Skip to content
← All tracked CVEs

Updated 04:00

Critical severity

Critical7d SLA

Our service-level agreement (SLA) gives a critical vulnerability a fix within 7 days of publication. 100 CVEs are tracked here: open, or fixed in the last 30 days.

Status
CVEStatusSummaryReleaseClock startedDeadlineFixedTime to fix
Fixed within SLAChrome <151.0.7922.72 AI input validation bug enables sandbox escape from compromised renderer via crafted HTMLsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome WebAuthn input validation flaw allows sandbox escape via PDF (pre-151.0.7922.72)secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome Notifications validation flaw enables sandbox escape via crafted PDF after renderer compromise (pre-151)secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome <151.0.7922.72 WebSockets use-after-free allows remote sandbox escape via crafted HTMLsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome Android PiP input validation bug enables sandbox escape post-renderer compromise via crafted HTMLsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome pre-151.0.7922.72 DNS use-after-free enables sandbox escape from compromised renderer via HTMLsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAGoogle Chrome Mac Crypto bug allows sandbox escape from compromised renderer via crafted HTML pre-151.0.7922.72secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome Mac pre-151.0.7922.72 network flaw enables sandbox escape via crafted HTML after renderer compromisesecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLADevTools race on Mac Chrome pre-151.0.7922.72 enables sandbox escape from compromised renderersecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAInteger overflow in Google Chrome Codecs enables remote sandbox escape via crafted video pre-151.0.7922.72secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAANGLE input validation flaw allows sandbox escape via crafted HTML in Chrome <151.0.7922.72secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome DevTools untrusted input validation flaw enables sandbox escape via crafted HTML (pre-151.0.7922.72)secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome Passwords validation flaw enables sandbox escape from compromised renderer via crafted HTML (pre-151.0.7922.72)secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAUse-after-free in ANGLE allows sandbox escape in Google Chrome pre-151.0.7922.72 via crafted HTMLsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAUse-after-free in Chrome Media enables sandbox escape via crafted HTML (pre-151.0.7922.72)secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome pre-151 Save to Drive input validation bug enabling renderer sandbox escape via crafted PDFsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAANGLE out-of-bounds read/write allows remote attacker sandbox escape via crafted HTML in Chrome <151.0.7922.72secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLADawn heap buffer overflow in Chrome <151.0.7922.72 enables potential remote sandbox escape via crafted HTMLsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome Android <151.0.7922.72 WebGL out-of-bounds write enables remote sandbox escape via crafted HTMLsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAWebGL integer overflow allows sandbox escape in Chrome Android before 151.0.7922.72 via crafted HTMLsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAANGLE out-of-bounds write allows remote sandbox escape via crafted HTML in Chrome <151.0.7922.72 High severitysecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAUse-after-free in ANGLE allows remote sandbox escape via crafted HTML on Chrome <151.0.7922.72secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAHigh severity ANGLE integer overflow in Chrome <151.0.7922.72 enables remote sandbox escape via crafted HTMLsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome Mac <151.0.7922.72 Downloads race allows sandbox escape after renderer compromise via crafted HTML pagesecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAGoogle Chrome Mac <151.0.7922.72 MHTML flaw enables sandbox escape from compromised renderer via crafted HTMLsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome Mac pre-151.0.7922.72 Downloads race allows sandbox escape after renderer compromisesecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAGoogle Chrome Audio use-after-free enables sandbox escape from compromised renderer via crafted HTML pre-151.0.7922.72secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome <151.0.7922.72 ANGLE use-after-free enables sandbox escape via crafted HTMLsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome ANGLE type confusion enabling sandbox escape via crafted HTML in versions <151.0.7922.72secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome Mac ANGLE flaw allows remote sandbox escape via crafted HTML pre-151.0.7922.72secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAUse-after-free in DataTransfer enables sandbox escape via crafted HTML in Chrome <151.0.7922.72 on Windowssecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAOut-of-bounds write in ANGLE enables remote sandbox escape in Chrome Windows pre-151.0.7922.72secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome <151.0.7922.72 Input use-after-free allows renderer sandbox escape via crafted HTMLsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAANGLE type confusion in Chrome <151.0.7922.72 enables sandbox escape via crafted HTML after renderer compromisesecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome for iOS <151.0.7922.72: Insufficient input validation enables renderer sandbox escape via crafted HTMLsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAANGLE integer overflow in Chrome <151.0.7922.72 enables post-renderer sandbox escapesecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome Android WebAuthn input validation flaw enables renderer-compromised sandbox escape via crafted HTML pre-151.0.7922.72secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome on ChromeOS Color heap buffer overflow enables sandbox escape via HTML, renderer compromise pre-151.0.7922.72secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAANGLE bug enables post-renderer-compromise sandbox escape via crafted HTML in Chrome Android <151.0.7922.72secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAANGLE out-of-bounds write enables sandbox escape via crafted HTML in Chrome <151.0.7922.72secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAPre-151.0.7922.72 Chrome QUIC integer overflow enables sandbox escape from compromised renderer via crafted HTMLsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChromecast input validation flaw enables sandbox escape via crafted HTML (Chrome <151.0.7922.72)secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome ANGLE input validation bug allows sandbox escape via crafted HTML (pre-151.0.7922.72)secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAUse-after-free in Chrome Views allows sandbox escape via crafted HTML from compromised renderersecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAiOS Chrome <151.0.7922.72 allows remote sandbox escape via crafted HTML pagesecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAChrome Enterprise <151.0.7922.72 crypto bug allows discretionary access control bypass via network MITMsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAInsufficient input validation in Chrome Android Dawn allows remote sandbox escape via crafted HTMLsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAUnbound 1.4.22–1.25.1 SO_REUSEPORT per-thread port partitioning leaks entropy, enabling DNS cache poisoningsecure-packages-rollingJul 27, 2026Aug 3, 2026Jul 29, 20262 days
Fixed within SLAUnbound 1.4.22–1.25.1 SO_REUSEPORT per-thread port partition leaks entropy, enabling DNS cache poisoningsecure-packages-26.05Jul 27, 2026Aug 3, 2026Jul 29, 20262 days
Fixed within SLAUnbound 1.4.22–1.25.1 SO_REUSEPORT thread partitioning leaks source port entropy, enabling DNS cache poisoningsecure-packages-25.11Jul 27, 2026Aug 3, 2026Jul 29, 20262 days