← All tracked CVEs
Updated 08:00
1007 fixed in the last 30 days
| CVE | Status | Severity | Summary | Distribution | Fixed |
|---|---|---|---|---|---|
| Fixed | Medium | Chrome Compositing integer overflow exposed cross-origin data pre-155.0.8059.39 via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Sensitive info leak in Chrome Paint pre-155.0.8059.39 via crafted HTML page | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Incorrect FileSystem authorization in Chrome <155.0.8059.39 enables RCE outside sandbox via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Android Chrome PDF auth flaw pre-155.0.8059.39 enabled local co-app data theft via social engineering | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Android Chrome UI confused deputy lets co-installed app access privileged pages pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 Core reference resolution bug leaks cross-origin data via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Android WebAppInstalls auth flaw before 155.0.8059.39 enabled remote system access bypass | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Chrome iOS <155.0.8059.39 missing authorization enables RCE outside sandbox via crafted HTML High severity | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Google Chrome Editing information leak before 155.0.8059.39 via crafted HTML social engineering | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 UI use-after-free enables compromised renderer to spoof UI via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome Media use-after-free enables sandboxed RCE via crafted HTML pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Android Chrome fullscreen UI flaw enables address bar spoofing pre-155.0.8059.39, low severity | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chromoting UI misrepresentation allows spoofed UI via crafted traffic on Mac Chrome <155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Use-after-free in Google Chrome Modularization pre-155.0.8059.39 allows sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Incorrect Bluetooth authorization in Chrome <155.0.8059.39 exposes sensitive data via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Incorrect authorization in Chrome Android <155.0.8059.39 leaks sensitive data to co-installed app via social engineering | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome SignIn missing authorization before 155.0.8059.39 exposes sensitive data via crafted Chrome extension social engineering | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome PermissionElement clickjacking allowed UI spoofing via crafted HTML pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155 FontAccess use of released resource enables renderer-compromised origin policy bypass via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | iOS Chrome Selection authorization flaw enables remote info disclosure via crafted HTML (pre-155.0.8059.39) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome Android <155 Autofill reference resolution flaw exposes sensitive data via crafted HTML, social engineering | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Android Chrome prior to 155.0.8059.39 allows UI element spoofing via crafted HTML (low severity) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome ANGLE out-of-bounds read allows remote memory disclosure via crafted HTML (pre-155.0.8059.39) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Autofill AI discrepancy in Chrome <155.0.8059.39 enables renderer attacker data exfiltration via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome PermissionElement UI spoofing vulnerability prior to 155.0.8059.39 via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | CacheStorage race in Chrome <155.0.8059.39 lets compromised renderer read memory outside sandbox | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Use-after-free in Chrome Tabs on Mac pre-155.0.8059.39 enables RCE outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 Unbounded Element auth flaw enables compromised renderer UI spoofing via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome ANGLE type confusion enables sandbox escape RCE after renderer compromise via crafted HTML pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome Fonts buffer overflow before 155.0.8059.39 enables RCE outside sandbox via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Use-after-free in Chrome GarbageCollection pre-155.0.8059.39 enables sandbox RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 WebAppInstalls UI misrepresentation enables social engineering access bypass | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Use-after-free in Chrome Streaming allows sandboxed code execution via crafted HTML pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome WebOTP UI spoofing via crafted HTML before 155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Tint use-after-free in Chrome <155.0.8059.39 enables RCE outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Incorrect reference resolution in Chrome iOS Passwords enables out-of-sandbox code execution post renderer compromise | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Use-after-free in Google Chrome Select <155.0.8059.39 permits sandboxed arbitrary code execution via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Animation info leak before 155.0.8059.39 lets remote attackers exfiltrate cross-origin data via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | UI spoofing vulnerability in Chrome Payments via crafted HTML pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome pre-155.0.8059.39 WebAppInstalls auth bug enabled remote UI spoofing via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome pre-155.0.8059.39 CSS use-after-free allows sandboxed remote code execution via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome WebRTC use-after-free <155.0.8059.39 allows sandboxed RCE via crafted HTML page | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome pre-155.0.8059.39 File UI misrepresentation allows remote spoofing via crafted HTML, social engineering | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome WebAuthn missing authorization allows remote UI spoofing via crafted HTML page pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Incomplete GetUserMedia cleanup enabled UI spoofing via crafted HTML in Chrome prior to 155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Incorrect DevTools authorization pre-155.0.8059.39 enables cross-origin data leak via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Google Chrome pre-155.0.8059.39 HTML use-after-free allows remote sandbox RCE | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome Android <155.0.8059.39 Passwords component info leak via crafted HTML, social engineering | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | High-severity Chrome V8 race condition enables sandboxed remote code execution via crafted HTML (pre-155.0.8059.39) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Android <155.0.8059.39 sensitive info leak via co-installed app by local attacker | secure-packages-25.11 | Oct 9, 2026 |