← All tracked CVEs
Updated 14:01
High severity
High15d SLAWe fix a high vulnerability within 15 days of publication, under our service-level agreement (SLA). We track 788 CVEs here: in progress, or fixed in the last 30 days.
| CVE | Status | Summary | Distribution | Fixed |
|---|---|---|---|---|
| Fixed | Missing authorization in Chrome Autofill before 155.0.8059.39 exposes sensitive data via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Android WebAPKs confused deputy bypasses web origin via crafted HTML, pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Google Chrome <155.0.8059.39 Passwords info leak via crafted HTML page (low severity) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | WebRTC buffer overflow in Chrome <154.0.8037.97 allows sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | V8 type confusion in Chrome pre-154.0.8037.97 enables sandbox RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Windows pre-154.0.8037.97 Contextual Tasks UAF enables RCE outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Use-after-free in Chrome MediaStream allows sandboxed RCE via crafted HTML (pre-154.0.8037.97) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome pre-154.0.8037.97 SVG use-after-free enables remote sandboxed code execution via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High-severity V8 type confusion enables sandboxed RCE in Chrome <154.0.8037.92 via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Incorrect WebView authorization in Android Chrome enables sandbox escape RCE pre-154.0.8037.92 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome V8 type confusion allowed sandbox RCE via crafted HTML before 154.0.8037.92 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome pre-154.0.8037.92 Picture-in-Picture use-after-free enabling renderer sandbox escape, RCE | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome V8 type confusion enables sandboxed RCE via crafted HTML before 154.0.8037.92 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome V8 type confusion enables sandbox RCE via crafted HTML pre-154.0.8037.92 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Windows Mojo privilege mismanagement allows local sandbox escape and arbitrary code execution | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome V8 buffer overflow before 154.0.8037.92 allows sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Google Chrome pre-154 GPU out-of-bounds write enables sandbox escape and RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | V8 type confusion allows sandboxed RCE in Chrome before 154.0.8037.92 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | cgroup css_task_iter may resurrect zero-refcount dying tasks, causing use-after-free race | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Btrfs use-after-free via double transaction end after RAID stripe extent allocation failure | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | bcmasp: stale txcb->last on descriptor reuse frees SKB mid-transmit | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | mlxsw spectrum_ptp: napi_gro_receive() called from GC workqueue causes concurrent GRO list corruption, panic | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | OpenSSL 4.0 X.509 extension cache race causes use-after-free, DoS in multithreaded TLS | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Chrome: WebRTC buffer overflow enables remote sandboxed code execution via crafted HTML (pre-154.0.8037.97) | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | V8 type confusion in Chrome <154.0.8037.97 enables remote sandboxed RCE via crafted HTML | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Chrome Windows pre-154.0.8037.97: UAF in Contextual Tasks enables sandbox escape RCE | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Chrome MediaStream use-after-free enables remote code execution in sandbox (pre-154.0.8037.97) | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Use-after-free in Chrome SVG <154.0.8037.97 enables sandboxed RCE via crafted HTML | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | PyJWT PyJWKSet fails on malformed RSA JWK, causing authentication failures/DoS before 2.14.0 | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | PyJWT 2.13.x HMAC key guard flaw accepts public JWK, allowing token forgery | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | PyJWT 2.13.0-2.14.0 BOM JWK parsing flaw enables HMAC misuse, token forgery | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | PyJWT 2.4.0–2.13.x: DER public key accepted as HMAC secret enables JWT forgery | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | PyJWT pre-2.14.0: unknown kid forces JWKS refresh, enabling outbound request amplification | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Mixed-case URL schemes bypass Hugo security.http.urls IP-literal deny in v0.162–0.165 | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Hugo v0.123.1–v0.165.x: symlinked mount roots expose external files via themes/modules | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Hugo v0.161–0.165 Node permission symlink bypass allows reading files outside project mounts | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Chrome <155.0.8059.39 Fonts race condition enables sandbox escape RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome Media use-after-free <155.0.8059.39 enables sandboxed RCE via crafted HTML page | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Use-after-free in Chrome PDF pre-155.0.8059.39 enables sandboxed RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome macOS <155.0.8059.39 Core race enables sandbox escape RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome <155.0.8059.39 Parser use-after-free enables sandboxed RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Incorrect reference resolution in WebAppInstalls enables sandbox-escape RCE on Mac Chrome pre-155.0.8059.39 | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome <155.0.8059.39 Storage use-after-free enables sandbox escape RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Use-after-free in Chrome Media (<155.0.8059.39) enables sandboxed RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome Mac sandbox privilege escalation enables renderer-compromised code execution outside sandbox pre-155.0.8059.39 | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome pre-155.0.8059.39 Fonts race lets compromised renderer execute code outside sandbox via HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Type confusion in Chrome V8 <155.0.8059.39 enables sandboxed RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome Windows Fonts use-after-free enables sandboxed RCE via crafted HTML pre-155.0.8059.39 | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome Android <155.0.8059.39: Transactions Platform auth bug exposes sensitive data via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Use-after-free in Chrome Media pre-155.0.8059.39 enables sandboxed RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 |