← All tracked CVEs
Updated 19:01
High severity
High15d SLAWe fix a high vulnerability within 15 days of publication, under our service-level agreement (SLA). We track 788 CVEs here: in progress, or fixed in the last 30 days.
| CVE | Status | Summary | Distribution | Fixed |
|---|---|---|---|---|
| Fixed | Use-after-free in Chrome DOM pre-153.0.8010.47 allows sandboxed RCE via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Chrome WebUI authorization flaw pre-153.0.8010.47 allows renderer-compromised RCE outside sandbox via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Google Chrome Windows pre-153.0.8010.47 Core auth bug enables local sandbox escape arbitrary code execution | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Chrome <153.0.8010.47 Skia validation bug enables compromised renderer to read outside sandbox | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | High severity Chrome pre-153.0.8010.47 Compositing type confusion allows remote sandboxed code execution via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Mac Chrome Extensions ref resolution bug enables sandbox escape RCE pre-153.0.8010.47 | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Chrome Input UAF pre-153.0.8010.47 enables RCE outside sandbox from compromised renderer | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Chrome Input use-after-free before 153.0.8010.47 allows remote code execution outside sandbox | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Chrome Internals use-after-free pre-153.0.8010.47 allows RCE outside sandbox via HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Chrome ServiceWorker type confusion enables remote sandbox RCE via crafted HTML (pre-153.0.8010.47) | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Mac Chrome <153.0.8010.47 Extensions race allows code execution outside sandbox via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Out-of-bounds write in Chrome ServiceWorker enables sandbox RCE via crafted HTML (<153.0.8010.47) | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Chrome ServiceWorker type confusion pre-153.0.8010.47 enables remote sandbox RCE via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Race condition in Chrome macOS Extensions pre-153.0.8010.47 enables sandbox escape via UI interaction | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Chrome V8 use-after-free pre-153.0.8010.47 enables sandboxed remote code execution via HTML | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Chrome before 153.0.8010.47 Core race condition enables sandbox-escape RCE via crafted HTML | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Type confusion in Chrome CacheStorage allows sandbox RCE via crafted HTML (pre-153.0.8010.47) | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Use-after-free in Chrome PDF allows sandboxed RCE via crafted HTML pre-153.0.8010.47 | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Use-after-free in Chrome DOM before 153.0.8010.47 allows sandboxed RCE via crafted HTML | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Chrome <153.0.8010.47 WebUI auth flaw enables RCE outside sandbox from compromised renderer | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Windows Chrome Core auth bug pre-153.0.8010.47 allows local sandbox escape code execution | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Chrome Skia state validation bug allows reading outside sandbox via crafted HTML (pre-153.0.8010.47) | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Type confusion in Chrome Compositing allows sandboxed RCE via crafted HTML (pre-153.0.8010.47) | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Incorrect Extensions reference resolution in Chrome for Mac pre-153.0.8010.47 enables sandbox RCE | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Chrome Input use-after-free enables renderer-compromise sandbox escape RCE via crafted HTML (pre-153.0.8010.47) | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Chrome Input use-after-free enables remote code execution outside sandbox via crafted HTML prior to 153.0.8010.47 | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Critical use-after-free in Chrome Internals pre-153.0.8010.47 enables sandbox-escape RCE via crafted HTML | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | ServiceWorker type confusion permits sandboxed code execution via crafted HTML in Chrome <153.0.8010.47 | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Google Chrome Mac Extensions race condition enables sandbox escape and RCE pre-153.0.8010.47 | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Chrome ServiceWorker out-of-bounds write before 153.0.8010.47 allows sandboxed RCE via crafted HTML | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Chrome ServiceWorker type confusion allowed sandboxed RCE via crafted HTML (pre-153.0.8010.47) | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | GitPython <3.1.60 ReDoS via Actor.name_email_regex on malformed commit author fields causing CPU exhaustion | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | GitPython 3.1.59 diff API allows --no-index Boolean oracle, arbitrary file disclosure | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | GitPython <3.1.60 git directory impersonation enables pre-commit hook RCE via tracked files | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | GitPython <3.1.59 arbitrary file read via Repo.blame() missing --contents/-S denylist | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | GitPython <3.1.59: separate_git_dir allows arbitrary git directory creation and hook execution | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | GitPython before 3.1.59 discloses local files via malicious .gitmodules include directives | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | PYSEC-2026-2293: ujson.dump memory leak on failed file-like object writes prior to 5.12.1 | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | GHSA-c38f-wx89-p2xg: ujson.dump memory leak when write() fails due to missing Py_DECREF of serialized string | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | libcurl LDAP SASL negotiation flaw misinterprets incomplete handshake, enabling MITM peer validation bypass | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | PYSEC-2026-3699: sqlparse CPU DoS via O(n*depth) TokenList.__init__ flattening on nested groups | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | PYSEC-2026-3698: sqlparse ReDoS: dollar-quoted backreference and multiline comments cause quadratic CPU exhaustion | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | PYSEC-2026-3697: Quadratic parsing of comment-only SQL in sqlparse group_comments enables DoS; token cap bypassed | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | PYSEC-2026-3072: Soupsieve CSS parser ReDoS via catastrophic backtracking on unterminated quoted attribute values | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | PYSEC-2026-3071: Unbounded memory allocation in soupsieve compiling large comma-separated CSS selector lists (DoS) | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | PYSEC-2026-2292: ujson 5.10–5.11.0 indent overflow/underflow triggers crash or infinite loop DoS | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | PYSEC-2026-2291: ujson 5.4.0–5.11.0 memory leak parsing large integers enables DoS on untrusted input | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | PYSEC-2026-142: urllib3 2.6.x partial reads may fully decompress responses, causing high CPU/memory use | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | GHSA-wgvc-ghv9-3pmm: ujson 5.4–5.11 accumulating memory leak parsing large integers permits DoS | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | GHSA-qccp-gfcp-xxvc: urllib3 <2.7.0 ProxyManager-created HTTPConnection cross-origin redirects forward Authorization/Cookie/Proxy-Authorization headers | secure-packages-26.05 | Sep 18, 2026 |