remote sandbox escape via HTMLsecure-packages-26.05Aug 5, 2026Aug 12, 2026Aug 11, 20266 days
Fixed within SLAWebSockets input validation flaw enables sandbox escape from compromised renderer in Chrome <151.0.7922.72secure-packages-26.05Aug 5, 2026Aug 12, 2026Aug 11, 20266 days
Fixed within SLACritical Chrome Ozone use-after-free enables remote sandbox escape via crafted HTML before 151.0.7922.72secure-packages-26.05Aug 7, 2026Aug 14, 2026Aug 11, 20264 days
Fixed within SLACritical ANGLE input validation flaw enables sandbox escape via crafted HTML (Chrome <151.0.7922.72)secure-packages-26.05Aug 7, 2026Aug 14, 2026Aug 11, 20264 days
Fixed within SLAUse-after-free in Views enables sandbox escape on Chrome before 151.0.7922.72 via crafted HTMLsecure-packages-26.05Aug 7, 2026Aug 14, 2026Aug 11, 20264 days
Fixed within SLAsecure-packages-rollingAug 10, 2026Aug 17, 2026Aug 11, 20261 day
Fixed within SLAnfsd setlease failure frees layout stid without idr_remove, causing IDR dangling pointer dereferencesecure-packages-25.11Aug 4, 2026Aug 11, 2026Aug 10, 20266 days
Fixed within SLAUse-after-free in pNFS pnfs_update_layout() tracepoint after freeing lo with pnfs_put_layout_hdrsecure-packages-rollingAug 4, 2026Aug 11, 2026Aug 10, 20266 days
Fixed within SLA9p p9_client_walk error drops oldfid reference when clone=false, causing UAF/refcount underflowsecure-packages-rollingAug 4, 2026Aug 11, 2026Aug 10, 20266 days
Fixed within SLAUse-after-free via IDR leak and uninitialized delayed_work on nfsd layout setlease failuresecure-packages-rollingAug 4, 2026Aug 11, 2026Aug 10, 20266 days
Fixed within SLANFSD: SECINFO_NO_NAME decode leaves stale sin_exp; exp_put called after truncated XDRsecure-packages-rollingAug 4, 2026Aug 11, 2026Aug 10, 20266 days
Fixed within SLATint implementation flaw in Google Chrome on Mac <151.0.7922.72 enabling sandbox escape via crafted HTMLsecure-packages-25.11Aug 5, 2026Aug 12, 2026Aug 5, 2026same day
Fixed within SLAChrome WebSockets input validation flaw enables sandbox escape from compromised renderer via crafted HTML (pre-151.0.7922.72)secure-packages-25.11Aug 5, 2026Aug 12, 2026Aug 5, 2026same day
Fixed within SLAglibc scanf %mc width >1024 triggers 1-byte heap overflow in v2.7-2.43secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome Google Lens insufficient input validation allows renderer sandbox escape via crafted HTMLsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day