Skip to content
← All tracked CVEs

Updated 18:00

High severity

High15d SLA

We fix a high vulnerability within 15 days of publication, under our service-level agreement (SLA). We track 788 CVEs here: in progress, or fixed in the last 30 days.

Status
CVEStatusSummaryDistributionFixed
FixedHigh-severity use-after-free in PDFium enables sandboxed RCE via crafted HTML in Chrome <153.0.8010.52secure-packages-26.05Sep 22, 2026
FixedChrome Windows PDFium buffer overflow pre-153.0.8010.52 enables remote sandboxed code execution via crafted PDFsecure-packages-26.05Sep 22, 2026
FixedChrome <153.0.8010.52 V8 type confusion allows sandboxed RCE via crafted HTMLsecure-packages-26.05Sep 22, 2026
FixedPre-153.0.8010.52 Chrome Windows Tracing reference resolution bug enables local sandbox escape, arbitrary codesecure-packages-26.05Sep 22, 2026
FixedChrome <153.0.8010.52 PDFium use-after-free allows sandboxed RCE via crafted HTMLsecure-packages-25.11Sep 22, 2026
FixedChrome Windows <153.0.8010.52: PDFium buffer overflow enables sandboxed RCE via crafted PDFsecure-packages-25.11Sep 22, 2026
FixedChrome V8 type confusion pre-153.0.8010.52 enables sandboxed RCE via crafted HTMLsecure-packages-25.11Sep 22, 2026
FixedChrome Windows Tracing reference resolution bug allows local sandbox escape, arbitrary code execution pre-153.0.8010.52secure-packages-25.11Sep 22, 2026
FixedPYSEC-2026-2121: Black <26.3.1 arbitrary cache file writes via unsanitized --python-cell-magics inputsecure-packages-26.05Sep 21, 2026
FixedGHSA-3936-cmfr-pm3m: Black cache filename injection via --python-cell-magics enables arbitrary filesystem writesecure-packages-26.05Sep 21, 2026
FixedBlack pre-26.3.1 unsanitized --python-cell-magics in cache filename enables arbitrary filesystem writessecure-packages-26.05Sep 21, 2026
FixedValkey clusterbus ping extension OOB read crash vulnerability before 9.0.2/8.1.6/8.0.7/7.2.12secure-packages-26.05Sep 21, 2026
FixedValkey Lua script null-byte mishandling enables client response injection and same-connection data tamperingsecure-packages-26.05Sep 21, 2026
Fixedlibcurl with libpsl leaks public-suffix Domain cookies to sibling subdomainssecure-packages-rollingSep 19, 2026
Fixedlibcurl wolfSSL CA cache overrides CURLOPT_SSL_CTX_FUNCTION trust store, accepting rejected certificatessecure-packages-rollingSep 19, 2026
Fixedcurl drops Secure flag when Set-Cookie uses tab before Secure attribute, causing plaintext HTTP leaksecure-packages-rollingSep 19, 2026
Fixedlibcurl wrongly reuses HTTPS connection when CURLSSLOPT_NATIVE_CA differs for same hostnamesecure-packages-rollingSep 19, 2026
Fixedlibcurl bypasses CURLOPT_PINNEDPUBLICKEY when SSL_VERIFYPEER/SSL_VERIFYHOST disabled, accepts connections without server certificatesecure-packages-rollingSep 19, 2026
Fixedlibcurl multi TLS pooling outlives easy handle; OpenSSL 3 context freed early causing UAFsecure-packages-rollingSep 19, 2026
Fixedlibcurl LDAP SASL handshake flaw allows MITM to bypass verification via premature response injectionsecure-packages-rollingSep 19, 2026
Fixedrmmod breaks netfilter x_tables table re-instantiation during set/getsockopt due to premature unlinkingsecure-packages-25.11Sep 19, 2026
Fixedksmbd caseless lookup retries on -EXDEV, bypassing LOOKUP_BENEATH and enabling share escapesecure-packages-25.11Sep 18, 2026
Fixedksmbd updates session key on failed NTLMv2 auth during SMB3 multichannel bindingsecure-packages-25.11Sep 18, 2026
FixedSMB3 POSIX mounts ignore chown/chgrp unless CIFS ACL or MODE_FROM_SID flags setsecure-packages-25.11Sep 18, 2026
FixedOffloaded BPF map/prog info query triggers UAF via get_net during netns teardownsecure-packages-25.11Sep 18, 2026
Fixedsecure-packages-25.11Sep 18, 2026
Fixedsecure-packages-25.11Sep 18, 2026
FixedChrome Mac Extensions race condition pre-153.0.8010.47 enables sandbox escape via UI interactionsecure-packages-25.11Sep 18, 2026
FixedV8 use-after-free in Chrome <153.0.8010.47 enables sandboxed RCE via crafted HTMLsecure-packages-25.11Sep 18, 2026
FixedChrome pre-153 Core race bug enables post-renderer sandbox escape RCE via crafted HTMLsecure-packages-25.11Sep 18, 2026
FixedChrome CacheStorage type confusion enables sandboxed RCE via crafted HTML (prior to 153.0.8010.47)secure-packages-25.11Sep 18, 2026
FixedUse-after-free in Chrome PDF pre-153.0.8010.47 allows sandbox RCE via crafted HTMLsecure-packages-25.11Sep 18, 2026
FixedChrome DOM use-after-free enables remote sandboxed arbitrary code execution via crafted HTML pre-153.0.8010.47secure-packages-25.11Sep 18, 2026
FixedChrome <153.0.8010.47 WebUI auth flaw enabled RCE outside sandbox from compromised renderersecure-packages-25.11Sep 18, 2026
FixedIncorrect Core authorization in Chrome Windows pre-153.0.8010.47 enables local sandbox escape, arbitrary codesecure-packages-25.11Sep 18, 2026
FixedSkia state validation bug in Chrome <153.0.8010.47 enables out-of-sandbox memory read via HTMLsecure-packages-25.11Sep 18, 2026
FixedChrome Compositing type confusion allowed sandboxed RCE via crafted HTML before 153.0.8010.47secure-packages-25.11Sep 18, 2026
FixedChrome Mac <153.0.8010.47 Extensions ref resolution bug allows renderer sandbox escape code executionsecure-packages-25.11Sep 18, 2026
FixedChrome Input use-after-free enables sandbox escape RCE via crafted HTML (pre-153.0.8010.47)secure-packages-25.11Sep 18, 2026
FixedUse-after-free in Chrome Input before 153.0.8010.47 enables remote code execution outside sandboxsecure-packages-25.11Sep 18, 2026
FixedUse-after-free in Chrome Internals before 153.0.8010.47 enables remote RCE outside sandbox via crafted HTMLsecure-packages-25.11Sep 18, 2026
FixedChrome <153.0.8010.47 ServiceWorker type confusion allows sandboxed remote code execution via crafted HTMLsecure-packages-25.11Sep 18, 2026
FixedPre-153.0.8010.47 Chrome Mac Extensions race condition allows RCE outside sandbox via crafted HTMLsecure-packages-25.11Sep 18, 2026
FixedOut-of-bounds write in Chrome ServiceWorker <153.0.8010.47 allows sandboxed remote code executionsecure-packages-25.11Sep 18, 2026
FixedPre-153.0.8010.47 Chrome ServiceWorker type confusion allows sandboxed RCE via crafted HTMLsecure-packages-25.11Sep 18, 2026
FixedChrome Mac <153.0.8010.47 Extensions race condition enables code execution outside sandbox via UI interactionsecure-packages-rollingSep 18, 2026
FixedV8 use-after-free enables sandbox RCE via crafted HTML in Chrome <153.0.8010.47secure-packages-rollingSep 18, 2026
FixedChrome <153.0.8010.47 Core race condition allows sandbox escape and RCE via crafted HTMLsecure-packages-rollingSep 18, 2026
FixedChrome CacheStorage type confusion <153.0.8010.47 enables remote sandboxed code execution via HTMLsecure-packages-rollingSep 18, 2026
FixedUse-after-free in Chrome PDF enables sandboxed RCE via crafted HTML pre-153.0.8010.47secure-packages-rollingSep 18, 2026

Contact sales

Provide us with some basic details and we'll follow up with you about , usually within one business day.

We'll only use this to get back to you. See our privacy policy (opens in a new tab). This site is protected by reCAPTCHA and the Google Privacy Policy (opens in a new tab) and Terms of Service (opens in a new tab) apply.