← All tracked CVEs
Updated 22:00
High severity
High15d SLAWe fix a high vulnerability within 15 days of publication, under our service-level agreement (SLA). We track 788 CVEs here: in progress, or fixed in the last 30 days.
| CVE | Status | Summary | Distribution | Fixed |
|---|---|---|---|---|
| In progress | Chrome Autofill authorization flaw pre-155.0.8059.39 enables data theft via crafted HTML, social engineering | secure-packages-rolling | — | |
| In progress | Chrome Passwords info leak before 155.0.8059.39 allows remote theft of sensitive info via crafted HTML | secure-packages-rolling | — | |
| In progress | WebAPKs confused deputy in Android Chrome enables origin policy bypass via crafted HTML pre-155.0.8059.39 | secure-packages-rolling | — | |
| In progress | Missing Chrome Autofill authorization pre-155.0.8059.39 enables sensitive data theft via crafted HTML | secure-packages-rolling | — | |
| In progress | Chrome <155.0.8059.39 Google Lens confused deputy enables RCE outside sandbox from compromised renderer | secure-packages-rolling | — | |
| In progress | Use-after-free in Chrome Metrics pre-155.0.8059.39 enables sandbox escape RCE via crafted HTML | secure-packages-rolling | — | |
| In progress | WebAudio use-after-free in Chrome <155.0.8059.39 enables sandboxed RCE via crafted HTML | secure-packages-rolling | — | |
| In progress | Chrome Fonts race condition pre-155.0.8059.39 enables code execution outside sandbox via HTML | secure-packages-rolling | — | |
| In progress | Chrome <155.0.8059.39 V8 type confusion enables remote sandboxed arbitrary code execution via crafted HTML | secure-packages-rolling | — | |
| In progress | ANGLE buffer overflow in Chrome <155.0.8059.39 enables sandbox escape via crafted HTML | secure-packages-rolling | — | |
| In progress | Chrome <155.0.8059.39 Bindings use-after-free enables sandboxed RCE via crafted HTML | secure-packages-rolling | — | |
| In progress | Android Chrome Autofill auth bug pre-155.0.8059.39 leaks sensitive data via crafted HTML | secure-packages-rolling | — | |
| In progress | Incorrect Fonts comparison in Chrome allows sandboxed RCE via crafted HTML (pre-155.0.8059.39) | secure-packages-rolling | — | |
| In progress | V8 race condition enables sandboxed RCE via crafted HTML in Chrome before 155.0.8059.39 | secure-packages-rolling | — | |
| In progress | Chrome Android Passwords info leak pre-155.0.8059.39 via crafted HTML social engineering | secure-packages-rolling | — | |
| In progress | Use-after-free in Chrome HTML <155.0.8059.39 allows sandboxed RCE via crafted page | secure-packages-rolling | — | |
| In progress | Chrome WebRTC use-after-free allows sandboxed RCE via crafted HTML pre-155.0.8059.39 | secure-packages-rolling | — | |
| In progress | Chrome <155.0.8059.39 CSS use-after-free allows sandbox RCE via crafted HTML | secure-packages-rolling | — | |
| In progress | Chrome pre-155 Workers authorization bug lets compromised renderer bypass site isolation via PDF | secure-packages-rolling | — | |
| In progress | Chrome Mac pre-155.0.8059.39 incorrect reference resolution leaks sensitive information via crafted HTML | secure-packages-rolling | — | |
| In progress | Use-after-free in Select element allows sandboxed RCE via crafted HTML in Chrome <155.0.8059.39 | secure-packages-rolling | — | |
| In progress | Incorrect reference resolution in iOS Chrome Passwords enables sandbox escape, code execution pre-155.0.8059.39 | secure-packages-rolling | — | |
| In progress | Use-after-free in Chrome Streaming pre-155 enables remote sandboxed RCE via crafted HTML | secure-packages-rolling | — | |
| In progress | Use-after-free in Chrome GarbageCollection before 155.0.8059.39 enables sandboxed RCE via crafted HTML | secure-packages-rolling | — | |
| In progress | Chrome <155.0.8059.39 Fonts buffer overflow enables post-renderer sandbox escape and code execution | secure-packages-rolling | — | |
| In progress | Type confusion in ANGLE enabling out-of-sandbox code execution via crafted HTML, Chrome <155.0.8059.39 | secure-packages-rolling | — | |
| In progress | Chrome <155 Contextual Tasks confused deputy lets compromised renderer access privileged pages | secure-packages-rolling | — | |
| In progress | Incorrect Android Chrome Autofill reference resolution leaks sensitive data via social engineering crafted HTML (pre-155.0.8059.39) | secure-packages-rolling | — | |
| In progress | Pre-155.0.8059.39 iOS Chrome Selection auth flaw leaks data via crafted HTML | secure-packages-rolling | — | |
| In progress | Google Chrome <155.0.8059.39 Bluetooth authorization bug leaks sensitive info via crafted HTML, Medium severity | secure-packages-rolling | — | |
| In progress | Chrome Modularization use-after-free enables sandbox remote code execution via crafted HTML (pre-155.0.8059.39) | secure-packages-rolling | — | |
| In progress | Use-after-free in Chrome Media before 155.0.8059.39 enables sandbox RCE via crafted HTML | secure-packages-rolling | — | |
| In progress | Google Chrome Payments info leak via crafted HTML and social engineering (<155.0.8059.39) | secure-packages-rolling | — | |
| In progress | Use-after-free in Chrome Media before 155.0.8059.39 allows sandboxed RCE via crafted HTML | secure-packages-rolling | — | |
| In progress | Chrome Android Transactions Platform auth flaw pre-155.0.8059.39 leaks sensitive data via crafted HTML | secure-packages-rolling | — | |
| In progress | Use-after-free in Chrome Fonts on Windows pre-155.0.8059.39 enables sandboxed RCE via HTML | secure-packages-rolling | — | |
| In progress | V8 type confusion enables sandboxed RCE via crafted HTML in Chrome <155.0.8059.39 | secure-packages-rolling | — | |
| In progress | Chrome Fonts race allows arbitrary code execution outside sandbox pre-155.0.8059.39 | secure-packages-rolling | — | |
| In progress | Chrome Mac pre-155.0.8059.39 sandbox escape allows code execution outside sandbox via HTML | secure-packages-rolling | — | |
| In progress | Use-after-free in Chrome Media allows sandbox RCE via crafted HTML pre-155.0.8059.39 | secure-packages-rolling | — | |
| In progress | Missing authorization in iOS Chrome <155.0.8059.39 lets remote attacker exfiltrate data via HTML | secure-packages-rolling | — | |
| In progress | Chrome pre-155.0.8059.39 Storage UAF enables sandbox escape RCE via crafted HTML after renderer compromise | secure-packages-rolling | — | |
| In progress | Accessibility auth flaw in Chrome <155.0.8059.39 enables compromised renderer site isolation bypass via crafted HTML. | secure-packages-rolling | — | |
| In progress | Incorrect reference resolution in Chrome WebAppInstalls allows sandbox escape and RCE on macOS <155.0.8059.39 | secure-packages-rolling | — | |
| In progress | Use-after-free in Chrome Parser pre-155.0.8059.39 enables remote sandboxed code execution via crafted HTML | secure-packages-rolling | — | |
| In progress | Chrome Mac Core race condition pre-155.0.8059.39 enables sandbox escape RCE via crafted HTML | secure-packages-rolling | — | |
| In progress | Use-after-free in Chrome PDF pre-155.0.8059.39 enables sandboxed RCE via crafted HTML | secure-packages-rolling | — | |
| In progress | Use-after-free in Chrome Media allows sandbox RCE via crafted HTML (pre-155.0.8059.39) | secure-packages-rolling | — | |
| In progress | Google Chrome Fonts race condition allows RCE outside sandbox pre-155.0.8059.39 via crafted HTML | secure-packages-rolling | — | |
| In progress | Quadratic CPU DoS in CairoSVG <2.9.1 when rendering long-segment SVG paths via svg2png/svg2pdf/svg2ps | secure-packages-26.05 | — |