Skip to content
← All tracked CVEs

Updated 10:00

last 30 days

933 fixed within SLA

CVEStatusSeveritySummaryReleaseClock startedDeadlineFixedTime to fix
Fixed within SLAHighqdisc_pkt_len_segs_init fails to pull GSO headers, risking memcpy issues in TSO driverssecure-packages-rollingJul 27, 2026Aug 11, 2026Aug 7, 202611 days
Fixed within SLAHighBPF verifier misses ld_{abs,ind} failure path analysis in subprograms, mishandling abnormal exitssecure-packages-rollingJul 27, 2026Aug 11, 2026Aug 7, 202611 days
Fixed within SLAHighSame-register dst/src in BPF sock_ops leaves dst unzeroed, causing OOB read and leaksecure-packages-rollingJul 23, 2026Aug 7, 2026Aug 7, 202615 days
Fixed within SLAMediumMissing run load for vcn0 across segments in ntfs3 attr_data_get_block_locked causes SPARSE_LCN WARN_ONsecure-packages-rollingJul 20, 2026Sep 3, 2026Aug 7, 202618 days
Fixed within SLAMediumDRM/TTM ttm_bo_shrink() infinite LRU walk on backup failuresecure-packages-rollingJul 16, 2026Aug 30, 2026Aug 7, 202622 days
Fixed within SLAMediumrtw88 8821CE probe crash when pci_upstream_bridge() returns NULL on root bussecure-packages-rollingJun 27, 2026Aug 11, 2026Aug 7, 202641 days
Fixed within SLAMediumnf_tables reset commit_mutex causes circular lock with ipset list and iptables-nft '-m set'secure-packages-rollingJun 26, 2026Aug 10, 2026Aug 7, 202643 days
Fixed within SLAHighGSO headers not pulled in qdisc_pkt_len_segs_init risk TSO memcpy crash, security issuesecure-packages-26.05Jul 27, 2026Aug 11, 2026Aug 7, 202611 days
Fixed within SLAHighBPF verifier omits ld_{abs,ind} failure path analysis in BTF subprogramssecure-packages-26.05Jul 27, 2026Aug 11, 2026Aug 7, 202611 days
Fixed within SLAHighBPF sock_ops GET_SK/GET_FIELD miss zeroing when dst==src, causing OOB read and leaksecure-packages-26.05Jul 23, 2026Aug 7, 2026Aug 7, 202615 days
Fixed within SLAMediumntfs3 attr_data_get_block_locked() misses vcn0 run load across segments, triggers WARN_ONsecure-packages-26.05Jul 20, 2026Sep 3, 2026Aug 7, 202618 days
Fixed within SLAHighSOCKMAP hides inflight fds from AF_UNIX GC causing leaks, UAF, and incorrect SCM countssecure-packages-26.05Aug 4, 2026Aug 19, 2026Aug 7, 20263 days
Fixed within SLAMediumLinux kernel drm/ttm ttm_bo_shrink() infinite LRU walk on backup failuresecure-packages-26.05Jul 16, 2026Aug 30, 2026Aug 7, 202622 days
Fixed within SLAMediumrtw88 8821CE probe crash due to NULL pci_upstream_bridge on root bussecure-packages-26.05Jun 28, 2026Aug 12, 2026Aug 7, 202640 days
Fixed within SLAMediumnf_tables reset commit_mutex causes circular lock dependency with nft reset, ipset list, iptables-nft -m setsecure-packages-26.05Jun 28, 2026Aug 12, 2026Aug 7, 202640 days
Fixed within SLAMediumConcurrent nft_counter dump-and-reset race can double-subtract, underrunning netfilter counter totalssecure-packages-26.05Aug 7, 2026Sep 21, 2026Aug 7, 2026same day
Fixed within SLAMediumChrome DevTools untrusted input allows remote bypass of navigation restrictions via crafted HTMLsecure-packages-rollingAug 4, 2026Sep 18, 2026Aug 5, 20261 day
Fixed within SLAHighChrome Chromoting on Linux <151.0.7922.72 allows OS-level privilege escalation via network trafficsecure-packages-rollingAug 4, 2026Aug 19, 2026Aug 5, 20261 day
Fixed within SLAHighChromoting on Linux before 151.0.7922.72 enables OS-level privilege escalation via malicious network trafficsecure-packages-26.05Aug 4, 2026Aug 19, 2026Aug 5, 20261 day
Fixed within SLAMediumWindows Chrome Updater allows local UI spoofing via malicious file before 151.0.7922.72secure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLACriticalTint implementation flaw in Google Chrome on Mac <151.0.7922.72 enabling sandbox escape via crafted HTMLsecure-packages-25.11Aug 5, 2026Aug 12, 2026Aug 5, 2026same day
Fixed within SLAMediumChrome DevTools insufficient input validation lets remote attackers bypass navigation restrictions via crafted HTML pre-151.0.7922.72secure-packages-25.11Aug 4, 2026Sep 18, 2026Aug 5, 20261 day
Fixed within SLAHighUse-after-free in Views on Linux Chrome <151.0.7922.72 allows remote heap corruption via crafted HTMLsecure-packages-25.11Aug 5, 2026Aug 20, 2026Aug 5, 2026same day
Fixed within SLAHighLinux Chrome Chromoting pre-151.0.7922.72 allows local privilege escalation via network trafficsecure-packages-25.11Aug 4, 2026Aug 19, 2026Aug 5, 20261 day
Fixed within SLAMediumChrome Android GPU side-channel lets remote attackers leak cross-origin data before 151.0.7922.72secure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumGoogle Chrome Cast pre-151.0.7922.72 remote cross-origin data leak via crafted HTMLsecure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumGoogle Chrome CSS bug enabled remote script/HTML injection (UXSS) before 151.0.7922.72secure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumGetUserMedia allows cross-origin data leak in Chrome prior to 151.0.7922.72 via compromised renderersecure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumChrome Credential Management UI spoofing via crafted HTML by remote attacker pre-151.0.7922.72secure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumChrome Payments input validation bug enables UI spoofing by compromised renderer pre-151.0.7922.72secure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumChrome iOS <151.0.7922.72 insufficient input validation enables remote navigation restriction bypasssecure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumBlink cross-origin data leak via crafted HTML in Chrome before 151.0.7922.72secure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumChrome DevTools same-origin policy bypass via crafted HTML before 151.0.7922.72secure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAHighInsufficient validation in Chrome DevTools allows extension-based privilege escalation pre-151.0.7922.72secure-packages-25.11Aug 5, 2026Aug 20, 2026Aug 5, 2026same day
Fixed within SLAMediumANGLE uninitialized use in Chrome <151.0.7922.72 leaks cross-origin data via crafted HTMLsecure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAHighChrome Mac Audio use-after-free enables sandbox escape after renderer compromise via crafted HTML (pre-151.0.7922.72)secure-packages-25.11Aug 5, 2026Aug 20, 2026Aug 5, 2026same day
Fixed within SLAMediumGoogle Chrome Loader before 151.0.7922.72 leaks cross-origin data via crafted HTMLsecure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumIncorrect security UI allows Omnibox spoofing via crafted HTML on Chrome iOS <151.0.7922.72secure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumIsolated Web Apps in Chrome <151.0.7922.72 allow remote bypass of navigation restrictions via crafted HTMLsecure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumRemote Site Isolation bypass in Google Chrome <151.0.7922.72 via crafted HTML pagesecure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumGoogle Chrome Autofill cross-origin data leak via crafted HTML page pre-151.0.7922.72secure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumPolicy bypass in Chrome Receiver enables sandbox escape via crafted HTML (pre-151.0.7922.72)secure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumInappropriate PresentationAPI implementation leaks cross-origin data in Chrome before 151.0.7922.72secure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAHighInsufficient input validation in Chrome Variations enables heap corruption by privileged network attackersecure-packages-25.11Aug 5, 2026Aug 20, 2026Aug 5, 2026same day
Fixed within SLAMediumChrome Cast insufficient input validation (<151.0.7922.72) leaks cross-origin data via crafted HTMLsecure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumChrome <151.0.7922.72 WebGL out-of-bounds read allows remote memory disclosure via crafted HTMLsecure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumSkia uninitialized use enables cross-origin data leak via crafted HTML in Chrome <151.0.7922.72secure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumChrome Mac pre-151.0.7922.72 Media OOB read enables sandbox escape after renderer compromisesecure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumChrome Cast input validation flaw leaks cross-origin data via crafted HTML (pre-151.0.7922.72) (Medium severity)secure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLACriticalChrome WebSockets input validation flaw enables sandbox escape from compromised renderer via crafted HTML (pre-151.0.7922.72)secure-packages-25.11Aug 5, 2026Aug 12, 2026Aug 5, 2026same day