Skip to content
← All tracked CVEs

Updated 11:00

last 30 days

933 fixed within SLA

CVEStatusSeveritySummaryReleaseClock startedDeadlineFixedTime to fix
Fixed within SLAMediumInsufficient WebView input validation in Android Chrome leaks cross-origin data after renderer compromisesecure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumChrome FedCM same-origin policy bypass by remote attacker via crafted HTML prior to 151.0.7922.72secure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumGoogle Chrome on iOS before 151.0.7922.72 leaks cross-origin data via crafted HTML pagesecure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumChrome iOS <151.0.7922.72 UXSS via insufficient validation of untrusted network inputsecure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumInsufficient policy enforcement in Chrome Presentation pre-151.0.7922.72 allows remote navigation bypass via crafted HTMLsecure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumChrome pre-151.0.7922.72 Extensions security UI flaw enables UI spoofing via crafted extensionsecure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAMediumBlink SOP bypass via crafted HTML in Chrome before 151.0.7922.72secure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 5, 2026same day
Fixed within SLAHighFFmpeg 4.4–8.1.2 ADX decoder OOB read/write on mid-stream channel layout changesecure-packages-25.11Jul 29, 2026Aug 13, 2026Aug 5, 20267 days
Fixed within SLAHighFFmpeg 0.6.3–8.1.2 RTP/ASF demuxer infinite loop DoS on crafted streamsecure-packages-25.11Jul 29, 2026Aug 13, 2026Aug 5, 20267 days
Fixed within SLAHighFFmpeg 0.7.1–8.1.2 S/PDIF muxer out-of-bounds read via crafted DTS core_sizesecure-packages-25.11Jul 29, 2026Aug 13, 2026Aug 5, 20267 days
Fixed within SLAHighFFmpeg 4.4–8.1.2 NVDEC nvdec.c double-free allows memory corruption via crafted videosecure-packages-25.11Jul 29, 2026Aug 13, 2026Aug 5, 20267 days
Fixed within SLAHighFFmpeg 8.0–8.1.2 Vulkan HEVC decoder stack buffer overflow via oversized vps_num_hrd_parameters causing RCEsecure-packages-25.11Jul 29, 2026Aug 13, 2026Aug 5, 20267 days
Fixed within SLAHighFFmpeg 2.1–8.1.2 VobSub demuxer heap overflow via crafted .sub/.idx stream IDssecure-packages-25.11Jul 29, 2026Aug 13, 2026Aug 5, 20267 days
Fixed within SLACriticalglibc scanf %mc width >1024 triggers 1-byte heap overflow in v2.7-2.43secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAMediumSide-channel leak in Chrome Media exposes cross-origin data via crafted HTML (pre-151.0.7922.72)secure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLAHighChrome <151.0.7922.72 Dawn use-after-free enables sandboxed RCE via crafted HTML, low severitysecure-packages-26.05Aug 4, 2026Aug 19, 2026Aug 4, 2026same day
Fixed within SLAMediumChrome iOS <151.0.7922.72: Insufficient policy enforcement allows remote UI spoofing via crafted HTMLsecure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLAMediumInsufficient input validation in Chrome DevTools pre-151.0.7922.72 allows navigation bypass via malicious filesecure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLAMediumGoogle Chrome for iOS prior to 151.0.7922.72 UI spoofing via crafted HTML pagesecure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLAHighChrome <151.0.7922.72: PDFium use-after-free enables sandboxed code execution via crafted PDFsecure-packages-26.05Aug 4, 2026Aug 19, 2026Aug 4, 2026same day
Fixed within SLALowChrome for iOS <151.0.7922.72 exposes process memory to local physical attackersecure-packages-26.05Aug 4, 2026Nov 2, 2026Aug 4, 2026same day
Fixed within SLAMediumChrome Passwords pre-151.0.7922.72 enables remote UI spoofing via malicious network trafficsecure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLAMediumChrome Passwords pre-151.0.7922.72 untrusted input validation flaw enables remote UI spoofing via malicious network trafficsecure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLAMediumGoogle Chrome Settings bug before 151.0.7922.72 allowed remote UI spoofing via malicious trafficsecure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLAMediumInput implementation flaw in Chrome Android <151.0.7922.72 enables remote UI spoofing via crafted HTMLsecure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLAMediumGoogle Lens in Chrome <151.0.7922.72 enables UI spoofing via crafted HTML after renderer compromisesecure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLAMediumGoogle Chrome WebXR info disclosure from process memory via crafted HTML pre-151.0.7922.72secure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLAMediumInsufficient Speech API policy in Chrome <151.0.7922.72 enables compromised renderer cross-origin data leaksecure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLAMediumUI spoofing vulnerability in Chrome iOS <151.0.7922.72 via crafted HTMLsecure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLACriticalChrome Google Lens insufficient input validation allows renderer sandbox escape via crafted HTMLsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAMediumPre-151.0.7922.72 Chrome WebGL bug exposes process memory via crafted HTMLsecure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLALowChrome Android USB policy flaw prior to 151.0.7922.72 leaks cross-origin data via compromised renderersecure-packages-26.05Aug 4, 2026Nov 2, 2026Aug 4, 2026same day
Fixed within SLAMediumChrome Android pre-151.0.7922.72 PIP race enables remote domain spoofing via crafted HTMLsecure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLAMediumChrome <151.0.7922.72: Incorrect Extensions security UI enables malicious extension UI spoofingsecure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLALowChrome Passwords <151.0.7922.72 cross-origin data leak via renderer-compromised crafted HTMLsecure-packages-26.05Aug 4, 2026Nov 2, 2026Aug 4, 2026same day
Fixed within SLAMediumChrome Mac pre-151.0.7922.72 local attacker bypasses navigation restrictions via malicious filesecure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLAHighRemote out-of-bounds memory read in Chrome Dawn via crafted HTML before 151.0.7922.72secure-packages-26.05Aug 4, 2026Aug 19, 2026Aug 4, 2026same day
Fixed within SLAMediumRemote attacker could bypass navigation restrictions via Media in Chrome Android <151.0.7922.72secure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLAHighRace in Chrome Updater on Windows allows local privilege escalation pre-151.0.7922.72secure-packages-26.05Aug 4, 2026Aug 19, 2026Aug 4, 2026same day
Fixed within SLAMediumSkia uninitialized use in Chrome Windows leaks process memory via crafted HTML (pre-151.0.7922.72)secure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLACriticalChrome <151.0.7922.72 AI input validation bug enables sandbox escape from compromised renderer via crafted HTMLsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLACriticalChrome WebAuthn input validation flaw allows sandbox escape via PDF (pre-151.0.7922.72)secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAHighChrome <151.0.7922.72 V8 type confusion allows sandboxed code execution via crafted HTMLsecure-packages-26.05Aug 4, 2026Aug 19, 2026Aug 4, 2026same day
Fixed within SLAMediumChrome <151.0.7922.72 Navigation input validation flaw lets compromised renderer bypass restrictions via crafted HTMLsecure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLACriticalChrome Notifications validation flaw enables sandbox escape via crafted PDF after renderer compromise (pre-151)secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAMediumChrome pre-151.0.7922.72 Bluetooth policy bug allows same-origin policy bypass via crafted HTML from compromised renderersecure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLAMediumGoogle Chrome pre-151 Speech policy bug enables remote site isolation bypass via crafted HTMLsecure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLALowChrome Android <151.0.7922.72 cross-origin data leak via crafted HTML, local attackersecure-packages-26.05Aug 4, 2026Nov 2, 2026Aug 4, 2026same day
Fixed within SLAMediumUI spoofing in Chrome Global Media Controls via crafted HTML before 151.0.7922.72secure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLAMediumInsufficient input validation in Chrome Cast allowed same-origin policy bypass via crafted HTML pre-151.0.7922.72secure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day