Skip to content
← All tracked CVEs

Updated 07:00

High severity

High15d SLA

Our service-level agreement (SLA) gives a high vulnerability a fix within 15 days of publication. 416 CVEs are tracked here: open, or fixed in the last 30 days.

Status
CVEStatusSummaryReleaseClock startedDeadlineFixedTime to fix
Fixed within SLASkia use-after-free in Chrome <151.0.7922.109 allows sandboxed RCE via crafted HTMLsecure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAChrome V8 integer overflow allows sandbox RCE via crafted HTML pre-151.0.7922.109secure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLASkia OOB write in Chrome <151.0.7922.109 enables sandbox escape via crafted HTMLsecure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLACritical Chrome Views use-after-free enables sandbox escape via crafted HTML (pre-151.0.7922.109)secure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAChrome <151.0.7922.109 Contextual Tasks input validation flaw allows remote privilege escalation via crafted HTMLsecure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAV8 vulnerability allows sandbox RCE via crafted HTML in Chrome <151.0.7922.109secure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAUse-after-free in Chrome Extensions allows sandboxed code execution via crafted extension pre-151.0.7922.109secure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAGoogle Chrome Windows Media use-after-free enables sandbox escape via crafted HTML (pre-151.0.7922.109)secure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAOut-of-bounds write in Chrome V8 pre-151.0.7922.109 allows sandbox RCE via HTMLsecure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAUse-after-free in Chrome Views before 151.0.7922.109 enables remote heap corruption via crafted HTML, UI gesturessecure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAWindows Chrome pre-151.0.7922.109 Views use-after-free allows heap corruption via crafted HTMLsecure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAHigh-severity Google Chrome Base heap buffer overflow pre-151.0.7922.109 via malicious extensionsecure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAUse-after-free in Chrome Payments (<151.0.7922.109) enables sandbox escape from compromised renderersecure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLACritical use-after-free in Skia enables sandbox escape in Chrome Android <151.0.7922.109 via HTMLsecure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAPre-151.0.7922.109 Chrome Workers input validation flaw enabled site isolation bypass via crafted HTMLsecure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAInsufficient navigation policy in Chrome <151.0.7922.109 allows renderer sandbox escape via crafted HTMLsecure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAChrome V8 use-after-free enables sandboxed RCE via crafted HTML, high severity (pre-151.0.7922.109)secure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAV8 in Chrome <151.0.7922.109 allows sandboxed RCE via crafted HTML pagesecure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAChrome Linux GPU OOB write allows sandbox escape via crafted HTML (pre-151.0.7922.109)secure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAChrome <151.0.7922.109 Translate use-after-free allows sandboxed RCE via crafted HTMLsecure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAChrome Android WebAPK input validation flaw enables local sandbox escape via malicious filesecure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAChrome Android pre-151.0.7922.109 Resources use-after-free enables sandbox escape from compromised renderer via crafted HTML pagesecure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAChrome GPU use-after-free <151.0.7922.109 allows sandbox escape from compromised renderer via HTMLsecure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAWindows Chrome CredentialProvider race allows local privilege escalation via malicious file pre-151.0.7922.109secure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAChrome CrashReporting heap overflow enables sandbox escape with renderer compromise (pre-151.0.7922.109)secure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAWebGL use-after-free allows sandbox escape post-renderer-compromise in Chrome Android <151.0.7922.109secure-packages-rollingAug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAChrome <151.0.7922.72 Network input validation enables renderer sandbox escape via crafted HTMLsecure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAHigh-severity V8 use-after-free allows remote sandboxed code execution via crafted HTML in Chrome <151.0.7922.72secure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAChrome Navigation use-after-free pre-151.0.7922.72 allows sandbox escape via crafted HTMLsecure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLARace condition in Chrome Updater on Mac enabled local OS-level privilege escalation pre-151.0.7922.72secure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLACritical Skia use-after-free enables sandbox escape after renderer compromise via crafted HTML, Chrome <151.0.7922.72secure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAGoogle Chrome Compositing use after free enables sandbox escape from compromised renderer before 151.0.7922.72secure-packages-25.11Aug 10, 2026Aug 25, 2026Aug 11, 20261 day
Fixed within SLAGoogle Chrome Linux pre-151.0.7922.72 Views use-after-free enables remote heap corruption via crafted HTMLsecure-packages-rollingAug 5, 2026Aug 20, 2026Aug 11, 20266 days
Fixed within SLAInsufficient DevTools input validation enables privilege escalation via malicious Chrome extension (pre-151.0.7922.72)secure-packages-rollingAug 5, 2026Aug 20, 2026Aug 11, 20266 days
Fixed within SLAChrome Mac Audio use-after-free permits sandbox escape after renderer compromise via crafted HTML (pre-151.0.7922.72)secure-packages-rollingAug 5, 2026Aug 20, 2026Aug 11, 20266 days
Fixed within SLAPre-151.0.7922.72 Chrome Variations input validation flaw enables heap corruption via privileged network attackersecure-packages-rollingAug 5, 2026Aug 20, 2026Aug 11, 20266 days
Fixed within SLAInsufficient input validation in Chrome Network enables sandbox escape via crafted HTML (pre-151.0.7922.72)secure-packages-rollingAug 7, 2026Aug 22, 2026Aug 11, 20264 days
Fixed within SLAV8 use-after-free in Chrome <151.0.7922.72 allows sandboxed remote code execution via crafted HTML pagesecure-packages-rollingAug 7, 2026Aug 22, 2026Aug 11, 20264 days
Fixed within SLAChrome Navigation use-after-free allowed sandbox escape via crafted HTML (pre-151.0.7922.72)secure-packages-rollingAug 7, 2026Aug 22, 2026Aug 11, 20264 days
Fixed within SLACritical race in Chrome Updater on Mac pre-151.0.7922.72 enables local privilege escalationsecure-packages-rollingAug 7, 2026Aug 22, 2026Aug 11, 20264 days
Fixed within SLACritical Skia use-after-free in Google Chrome <151.0.7922.72 enables sandbox escape via crafted HTMLsecure-packages-rollingAug 7, 2026Aug 22, 2026Aug 11, 20264 days
Fixed within SLAChrome Compositing use-after-free pre-151.0.7922.72 enables sandbox escape via crafted HTMLsecure-packages-rollingAug 7, 2026Aug 22, 2026Aug 11, 20264 days
Fixed within SLAChrome Linux Views use-after-free allows remote heap corruption via crafted HTML, prior to 151.0.7922.72secure-packages-26.05Aug 5, 2026Aug 20, 2026Aug 11, 20266 days
Fixed within SLAInsufficient DevTools input validation in Chrome allows privilege escalation via crafted extension (<151.0.7922.72)secure-packages-26.05Aug 5, 2026Aug 20, 2026Aug 11, 20266 days
Fixed within SLAChrome Mac Audio use-after-free enables sandbox escape pre-151.0.7922.72 via crafted HTMLsecure-packages-26.05Aug 5, 2026Aug 20, 2026Aug 11, 20266 days
Fixed within SLAInsufficient input validation in Chrome Variations pre-151.0.7922.72 allows heap corruption by privileged network attackersecure-packages-26.05Aug 5, 2026Aug 20, 2026Aug 11, 20266 days
Fixed within SLAChrome Network input validation flaw enables sandbox escape from compromised renderer via HTMLsecure-packages-26.05Aug 7, 2026Aug 22, 2026Aug 11, 20264 days
Fixed within SLAHigh severity V8 use-after-free enables sandboxed RCE via crafted HTML in Chrome <151.0.7922.72secure-packages-26.05Aug 7, 2026Aug 22, 2026Aug 11, 20264 days
Fixed within SLAChrome <151.0.7922.72 Navigation use-after-free enables sandbox escape via crafted HTMLsecure-packages-26.05Aug 7, 2026Aug 22, 2026Aug 11, 20264 days
Fixed within SLARace in macOS Chrome Updater allows local privilege escalation before 151.0.7922.72 via malicious filesecure-packages-26.05Aug 7, 2026Aug 22, 2026Aug 11, 20264 days