← All tracked CVEs
Updated 13:00
High severity
High15d SLAWe fix a high vulnerability within 15 days of publication, under our service-level agreement (SLA). We track 788 CVEs here: in progress, or fixed in the last 30 days.
| CVE | Status | Summary | Distribution | Fixed |
|---|---|---|---|---|
| Fixed | V8 type confusion in Chrome <154.0.8037.57 allows sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Out-of-bounds write in Chrome V8 enables sandboxed RCE via crafted HTML (pre-154.0.8037.57) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Missing authorization in Chrome Extensions enabled site isolation bypass pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Browser use-after-free allows local arbitrary code execution outside sandbox pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Google Chrome <154.0.8037.57 Bindings type confusion enables sandboxed remote code execution via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Android Chrome WebView missing authorization pre-154.0.8037.57 allows compromised renderer to bypass web origin policy | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Platform use-after-free allows sandbox RCE via crafted HTML (pre-154.0.8037.57) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | V8 race in Chrome <154.0.8037.57 allows sandboxed RCE via crafted HTML page | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome pre-154.0.8037.57 WakeLock auth flaw let compromised renderer bypass system restrictions | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Themes input validation flaw allows sandbox code execution via crafted traffic pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Improper output encoding in Chrome DevTools enables sandbox escape RCE pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Google Chrome Fonts race condition before 155.0.8059.39 allows remote code execution outside sandbox | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Media use-after-free enables sandboxed RCE via crafted HTML, prior to 155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome <155.0.8059.39 PDF use-after-free leads to sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Mac <155.0.8059.39 Core race condition enables sandbox escape RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High-severity use-after-free in Chrome Parser allows sandboxed RCE via crafted HTML (pre-155.0.8059.39) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Mac WebAppInstalls ref resolution bug enables renderer sandbox escape RCE pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Storage use-after-free allows RCE outside sandbox via crafted HTML page before 155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Media use-after-free enables sandboxed RCE via crafted HTML pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Mac <155.0.8059.39 sandbox privilege escalation via crafted HTML after renderer compromise | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome <155.0.8059.39 Fonts race allows sandbox escape RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | V8 type confusion in Chrome <155.0.8059.39 enables sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Windows Fonts use-after-free allowed sandboxed RCE via crafted HTML before 155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Incorrect authorization in Chrome Android Transactions Platform exposes data via crafted HTML (pre-155.0.8059.39) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Use-after-free in Google Chrome Media pre-155.0.8059.39 allows sandbox RCE via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Media use-after-free enables sandboxed RCE via crafted HTML pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Use-after-free in Google Chrome Modularization pre-155.0.8059.39 allows sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Incorrect Bluetooth authorization in Chrome <155.0.8059.39 exposes sensitive data via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | iOS Chrome Selection authorization flaw enables remote info disclosure via crafted HTML (pre-155.0.8059.39) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Android <155 Autofill reference resolution flaw exposes sensitive data via crafted HTML, social engineering | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome ANGLE type confusion enables sandbox escape RCE after renderer compromise via crafted HTML pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Fonts buffer overflow before 155.0.8059.39 enables RCE outside sandbox via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Use-after-free in Chrome GarbageCollection pre-155.0.8059.39 enables sandbox RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Use-after-free in Chrome Streaming allows sandboxed code execution via crafted HTML pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Incorrect reference resolution in Chrome iOS Passwords enables out-of-sandbox code execution post renderer compromise | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Use-after-free in Google Chrome Select <155.0.8059.39 permits sandboxed arbitrary code execution via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome pre-155.0.8059.39 CSS use-after-free allows sandboxed remote code execution via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome WebRTC use-after-free <155.0.8059.39 allows sandboxed RCE via crafted HTML page | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Google Chrome pre-155.0.8059.39 HTML use-after-free allows remote sandbox RCE | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Android <155.0.8059.39 Passwords component info leak via crafted HTML, social engineering | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High-severity Chrome V8 race condition enables sandboxed remote code execution via crafted HTML (pre-155.0.8059.39) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Incorrect comparison in Chrome Fonts prior to 155.0.8059.39 enables sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Android Chrome <155.0.8059.39 Autofill auth flaw exposes sensitive data via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Use-after-free in Chrome Bindings pre-155.0.8059.39 enables sandbox RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Buffer overflow in ANGLE allows code execution outside Chrome sandbox pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Pre-155.0.8059.39 Chrome V8 type confusion enables sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome <155.0.8059.39 Fonts race condition enables sandbox escape RCE via crafted HTML. | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome <155.0.8059.39 WebAudio use-after-free allows sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome pre-155.0.8059.39 Metrics use-after-free enables post-renderer sandbox escape RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Google Lens confused deputy allowed code execution outside sandbox via crafted HTML pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 |