← All tracked CVEs
Updated 22:00
1155 fixed in the last 30 days
| CVE | Status | Severity | Summary | Distribution | Fixed |
|---|---|---|---|---|---|
| Fixed | Low | Skia use-after-free in Chrome <153.0.8010.47 enables cross-origin data exfiltration via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Medium | Integer overflow in Chrome Compositing before 153.0.8010.47 enables cross-origin data exfiltration | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | V8 use-after-free in Chrome <153.0.8010.47 enables sandboxed RCE via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Medium | Chrome Mac PlatformIntegration race condition leaks sensitive data via crafted HTML (pre-153.0.8010.47) | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Chrome pre-153 Core race bug enables post-renderer sandbox escape RCE via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Chrome CacheStorage type confusion enables sandboxed RCE via crafted HTML (prior to 153.0.8010.47) | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Medium | Skia uninitialized resource in Chrome <153.0.8010.47 allows cross-origin data exposure via crafted HTML page | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Medium | Chrome <153.0.8010.47 Transactions Platform missing auth allows renderer-compromised UI spoofing via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Critical | ANGLE input validation bug enables sandbox-escape RCE via HTML in Chrome <153.0.8010.47 | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Use-after-free in Chrome PDF pre-153.0.8010.47 allows sandbox RCE via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Chrome DOM use-after-free enables remote sandboxed arbitrary code execution via crafted HTML pre-153.0.8010.47 | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Chrome <153.0.8010.47 WebUI auth flaw enabled RCE outside sandbox from compromised renderer | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Incorrect Core authorization in Chrome Windows pre-153.0.8010.47 enables local sandbox escape, arbitrary code | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Skia state validation bug in Chrome <153.0.8010.47 enables out-of-sandbox memory read via HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Chrome Compositing type confusion allowed sandboxed RCE via crafted HTML before 153.0.8010.47 | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Low | Incomplete GetUserMedia cleanup in Chrome <153.0.8010.47 leaks cross-origin data post-renderer compromise | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Critical | Use-after-free in Chrome DigitalCredentials <153.0.8010.47 enables remote RCE outside sandbox via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Critical | V8 integer overflow in Chrome <153.0.8010.47 allows sandboxed RCE via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Chrome Mac <153.0.8010.47 Extensions ref resolution bug allows renderer sandbox escape code execution | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Medium | Critical WebGL out-of-bounds read in Chrome Android <153.0.8010.47 via crafted HTML leaks sandbox memory | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Medium | Chrome <153.0.8010.47 CSS discrepancy allows remote sensitive information leak via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Chrome Input use-after-free enables sandbox escape RCE via crafted HTML (pre-153.0.8010.47) | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Use-after-free in Chrome Input before 153.0.8010.47 enables remote code execution outside sandbox | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Use-after-free in Chrome Internals before 153.0.8010.47 enables remote RCE outside sandbox via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Medium | Chrome <153.0.8010.47 ANGLE uninitialized resource allows remote memory read outside sandbox via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Critical | Chrome Core use-after-free enables RCE outside sandbox via crafted HTML before 153.0.8010.47 | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Medium | Missing authorization in Android Chrome <153.0.8010.47 lets local co-installed app access sensitive information | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Critical | Use-after-free in Google Chrome Auth before 153.0.8010.47 allows RCE outside sandbox | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Chrome <153.0.8010.47 ServiceWorker type confusion allows sandboxed remote code execution via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Medium | Pre-153.0.8010.47 Google Chrome Fonts discrepancy leaks sensitive data via crafted HTML page | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Medium | Missing authorization lets compromised renderer spoof UI via crafted HTML in Chrome <153.0.8010.47 | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Pre-153.0.8010.47 Chrome Mac Extensions race condition allows RCE outside sandbox via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Out-of-bounds write in Chrome ServiceWorker <153.0.8010.47 allows sandboxed remote code execution | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Critical | Use-after-free in Chrome WebAppInstalls <153.0.8010.47 enables remote RCE outside sandbox via HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Pre-153.0.8010.47 Chrome ServiceWorker type confusion allows sandboxed RCE via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Low | Chrome pre-153.0.8010.47 network race lets compromised renderer exfiltrate cross-origin data via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Chrome Mac <153.0.8010.47 Extensions race condition enables code execution outside sandbox via UI interaction | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Low | Skia use-after-free in Chrome <153.0.8010.47 enables renderer-compromised cross-origin data exfiltration | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Medium | Chrome Compositing integer overflow before 153.0.8010.47 leaks cross-origin data via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | High | V8 use-after-free enables sandbox RCE via crafted HTML in Chrome <153.0.8010.47 | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Medium | Chrome Mac <153.0.8010.47 PlatformIntegration race condition leaks sensitive data via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | High | Chrome <153.0.8010.47 Core race condition allows sandbox escape and RCE via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | High | Chrome CacheStorage type confusion <153.0.8010.47 enables remote sandboxed code execution via HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Medium | Skia uninitialized resource in Chrome <153.0.8010.47 enables cross-origin data exposure | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Medium | Missing authorization in Chrome Transactions Platform enables UI spoofing after renderer compromise (pre-153.0.8010.47) | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Critical | Improper ANGLE input validation in Chrome <153.0.8010.47 allows RCE outside sandbox | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | High | Use-after-free in Chrome PDF enables sandboxed RCE via crafted HTML pre-153.0.8010.47 | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | High | Use-after-free in Chrome DOM pre-153.0.8010.47 allows sandboxed RCE via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | High | Chrome WebUI authorization flaw pre-153.0.8010.47 allows renderer-compromised RCE outside sandbox via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | High | Google Chrome Windows pre-153.0.8010.47 Core auth bug enables local sandbox escape arbitrary code execution | secure-packages-rolling | Sep 18, 2026 |