Skip to content
← All tracked CVEs

Updated 16:00

last 30 days

910 fixed within SLA

CVEStatusSeveritySummaryReleaseClock startedDeadlineFixedTime to fix
Fixed within SLACriticalChrome on ChromeOS Color heap buffer overflow enables sandbox escape via HTML, renderer compromise pre-151.0.7922.72secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAMediumPre-151.0.7922.72 Chrome Print Preview validation flaw leaks cross-origin data via renderer compromisesecure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLAHighChrome ANGLE out-of-bounds read enables renderer sandbox escape via crafted HTML (pre-151.0.7922.72)secure-packages-26.05Aug 4, 2026Aug 19, 2026Aug 4, 2026same day
Fixed within SLAHighRemote sandbox escape via crafted HTML in Chrome Android ANGLE pre-151.0.7922.72secure-packages-26.05Aug 4, 2026Aug 19, 2026Aug 4, 2026same day
Fixed within SLACriticalANGLE bug enables post-renderer-compromise sandbox escape via crafted HTML in Chrome Android <151.0.7922.72secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLACriticalANGLE out-of-bounds write enables sandbox escape via crafted HTML in Chrome <151.0.7922.72secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLACriticalPre-151.0.7922.72 Chrome QUIC integer overflow enables sandbox escape from compromised renderer via crafted HTMLsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLACriticalChromecast input validation flaw enables sandbox escape via crafted HTML (Chrome <151.0.7922.72)secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLACriticalChrome ANGLE input validation bug allows sandbox escape via crafted HTML (pre-151.0.7922.72)secure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLACriticalUse-after-free in Chrome Views allows sandbox escape via crafted HTML from compromised renderersecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLACriticaliOS Chrome <151.0.7922.72 allows remote sandbox escape via crafted HTML pagesecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAMediumChrome <151.0.7922.72 ANGLE uninitialized use leaks cross-origin data via crafted HTMLsecure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLAMediumRemote cross-origin data leak via crafted HTML exploiting ANGLE uninitialized use in Chrome <151.0.7922.72secure-packages-26.05Aug 4, 2026Sep 18, 2026Aug 4, 2026same day
Fixed within SLACriticalChrome Enterprise <151.0.7922.72 crypto bug allows discretionary access control bypass via network MITMsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAHighHigh-severity Chrome V8 use-after-free enables sandboxed RCE via crafted HTML before 151.0.7922.72secure-packages-26.05Aug 4, 2026Aug 19, 2026Aug 4, 2026same day
Fixed within SLAHighChrome Android GPU input validation flaw enables sandbox escape via crafted HTML (pre-151.0.7922.72)secure-packages-26.05Aug 4, 2026Aug 19, 2026Aug 4, 2026same day
Fixed within SLACriticalInsufficient input validation in Chrome Android Dawn allows remote sandbox escape via crafted HTMLsecure-packages-26.05Aug 4, 2026Aug 11, 2026Aug 4, 2026same day
Fixed within SLAHighFFmpeg 4.4–8.1.2 ADX decoder OOB on mid-stream channel layout changesecure-packages-26.05Jul 29, 2026Aug 13, 2026Aug 4, 20266 days
Fixed within SLAHighFFmpeg RTP/ASF demuxer infinite loop DoS via undersized chunk in rtp_asf_fix_headersecure-packages-26.05Jul 29, 2026Aug 13, 2026Aug 4, 20266 days
Fixed within SLAHighFFmpeg S/PDIF muxer out-of-bounds read via crafted DTS core_size during remuxingsecure-packages-26.05Jul 29, 2026Aug 13, 2026Aug 4, 20266 days
Fixed within SLAHighFFmpeg 4.4–8.1.2 NVDEC double-free causes memory corruption with crafted videossecure-packages-26.05Jul 29, 2026Aug 13, 2026Aug 4, 20266 days
Fixed within SLAHighFFmpeg 8.0–8.1.2 Vulkan HEVC decoder stack overflow via crafted bitstream enabling RCEsecure-packages-26.05Jul 29, 2026Aug 13, 2026Aug 4, 20266 days
Fixed within SLAHighFFmpeg 2.1–8.1.2 VobSub demuxer heap overflow via excessive subtitle stream IDs (RCE)secure-packages-26.05Jul 29, 2026Aug 13, 2026Aug 4, 20266 days
Fixed within SLAHighIPv4 __ip_append_data paged allocation misaccounts fraggap causing undersized linear area, overstated pagedlensecure-packages-26.05Jul 23, 2026Aug 7, 2026Aug 4, 202612 days
Fixed within SLAHighIPv6 paged path fraggap misaccounting overflows skb via UDPv6 MSG_MORE/MSG_SPLICE_PAGESsecure-packages-26.05Jul 23, 2026Aug 7, 2026Aug 4, 202612 days
Fixed within SLAHighaf_unix race: unix_gc may run with gc_in_progress=false, breaking MSG_PEEK handlingsecure-packages-26.05Jul 23, 2026Aug 7, 2026Aug 4, 202612 days
Fixed within SLAHighKVM x86 UAF: role mismatch reuses shadow page after PDE split 2MB→4KB; rmap not removedsecure-packages-26.05Jul 23, 2026Aug 7, 2026Aug 4, 202612 days
Fixed within SLAHighHeap overflow in BusyBox 1.38.0 shell/ash.c evalcommand() enables DoS via crafted inputsecure-packages-26.05Aug 4, 2026Aug 4, 2026Aug 4, 2026same day
Fixed within SLAHighHeap overflow in BusyBox 1.38.0 shell/ash.c ifsbreakup() enabling DoS via crafted inputsecure-packages-26.05Aug 4, 2026Aug 4, 2026Aug 4, 2026same day
Fixed within SLAHighBusyBox 1.38.0 awk_sub() use-after-free in editors/awk.c enables DoS via crafted AWK scriptsecure-packages-26.05Aug 4, 2026Aug 4, 2026Aug 4, 2026same day
Fixed within SLAHighLinux kernel Greybus raw cdev close use-after-free after bundle disconnect causes refcount underflowsecure-packages-rollingJul 20, 2026Aug 4, 2026Jul 30, 202610 days
Fixed within SLAHighGreybus raw: use-after-free on write after disconnect causes kernel panicsecure-packages-rollingJul 20, 2026Aug 4, 2026Jul 30, 202610 days
Fixed within SLAHighice driver double-free of tx_buf skb after tso/csum failure and interface downsecure-packages-rollingJul 16, 2026Jul 31, 2026Jul 30, 202614 days
Fixed within SLAHighSOCKMAP redirect hides inflight FDs from AF_UNIX GC, causing leaks and use-after-freesecure-packages-rollingJul 16, 2026Jul 31, 2026Jul 30, 202614 days
Fixed within SLAHighnf_tables hook list update RCU race breaks netlink dump traversal during ruleset updatessecure-packages-rollingJul 16, 2026Jul 31, 2026Jul 30, 202614 days
Fixed within SLAHighCeph writeback path leaks folio references for folios not suitable for writebacksecure-packages-rollingJul 16, 2026Jul 31, 2026Jul 30, 202614 days
Fixed within SLAHighlibceph __ceph_x_decrypt() OOB read if buffer smaller than ceph_x_encrypt_headersecure-packages-rollingJul 16, 2026Jul 31, 2026Jul 30, 202614 days
Fixed within SLAMediumKVM nSVM ignores L1 CR3 restore failure on nested #VMEXIT, corrupting vCPU statesecure-packages-rollingJun 19, 2026Aug 3, 2026Jul 30, 202641 days
Fixed within SLAMediumDeferred split queue race during migration makes dst visible early, triggering WARN and folio losssecure-packages-rollingJun 19, 2026Aug 3, 2026Jul 30, 202641 days
Fixed within SLAMediummm/damon: damos_walk and kdamond exit race causes deadlock with infinite request waitsecure-packages-rollingJun 19, 2026Aug 3, 2026Jul 30, 202641 days
Fixed within SLAMediumASoC nau8821: Unloading driver with pending jdet_work causes kernel crashsecure-packages-rollingJun 17, 2026Aug 1, 2026Jul 30, 202643 days
Fixed within SLAMediumgfs2_fill_super leaks kernel threads and quota bitmap on read-write transition failuresecure-packages-rollingJun 17, 2026Aug 1, 2026Jul 30, 202643 days
Fixed within SLAHighUse-after-free in Greybus raw cdev on close after bundle disconnect causes panicsecure-packages-26.05Jul 20, 2026Aug 4, 2026Jul 30, 202610 days
Fixed within SLAHighLinux Greybus raw: use-after-free on write after disconnect triggers kernel panicsecure-packages-26.05Jul 20, 2026Aug 4, 2026Jul 30, 202610 days
Fixed within SLAHighLinux ice driver double-free of skb during tx ring cleanup after TSO/CSUM failuresecure-packages-26.05Jul 16, 2026Jul 31, 2026Jul 30, 202614 days
Fixed within SLAHighNetfilter nf_tables: netlink dump race from non-RCU hook list joins during commitsecure-packages-26.05Jul 16, 2026Jul 31, 2026Jul 30, 202614 days
Fixed within SLAHighceph: Missing folio_put for writeback-ineligible folios removed from batch causes reference leaksecure-packages-26.05Jul 16, 2026Jul 31, 2026Jul 30, 202614 days
Fixed within SLAHighlibceph __ceph_x_decrypt out-of-bounds read when hdr->magic accessed without header-size checksecure-packages-26.05Jul 16, 2026Jul 31, 2026Jul 30, 202614 days
Fixed within SLAMediumKVM nSVM: Ignored CR3 load failure on nested #VMEXIT causes corrupted vCPU statesecure-packages-26.05Jun 19, 2026Aug 3, 2026Jul 30, 202642 days
Fixed within SLAMediumDeferred split queue race during folio migration marks dst partially mapped, triggers WARNsecure-packages-26.05Jun 19, 2026Aug 3, 2026Jul 30, 202642 days