← All tracked CVEs
Updated 11:00
Medium severity
Medium45d SLAWe fix a medium vulnerability within 45 days of publication, under our service-level agreement (SLA). We track 889 CVEs here: in progress, or fixed in the last 30 days.
| CVE | Status | Summary | Distribution | Fixed |
|---|---|---|---|---|
| Fixed | secure-packages-25.11 | Sep 18, 2026 | ||
| Fixed | secure-packages-25.11 | Sep 18, 2026 | ||
| Fixed | secure-packages-25.11 | Sep 18, 2026 | ||
| Fixed | secure-packages-25.11 | Sep 18, 2026 | ||
| Fixed | Integer overflow in Chrome Compositing before 153.0.8010.47 enables cross-origin data exfiltration | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Chrome Mac PlatformIntegration race condition leaks sensitive data via crafted HTML (pre-153.0.8010.47) | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Skia uninitialized resource in Chrome <153.0.8010.47 allows cross-origin data exposure via crafted HTML page | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Chrome <153.0.8010.47 Transactions Platform missing auth allows renderer-compromised UI spoofing via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Critical WebGL out-of-bounds read in Chrome Android <153.0.8010.47 via crafted HTML leaks sandbox memory | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Chrome <153.0.8010.47 CSS discrepancy allows remote sensitive information leak via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Chrome <153.0.8010.47 ANGLE uninitialized resource allows remote memory read outside sandbox via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Missing authorization in Android Chrome <153.0.8010.47 lets local co-installed app access sensitive information | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Pre-153.0.8010.47 Google Chrome Fonts discrepancy leaks sensitive data via crafted HTML page | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Missing authorization lets compromised renderer spoof UI via crafted HTML in Chrome <153.0.8010.47 | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Chrome Compositing integer overflow before 153.0.8010.47 leaks cross-origin data via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Chrome Mac <153.0.8010.47 PlatformIntegration race condition leaks sensitive data via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Skia uninitialized resource in Chrome <153.0.8010.47 enables cross-origin data exposure | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Missing authorization in Chrome Transactions Platform enables UI spoofing after renderer compromise (pre-153.0.8010.47) | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Chrome Android <153.0.8010.47 WebGL OOB read leaks sandbox memory via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Observable CSS discrepancy in Google Chrome pre-153.0.8010.47 leaks data via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Chrome <153.0.8010.47 ANGLE uninitialized resource enables remote cross-sandbox memory read via crafted HTML page | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Chrome Android pre-153.0.8010.47 missing auth lets co-installed app read sensitive data | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Google Chrome Fonts discrepancy before 153.0.8010.47 leaks sensitive data via crafted HTML, social engineering | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Chrome <153.0.8010.47 missing authorization enables UI spoofing from compromised renderer via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Chrome pre-153.0.8010.47 Compositing integer overflow leaks cross-origin data via crafted HTML | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Chrome Mac pre-153.0.8010.47 PlatformIntegration race enables data exfiltration via crafted HTML after renderer compromise | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Uninitialized resource in Skia allows cross-origin data exfiltration in Chrome before 153.0.8010.47 via crafted HTML | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Chrome <153.0.8010.47 Transactions Platform missing authorization enables UI spoofing via compromised renderer and crafted HTML | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Critical WebGL out-of-bounds read in Chrome Android <153.0.8010.47 enables remote sandbox memory disclosure | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Google Chrome <153.0.8010.47 CSS discrepancy allows remote sensitive info leak via crafted HTML | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Uninitialized ANGLE resource in Chrome <153.0.8010.47 enables remote out-of-sandbox memory read via crafted HTML page | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Chrome Android <153.0.8010.47 missing authorization leaks sensitive data via local co-installed app | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Google Chrome pre-153.0.8010.47 font rendering discrepancy allows crafted HTML sensitive data leak via social engineering | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | Missing authorization in Chrome before 153.0.8010.47 enables compromised renderer to spoof UI via crafted HTML | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | PYSEC-2026-3923: sqlparse ReindentFilter CPU DoS when reindent=True processes large crafted tuple-list SQL | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | PYSEC-2026-3696: sqlparse Python/PHP output modes improperly escape quotes, enabling snippet injection via backslashes | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | PYSEC-2026-141: urllib3 ProxyManager cross-origin redirects leak sensitive headers when assert_same_host=False (1.23–<2.7.0) | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | GHSA-cfqr-cjx5-5jcm: sqlparse ReindentFilter CPU DoS from repeated offset calculations on large tuple lists | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | GHSA-3496-9g83-7v6x: sqlparse Python/PHP output formats vulnerable to code injection via improper backslash-quote escaping | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | gst-plugins-good avidemux vprp parsing OOB read causes crash via crafted AVI | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | MP4 parsing DoS: GStreamer isomp4 qtdemux_audio_caps divide-by-zero from unvalidated atoms (<1.28.2) | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | GStreamer gst-plugins-good <1.28.2 isomp4 qtdemux_parse_trak divide-by-zero DoS on MP4 audio | secure-packages-26.05 | Sep 18, 2026 | |
| Fixed | PYSEC-2026-1999: urllib3 PoolManager retries ignored; cannot disable redirects globally, posing SSRF risk | secure-packages-25.11 | Sep 16, 2026 | |
| Fixed | PYSEC-2026-1995: urllib3 fails to strip Proxy-Authorization on cross-origin redirects without ProxyManager, potential credential leak | secure-packages-25.11 | Sep 16, 2026 | |
| Fixed | PYSEC-2026-141: urllib3 1.23 to <2.7.0 leaks sensitive headers on cross-origin redirects via ProxyManager | secure-packages-25.11 | Sep 16, 2026 | |
| Fixed | GHSA-pq67-6m6q-mj2v: urllib3 PoolManager retries ignored; redirects not disabled, causing potential SSRF exposure | secure-packages-25.11 | Sep 16, 2026 | |
| Fixed | GHSA-34jh-p97f-mpxf: Proxy-Authorization header may leak on cross-origin redirects when not using urllib3 proxy support | secure-packages-25.11 | Sep 16, 2026 | |
| Fixed | OpenSSL CMP extraCerts cached indefinitely causing unbounded memory growth/DoS with reused OSSL_CMP_CTX | secure-packages-26.05 | Sep 15, 2026 | |
| Fixed | GStreamer gst-plugins-good avidemux vprp parser OOB read via crafted AVI causes DoS | secure-packages-25.11 | Sep 15, 2026 | |
| Fixed | ConfigParser write() allows key/value injection via CR in attacker-controlled multiline values | secure-packages-25.11 | Sep 14, 2026 |