← All tracked CVEs
Updated 07:01
Medium severity
Medium45d SLAWe fix a medium vulnerability within 45 days of publication, under our service-level agreement (SLA). We track 889 CVEs here: in progress, or fixed in the last 30 days.
| CVE | Status | Summary | Distribution | Fixed |
|---|---|---|---|---|
| Fixed | Chrome <155.0.8059.39 Permissions auth flaw enables remote system access bypass via crafted network traffic | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome pre-155.0.8059.39 proxy auth cleanup flaw leaks data to adjacent attacker via crafted traffic | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Information leak in Android Chrome Omnibox pre-155.0.8059.39 via crafted network traffic, social engineering | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chromoting UI misrepresentation allows UI spoofing via crafted traffic on Windows Chrome <155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome <155.0.8059.39 UI misrepresentation allows remote UI spoofing via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Mac Chrome <155.0.8059.39 Dawn uninitialized resource allows crafted HTML to read memory outside sandbox | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Offline reference resolution info leak in Android Chrome <155.0.8059.39 with renderer compromise | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome FileSystem UI misrepresentation allows social-engineering system access restriction bypass pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome pre-155.0.8059.39 Compositing validation bug enables address bar spoof after renderer compromise | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Uninitialized GPU resource allows remote out-of-sandbox memory read in Chrome Android <155.0.8059.39 via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Incorrect authorization in Google Chrome Sync before 155.0.8059.39 allows data exfiltration via crafted traffic | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Google Lens missing authorization enabled compromised renderer to leak cross-origin data via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Windows ANGLE uninitialized resource allows remote memory read outside sandbox pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Google Chrome Windows Proxy sensitive data leak via crafted traffic by adjacent attacker (pre-155.0.8059.39) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Hugo code fence attribute values not escaped, enabling XSS via info string under default config | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Skia integer overflow in Chrome <154.0.8037.97 enables cross-origin data leak via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | SVG information leak in Chrome <154.0.8037.97 enables remote sensitive data exposure | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Integer overflow in Chrome Compositing leaks cross-origin data via crafted HTML (pre-154.0.8037.97) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Pre-154.0.8037.92 Chrome SiteIsolation auth flaw: compromised renderer bypasses web origin policy | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High-severity WebUI XSS in Chrome <154.0.8037.92 bypasses web origin to privileged page | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Skia uninitialized resource leaks cross-origin data in Chrome before 154.0.8037.92 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Missing CORS authorization in Chrome <154.0.8037.92 lets compromised renderer bypass origin policy | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | WebGL out-of-bounds read in Chrome prior to 154.0.8037.92 leaks sandbox memory via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome TabStrip UI misrepresentation allows spoofing via crafted HTML before 154.0.8037.92 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Pre-154.0.8037.92 Chrome Windows ANGLE uninitialized resource allows memory read outside sandbox via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Omnibox UI misrepresentation allows address bar spoofing via crafted HTML on Chrome for Android pre-154.0.8037.92 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | pre-154.0.8037.92 Chrome Payments missing auth lets compromised renderer bypass web origin via crafted HTML page | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Dawn uninitialized resource in Android Chrome <154.0.8037.92 allows sandbox memory read via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome iOS SignIn UI misrepresentation allows remote UI spoofing via crafted HTML before 154.0.8037.92 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Chrome Android pre-154.0.8037.92 GPU uninitialized resource enables cross-origin data leak via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | pmem_submit_bio records PREFLUSH error but overwritten by FUA, allowing writes post-failure | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | staging: rtl8723bs: kfree used on vzalloc-backed HalData in rtw_sdio_if1_init error path | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | nvmet-rdma leaks queues and IB resources when connect backlog exceeded by pending disconnects | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Bluetooth hci_core race: power_on before msft_register causes uninitialized MSFT filter_lock mutex use | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | btrfs bioc_list memory leak on btrfs_ordered_extent errors and skipped RAID insertion | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Btrfs qgroup snapshot accounting triggers reloc root, corrupts backrefs, flips filesystem read-only | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | BPF tp_btf dereferences signal_generate/signal_deliver siginfo 0/1 sentinels, panicking kernel | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | ASoC Intel avs: strace_open leaks module ref on subsequent failure after try_module_get | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Out-of-bounds init_configs access in ASoC Intel avs due to invalid ID indexing | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | bcmasp tx_spb_ring_full() checks same descriptor slot repeatedly due to next_index reset | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | GStreamer gst-plugins-good avidemux FUJIFILM strd underflow causes heap OOB read/write, info leak, crash | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Skia integer overflow in Chrome before 154.0.8037.97 enables cross-origin data exfiltration via crafted HTML | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Remote info disclosure via SVG in Chrome <154.0.8037.97 through crafted HTML | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Chrome pre-154.0.8037.97 Compositing integer overflow enables remote cross-origin data leak via crafted HTML | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | High-severity Chrome WebGPU uninitialized resource allowed cross-origin data exfiltration (pre-154.0.8037.92) | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | PyJWT <2.14.0 is_pem_format regex backtracking causes CPU DoS on malformed PEM input | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | PyJWT <2.14.0 signature decoding accepts non-Base64URL chars, causing equivalent-token revocation bypass | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | PyJWT 2.13.x: deeply nested token header triggers unhandled RecursionError, causing HTTP 500 | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Hugo text/org content renders unescaped HTML, enabling XSS in v0.56.0–v0.165.x | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Stored XSS in Hugo 0.75–0.165.x via unescaped lineAnchors in syntax highlighting | secure-packages-rolling | Oct 9, 2026 |