Skip to content
← All tracked CVEs

Updated 11:00

Critical severity

Critical7d SLA

We fix a critical vulnerability within 7 days of publication, under our service-level agreement (SLA). We track 174 CVEs here: in progress, or fixed in the last 30 days.

Status
CVEStatusSummaryDistributionFixed
Fixedlibcurl reuses Negotiate-auth HTTP connection after empty credentials, mixing users’ authenticated requestssecure-packages-rollingSep 19, 2026
FixedUse-after-free in libcurl cleanup with HTTP/2 Server Push and shared connections across handlessecure-packages-rollingSep 19, 2026
FixedANGLE input validation bug enables sandbox-escape RCE via HTML in Chrome <153.0.8010.47secure-packages-25.11Sep 18, 2026
FixedUse-after-free in Chrome DigitalCredentials <153.0.8010.47 enables remote RCE outside sandbox via crafted HTMLsecure-packages-25.11Sep 18, 2026
FixedV8 integer overflow in Chrome <153.0.8010.47 allows sandboxed RCE via crafted HTMLsecure-packages-25.11Sep 18, 2026
FixedChrome Core use-after-free enables RCE outside sandbox via crafted HTML before 153.0.8010.47secure-packages-25.11Sep 18, 2026
FixedUse-after-free in Google Chrome Auth before 153.0.8010.47 allows RCE outside sandboxsecure-packages-25.11Sep 18, 2026
FixedUse-after-free in Chrome WebAppInstalls <153.0.8010.47 enables remote RCE outside sandbox via HTMLsecure-packages-25.11Sep 18, 2026
FixedImproper ANGLE input validation in Chrome <153.0.8010.47 allows RCE outside sandboxsecure-packages-rollingSep 18, 2026
FixedChrome <153.0.8010.47 DigitalCredentials UAF enables RCE outside sandbox via crafted HTMLsecure-packages-rollingSep 18, 2026
FixedV8 integer overflow in Chrome <153.0.8010.47 enabling sandboxed RCE via crafted HTMLsecure-packages-rollingSep 18, 2026
FixedChrome Core use-after-free enables RCE outside sandbox via crafted HTML (pre-153.0.8010.47)secure-packages-rollingSep 18, 2026
FixedUse-after-free in Chrome Auth <153.0.8010.47 enables RCE outside sandbox via crafted HTMLsecure-packages-rollingSep 18, 2026
FixedUse-after-free in Chrome WebAppInstalls allows RCE outside sandbox via crafted HTML pre-153.0.8010.47secure-packages-rollingSep 18, 2026
FixedANGLE input validation flaw in Chrome <153.0.8010.47 enables remote code execution outside sandboxsecure-packages-26.05Sep 18, 2026
FixedUse-after-free in Chrome DigitalCredentials enables remote code execution outside sandbox via crafted HTML (pre-153.0.8010.47)secure-packages-26.05Sep 18, 2026
FixedChrome V8 integer overflow pre-153.0.8010.47 enables remote sandbox RCE via HTMLsecure-packages-26.05Sep 18, 2026
FixedChrome Core use-after-free before 153.0.8010.47 allows RCE outside sandbox via crafted HTMLsecure-packages-26.05Sep 18, 2026
FixedChrome pre-153.0.8010.47 Auth use-after-free allows remote code execution outside sandboxsecure-packages-26.05Sep 18, 2026
FixedPre-153.0.8010.47 Chrome WebAppInstalls use-after-free allows RCE outside sandbox via crafted HTMLsecure-packages-26.05Sep 18, 2026
FixedPLY 3.11 PyPI: Undocumented yacc() picklefile enables RCE via unsafe pickle deserializationsecure-packages-26.05Sep 18, 2026
FixedGitPython <3.1.59 multi-line config write bug enables directive injection and hook RCEsecure-packages-26.05Sep 18, 2026
FixedUndocumented PLY 3.11 yacc() 'picklefile' enables RCE through unsafe pickle deserializationsecure-packages-rollingSep 18, 2026
Fixedlibcurl reuses Negotiate-auth HTTP connection after empty creds, leaking requests across userssecure-packages-26.05Sep 18, 2026
FixedUse-after-free in libcurl cleanup when sharing connections during HTTP/2 Server Pushsecure-packages-26.05Sep 18, 2026
FixedRedis Lua GC use-after-free allows authenticated RCE in versions <=8.2.1; fixed 8.2.2secure-packages-rollingSep 17, 2026
FixedEVP_Cipher() skips AEAD tag verification on empty ciphertext for ChaCha20-Poly1305 and AES-OCBsecure-packages-26.05Sep 15, 2026
FixedOpenSSL CMP response validation uses attacker-controlled DN as format string, causing client DoSsecure-packages-26.05Sep 15, 2026
In progressZulip Server <4.9 leaves RabbitMQ 25672 open; weak cookie allows RCE and message snoopingsecure-packages-rolling—
In progresstarfile misinterprets crafted archives by normalizing AREGTYPE during GNUTYPE_LONGNAME/LONGLINK processingsecure-packages-rolling—
In progressRDMA/srpt: Stale n_rw_ctx/n_rdma after srpt_alloc_rw_ctxs() failure miscounts SQ creditssecure-packages-25.11—
In progresssrpt_alloc_rw_ctxs unwind leaves stale n_rw_ctx/n_rdma and dangling rw_ctxs; wrong SQ creditssecure-packages-26.05—
In progressPyJWT accepts HMAC tokens signed with zero-length JWK 'oct' key, enabling forged claimssecure-packages-26.05—
In progressBefore 2.14.0 PyJWT PyJWKClient follows unvalidated JWKS redirects, enabling credential disclosure and key substitutionsecure-packages-26.05—
In progressPyJWT pre-2.14.0 PEM detection flaw lets attackers forge HMAC tokens with public keysecure-packages-26.05—
In progressIncorrect authorization in Chrome Site Isolation pre-155.0.8059.39 enables RCE via crafted HTMLsecure-packages-rolling—
In progressChromoting authorization bug in Mac Chrome allowed remote system access bypass via crafted traffic pre-155.0.8059.39secure-packages-rolling—
In progressCritical Chrome Browser use-after-free allows RCE outside sandbox pre-155.0.8059.39 via crafted HTMLsecure-packages-rolling—
In progressChrome TabStrip use-after-free allows RCE outside sandbox via crafted HTML (pre-155.0.8059.39)secure-packages-rolling—
In progressChrome Core use-after-free pre-155.0.8059.39 enables RCE outside sandbox via crafted HTMLsecure-packages-rolling—
In progressUse-after-free in Chrome Network allows code execution outside sandbox via crafted extension prior to 155.0.8059.39secure-packages-rolling—
In progressChrome pre-155.0.8059.39 permissions info leak allows site isolation bypass via crafted HTMLsecure-packages-rolling—
In progressAndroid Chrome pre-155.0.8059.39 WebGL integer overflow allows remote code execution outside sandboxsecure-packages-rolling—
In progressIncorrect auth in Chrome Android Search pre-155.0.8059.39 allows RCE outside sandbox via crafted HTML pagesecure-packages-rolling—
In progressChrome <155.0.8059.39 Tint use-after-free enables remote code execution outside sandbox via crafted HTMLsecure-packages-rolling—
In progressUse-after-free in Chrome Tabs on Mac pre-155 enables RCE outside sandbox via crafted HTMLsecure-packages-rolling—
In progressChrome iOS pre-155.0.8059.39 missing authorization enables RCE outside sandbox via crafted HTMLsecure-packages-rolling—
In progressChrome <155.0.8059.39 FileSystem authorization flaw enables remote sandbox escape RCE via crafted HTML social engineeringsecure-packages-rolling—
In progressUI authorization flaw in Chrome <155.0.8059.39 enabling sandbox-escape arbitrary code execution via crafted HTMLsecure-packages-rolling—
In progressIncomplete cleanup in Dawn enables remote sandbox escape in Chrome <155.0.8059.39secure-packages-rolling—

Contact sales

Provide us with some basic details and we'll follow up with you about , usually within one business day.

We'll only use this to get back to you. See our privacy policy (opens in a new tab). This site is protected by reCAPTCHA and the Google Privacy Policy (opens in a new tab) and Terms of Service (opens in a new tab) apply.