← All tracked CVEs
Updated 07:01
1007 fixed in the last 30 days
| CVE | Status | Severity | Summary | Distribution | Fixed |
|---|---|---|---|---|---|
| Fixed | Critical | Critical ANGLE buffer overflow allows remote sandbox-escape RCE in Chrome Android before 154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | V8 race in Chrome <154.0.8037.57 allows sandboxed RCE via crafted HTML page | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Android Chrome Omnibox UI misrepresentation allows remote address bar spoofing via crafted HTML, pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome pre-154.0.8037.57 WakeLock auth flaw let compromised renderer bypass system restrictions | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Use-after-free in Chrome Views pre-154.0.8037.57 allows RCE outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome Themes input validation flaw allows sandbox code execution via crafted traffic pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome MediaStream reference resolution bug allows web origin bypass to privileged page pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Improper output encoding in Chrome DevTools enables sandbox escape RCE pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Hugo 0.162.0 tailwindcss allowlist bypasses Node permissions, enabling RCE via tailwind.config.js | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Google Chrome Fonts race condition before 155.0.8059.39 allows remote code execution outside sandbox | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome Media use-after-free enables sandboxed RCE via crafted HTML, prior to 155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome <155.0.8059.39 PDF use-after-free leads to sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Incorrect API calculation in Google Chrome Windows <155.0.8059.39 allows UI spoofing via extension | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Chrome Android: ANGLE use-after-free enables RCE outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Chrome <155.0.8059.39 Media integer overflow enables RCE outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Extensions before 155.0.8059.39 allow code injection enabling UI spoofing via crafted extension | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Google Chrome Enterprise sensitive info leak via crafted HTML allows remote attacker before 155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Chrome iOS <155.0.8059.39 input validation flaw enables sandbox-escape RCE via crafted HTML with social engineering | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Race condition enables UI spoofing in Chrome Browser pre-155.0.8059.39 via compromised renderer | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome Mac <155.0.8059.39 Core race condition enables sandbox escape RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | High-severity use-after-free in Chrome Parser allows sandboxed RCE via crafted HTML (pre-155.0.8059.39) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Missing authorization in Chrome Permissions allows UI spoofing via renderer compromise (pre-155.0.8059.39) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome Mac WebAppInstalls ref resolution bug enables renderer sandbox escape RCE pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Missing authorization in iOS Chrome <155.0.8059.39 allows social-engineered UI spoofing via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Incorrect authorization in Chrome Extensions <155.0.8059.39 allows UI spoofing via crafted extension | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Chrome Media out-of-bounds write enables RCE outside sandbox via crafted HTML pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Android <155.0.8059.39 Messages clickjacking enables UI spoofing via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Google Chrome Media auth flaw pre-155.0.8059.39 leaks cross-origin data via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 Glic cleanup bug enables cross-origin data leak via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome Storage use-after-free allows RCE outside sandbox via crafted HTML page before 155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Information leak in Chrome WebAudio before 155.0.8059.39 enables cross-origin data exposure via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Android WebShare auth bug pre-155.0.8059.39 allows UI spoofing via compromised renderer | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Incorrect SanitizerAPI implementation in Chrome <155.0.8059.39 leaks sensitive data via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 DataTransfer missing auth allows compromised renderer sensitive data exfiltration via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome Media use-after-free enables sandboxed RCE via crafted HTML pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Chromecast use-after-free in Chrome <155.0.8059.39 allows RCE outside sandbox via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 UI misrepresentation allows UI spoofing via social-engineered HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Uninitialized Skia resource allows cross-origin data exfiltration via crafted HTML (Chrome <155.0.8059.39) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome Mac <155.0.8059.39 sandbox privilege escalation via crafted HTML after renderer compromise | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome <155.0.8059.39 Fonts race allows sandbox escape RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Incomplete Dawn cleanup in Chrome <155.0.8059.39 allows sandbox-escape RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | V8 type confusion in Chrome <155.0.8059.39 enables sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome Windows Fonts use-after-free allowed sandboxed RCE via crafted HTML before 155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Google Chrome <155.0.8059.39 UI auth flaw enables RCE outside sandbox via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Incorrect authorization in Chrome Android Transactions Platform exposes data via crafted HTML (pre-155.0.8059.39) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Low | Chrome <155.0.8059.39 Core use-after-free lets compromised renderer read cross-origin data via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Android <155.0.8059.39 PiP UI bug allows address bar spoofing via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Android before 155.0.8059.39 vulnerability enables remote UI spoofing via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Paint discrepancy before 155.0.8059.39 enables remote cross-origin data leak via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Use-after-free in Google Chrome Media pre-155.0.8059.39 allows sandbox RCE via HTML | secure-packages-25.11 | Oct 9, 2026 |