Skip to content
← All tracked CVEs

Updated 06:00

High severity

High15d SLA

Our service-level agreement (SLA) gives a high vulnerability a fix within 15 days of publication. 416 CVEs are tracked here: open, or fixed in the last 30 days.

Status
CVEStatusSummaryReleaseClock startedDeadlineFixedTime to fix
Fixed within SLAChrome pre-151.0.7922.109 Contextual Tasks input validation flaw allows remote privilege escalation via crafted HTMLsecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAChrome V8 sandbox arbitrary code execution via crafted HTML pre-151.0.7922.109secure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAUse-after-free in Chrome Extensions pre-151.0.7922.109 enables sandboxed arbitrary code executionsecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAChrome Windows pre-151.0.7922.109 Media use-after-free enables sandbox escape via crafted HTMLsecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAChrome V8 out-of-bounds write before 151.0.7922.109 enables sandboxed RCE via crafted HTMLsecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAChrome Views use-after-free enables remote heap corruption via crafted HTML requiring user gestures before 151.0.7922.109secure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAChrome Views use-after-free on Windows <151.0.7922.109 allows heap corruption via HTML and UI gesturessecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAChrome Base heap buffer overflow pre-151.0.7922.109 via crafted malicious extensionsecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAUse-after-free in Chrome Payments enables sandbox escape via crafted HTML (pre-151.0.7922.109)secure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLASkia use-after-free in Chrome for Android pre-151.0.7922.109 enables sandbox escape via crafted HTMLsecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAGoogle Chrome Workers input validation flaw allows site isolation bypass before 151.0.7922.109secure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAChrome <151.0.7922.109 Navigation policy flaw allows renderer sandbox escape via crafted HTMLsecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAChrome V8 use-after-free enables sandboxed RCE via crafted HTML pre-151.0.7922.109secure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAV8 inappropriate implementation allows remote sandboxed RCE via crafted HTML in Chrome <151.0.7922.109secure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAChrome Linux GPU out-of-bounds write allows sandbox escape via crafted HTML pre-151.0.7922.109 High severitysecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAChrome Translate use-after-free enables sandbox RCE via crafted HTML (pre-151.0.7922.109)secure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAAndroid Chrome <151 WebAPKs: input validation flaw enables local sandbox escape via malicious filesecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAChrome Android <151.0.7922.109 use-after-free in Resources enables sandbox escape via crafted HTMLsecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAChrome <151.0.7922.109 GPU use-after-free enables sandbox escape via crafted HTMLsecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLARace in Chrome Windows CredentialProvider pre-151.0.7922.109 enables local privilege escalation via malicious filesecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAChrome pre-151.0.7922.109 CrashReporting heap overflow allows sandbox escape from compromised renderersecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLACritical Chrome Android WebGL use-after-free enables sandbox escape after renderer compromise (pre-151.0.7922.109)secure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAInsufficient UI input validation in Chrome <151.0.7922.109 enables renderer sandbox escape via crafted HTML pagesecure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLASkia use-after-free in Chrome <151.0.7922.109 enables renderer RCE via crafted HTMLsecure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAV8 integer overflow enables sandboxed remote code execution via crafted HTML in Chrome <151.0.7922.109secure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAOut-of-bounds write in Chrome Skia pre-151.0.7922.109 enables sandbox escape via crafted HTMLsecure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLACritical use-after-free in Chrome Views enables sandbox escape from compromised renderer via crafted HTML.secure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAInsufficient validation in Chrome Contextual Tasks allows remote privilege escalation via crafted HTMLsecure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAChrome V8 <151.0.7922.109 allows remote sandboxed RCE via crafted HTMLsecure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAChrome Extensions UAF pre-151.0.7922.109 enables sandbox arbitrary code via malicious extensionsecure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAUse-after-free in Chrome Media on Windows pre-151.0.7922.109 enables renderer sandbox escape via crafted HTMLsecure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAChrome V8 out-of-bounds write allows sandboxed RCE via crafted HTML pre-151.0.7922.109secure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAUse-after-free in Google Chrome Views pre-151.0.7922.109 allows heap corruption via crafted HTML, user gesturessecure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAChrome Windows Views use-after-free pre-151.0.7922.109 allows remote heap corruption exploit via crafted HTML and gesturessecure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAHigh severity Chrome Base heap buffer overflow pre-151.0.7922.109 via malicious extensionsecure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAUse-after-free in Google Chrome Payments enables sandbox escape via crafted HTML from compromised renderer pre-151.0.7922.109secure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLACritical Skia use-after-free enables renderer sandbox escape in Chrome Android <151.0.7922.109secure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAChrome Workers input validation flaw enables site isolation bypass after renderer compromisesecure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAChrome pre-151.0.7922.109 navigation policy flaw enables sandbox escape from compromised renderersecure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAV8 use-after-free enables sandboxed RCE in Chrome <151.0.7922.109 via crafted HTMLsecure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAGoogle Chrome V8 pre-151.0.7922.109 allows remote sandboxed RCE via crafted HTML (High severity)secure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAChrome Linux GPU OOB write enables sandbox escape via crafted HTML pre-151.0.7922.109secure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAGoogle Chrome Translate use-after-free allows sandbox RCE via crafted HTML pre-151.0.7922.109secure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAChrome Android WebAPKs insufficient input validation enables local sandbox escape via malicious filesecure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAUse-after-free in Chrome Android Resources pre-151.0.7922.109 enables sandbox escape via crafted HTMLsecure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAPre-151.0.7922.109 Chrome GPU use-after-free enables sandbox escape via crafted HTML from compromised renderersecure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAGoogle Chrome Windows CredentialProvider race enables local privilege escalation via malicious file pre-151.0.7922.109secure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAPre-151.0.7922.109 Chrome CrashReporting heap overflow enables sandbox escape via crafted HTMLsecure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLACritical WebGL use-after-free enables sandbox escape in Android Chrome <151.0.7922.109secure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAGoogle Chrome UI input validation flaw enables sandbox escape post-renderer compromise, pre-151.0.7922.109secure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day