← All tracked CVEs
Updated 09:00
High severity
High15d SLAWe fix a high vulnerability within 15 days of publication, under our service-level agreement (SLA). We track 788 CVEs here: in progress, or fixed in the last 30 days.
| CVE | Status | Summary | Distribution | Fixed |
|---|---|---|---|---|
| Fixed | Improper input validation in Chrome Printing before 154.0.8037.57 enables RCE outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome V8 type confusion pre-154.0.8037.57 enables sandboxed code execution via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Externally controlled reference in Chrome DevTools pre-154.0.8037.57 lets adjacent attacker bypass system access restrictions | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Use-after-free in Chrome DevTools enables sandbox RCE via crafted HTML (pre-154.0.8037.57) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chromecast use-after-free in Chrome <154.0.8037.57 allows code execution outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | XML bug in Chrome <154.0.8037.57 enables remote sandboxed code execution via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Type confusion in Chrome IndexedDB pre-154.0.8037.57 enables sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | DevTools CSRF bypasses web origin policy via crafted HTML in Chrome <154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome iOS <154.0.8037.57 Navigation auth flaw enables sandbox escape and RCE | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Use-after-free in Chrome Verifier enables sandbox escape RCE via network pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Use-after-free in Google Chrome Bindings enables sandboxed RCE via crafted HTML (pre-154.0.8037.57) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome pre-154.0.8037.57 Views use-after-free allows sandbox escape RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Use-after-free in Chrome Bluetooth pre-154.0.8037.57 allows renderer sandbox escape, remote code execution | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Actor use-after-free before 154.0.8037.57 enables sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome DevTools race condition pre-154.0.8037.57 enabled site isolation bypass via crafted extension | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome WebAudio use-after-free allows sandbox remote code execution via crafted HTML pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Desktop <154.0.8037.57 input validation bug enables RCE outside sandbox via network | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | PDFium use-after-free enables sandboxed RCE via crafted PDF in Chrome <154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | HID use-after-free enables sandbox escape code execution via crafted HTML in Chrome <154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Incorrect WebProtect reference resolution allows compromised renderer sandbox escape RCE in Chrome <154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Google Chrome Metrics use-after-free (pre-154.0.8037.57) enables remote code execution outside sandbox via crafted network traffic | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Bluetooth cleanup flaw allows bypass of system access restrictions via crafted HTML pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Android GPU out-of-bounds write enables sandbox escape RCE via crafted HTML (pre-154.0.8037.57) Critical | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Use-after-free in Chrome Printing pre-154.0.8037.57 allows code execution outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High-severity Chrome Aura use-after-free pre-154.0.8037.57 enables local code execution outside sandbox | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome <154.0.8037.57 HID authorization flaw let compromised renderer bypass access restrictions via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | V8 type confusion in Chrome <154.0.8037.57 allows sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Out-of-bounds write in Chrome V8 enables sandboxed RCE via crafted HTML (pre-154.0.8037.57) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Missing authorization in Chrome Extensions enabled site isolation bypass pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Browser use-after-free allows local arbitrary code execution outside sandbox pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Google Chrome <154.0.8037.57 Bindings type confusion enables sandboxed remote code execution via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Android Chrome WebView missing authorization pre-154.0.8037.57 allows compromised renderer to bypass web origin policy | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Platform use-after-free allows sandbox RCE via crafted HTML (pre-154.0.8037.57) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | V8 race in Chrome <154.0.8037.57 allows sandboxed RCE via crafted HTML page | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome pre-154.0.8037.57 WakeLock auth flaw let compromised renderer bypass system restrictions | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Themes input validation flaw allows sandbox code execution via crafted traffic pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Improper output encoding in Chrome DevTools enables sandbox escape RCE pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Google Chrome Fonts race condition before 155.0.8059.39 allows remote code execution outside sandbox | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Media use-after-free enables sandboxed RCE via crafted HTML, prior to 155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome <155.0.8059.39 PDF use-after-free leads to sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Mac <155.0.8059.39 Core race condition enables sandbox escape RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High-severity use-after-free in Chrome Parser allows sandboxed RCE via crafted HTML (pre-155.0.8059.39) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Mac WebAppInstalls ref resolution bug enables renderer sandbox escape RCE pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Storage use-after-free allows RCE outside sandbox via crafted HTML page before 155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Media use-after-free enables sandboxed RCE via crafted HTML pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Mac <155.0.8059.39 sandbox privilege escalation via crafted HTML after renderer compromise | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome <155.0.8059.39 Fonts race allows sandbox escape RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | V8 type confusion in Chrome <155.0.8059.39 enables sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Windows Fonts use-after-free allowed sandboxed RCE via crafted HTML before 155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Incorrect authorization in Chrome Android Transactions Platform exposes data via crafted HTML (pre-155.0.8059.39) | secure-packages-25.11 | Oct 9, 2026 |