← All tracked CVEs
Updated 15:00
High severity
High15d SLAWe fix a high vulnerability within 15 days of publication, under our service-level agreement (SLA). We track 788 CVEs here: in progress, or fixed in the last 30 days.
| CVE | Status | Summary | Distribution | Fixed |
|---|---|---|---|---|
| Fixed | Chrome Media use-after-free allows sandbox remote code execution via crafted HTML (pre-155.0.8059.39) | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Use-after-free in Chrome Modularization before 155.0.8059.39 allows sandbox RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome <155.0.8059.39 Bluetooth authorization bug leaks data via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome iOS pre-155 Selection authorization flaw exposes sensitive data via crafted HTML (Low severity) | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Android Chrome Autofill reference resolution bug leaks sensitive data via crafted HTML (pre-155.0.8059.39) | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | ANGLE type confusion in Chrome <155.0.8059.39 enables sandbox escape RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Buffer overflow in Chrome Fonts pre-155.0.8059.39 allows renderer sandbox escape RCE via crafted HTML page | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome <155.0.8059.39 GarbageCollection use-after-free allows sandboxed RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome Streaming use-after-free allows remote sandboxed RCE via crafted HTML (pre-155.0.8059.39) | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Pre-155 iOS Chrome Passwords reference-resolution flaw enables sandbox escape arbitrary code execution from compromised renderer | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome <155.0.8059.39 Select use-after-free enables sandboxed RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome <155.0.8059.39 CSS use-after-free allows remote sandboxed code execution via HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | WebRTC use-after-free in Chrome <155.0.8059.39 enables sandbox RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Google Chrome HTML use-after-free allows sandboxed RCE via crafted page (pre-155.0.8059.39) | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Remote info leak in Chrome Android Passwords <155.0.8059.39 via crafted HTML social engineering | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome V8 race condition before 155.0.8059.39 enables sandboxed code execution via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome <155.0.8059.39 Fonts comparison bug enables sandboxed RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome Android Autofill auth flaw exposes sensitive data via crafted HTML pre-155.0.8059.39 | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome <155.0.8059.39 Bindings use-after-free enables sandbox RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome ANGLE buffer overflow before 155.0.8059.39 enables code execution outside sandbox via HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High-severity V8 type confusion in Chrome <155.0.8059.39 enables remote sandboxed RCE | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome Fonts race condition pre-155.0.8059.39 enables sandbox escape RCE from compromised renderer | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Use-after-free in Chrome WebAudio enables sandboxed RCE via crafted HTML (pre-155.0.8059.39) | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Use-after-free in Chrome Metrics <155.0.8059.39 allows sandbox escape RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome Lens confused deputy enables post-renderer RCE outside sandbox pre-155.0.8059.39 | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome Autofill <155.0.8059.39 missing authorization enables social-engineered data theft via crafted HTML page | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome Android <155 WebAPKs confused deputy enables web origin policy bypass via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome Passwords sensitive data leak before 155.0.8059.39 via crafted HTML page | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High-severity Chrome WebRTC buffer overflow allows sandboxed RCE via crafted HTML (pre-154.0.8037.97) | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome V8 type confusion allows sandbox RCE via crafted HTML, high severity (pre-154.0.8037.97) | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome Windows pre-154.0.8037.97 UAF in Contextual Tasks enables RCE outside sandbox | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Use-after-free in Chrome MediaStream before 154.0.8037.97 allows sandboxed remote code execution via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Chrome <154.0.8037.97 SVG use-after-free enables sandboxed RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | PYSEC-2026-3808: AsyncSSH SCP client path traversal (CVE-2019-6111 class) allows arbitrary file overwrite and RCE | secure-packages-26.05 | Oct 7, 2026 | |
| Fixed | GHSA-2wxc-x7rj-hg8f: asyncssh SCP client path traversal allows arbitrary file writes and RCE via malicious server | secure-packages-26.05 | Oct 7, 2026 | |
| Fixed | AsyncSSH SCP directory traversal lets malicious server write arbitrary files on client (pre-2.23.1) | secure-packages-26.05 | Oct 7, 2026 | |
| Fixed | pgvector <0.8.6 IVFFlat index build integer wraparound enables OOB write, 32-bit RCE | secure-packages-26.05 | Oct 7, 2026 | |
| Fixed | Graphviz lib/common/shapes.c buffer overflow allows RCE and DoS via crafted file (<= f8b9e035) | secure-packages-26.05 | Oct 7, 2026 | |
| Fixed | Format string vulnerability in Graphviz lib/cgraph/scan.l yyerror permits remote exploitation | secure-packages-26.05 | Oct 7, 2026 | |
| Fixed | Graphviz 2.20.2 push_subg stack overflow via DOT with many Agraph_t enabling RCE/DoS | secure-packages-26.05 | Oct 7, 2026 | |
| Fixed | PYSEC-2026-4054: 500 error header logging exposes tokens from Referer in jupyter_server before 2.21.0 | secure-packages-26.05 | Oct 7, 2026 | |
| Fixed | PYSEC-2026-2384: AsyncSSH 2.22.0 AuthorizedKeysFile %u path traversal enables unauthorized SSH auth via username | secure-packages-26.05 | Oct 7, 2026 | |
| Fixed | PYSEC-2026-160: twisted.names DoS via DNS decompression pointer chain hangs reactor (pre-26.4.0rc2) | secure-packages-26.05 | Oct 7, 2026 | |
| Fixed | GHSA-w466-c33r-3gjp: pnpm auto-switch trusts committed env lockfile, enabling malicious package-manager code execution | secure-packages-26.05 | Oct 7, 2026 | |
| Fixed | GHSA-vx52-2968-3vc6: pnpm expands env vars in proxy settings from untrusted pnpm-workspace.yaml, leaking secrets | secure-packages-26.05 | Oct 7, 2026 | |
| Fixed | GHSA-vq4v-j7r6-jq4m: pnpm isolated-linker path traversal via scoped manifest name enables arbitrary file overwrite | secure-packages-26.05 | Oct 7, 2026 | |
| Fixed | GHSA-qrv3-253h-g69c: Malicious pnpm-lock.yaml configDependencies enables symlink path traversal outside node_modules/.pnpm-config | secure-packages-26.05 | Oct 7, 2026 | |
| Fixed | GHSA-gj8w-mvpf-x27x: pnpm executes registry-selected native pacquet from repository configDependencies without trust enforcement | secure-packages-26.05 | Oct 7, 2026 | |
| Fixed | GHSA-g794-3fmp-753h: AsyncSSH AuthorizedKeysFile %u path traversal enables SSH public-key authentication bypass | secure-packages-26.05 | Oct 7, 2026 | |
| Fixed | GHSA-fr4h-3cph-29xv: GHSA-fr4h-3cph-29xv crafted hoisted alias escapes node_modules and overwrites layout in pnpm/pacquet | secure-packages-26.05 | Oct 7, 2026 |