Skip to content
← All tracked CVEs

Updated 05:00

last 30 days

933 fixed within SLA

CVEStatusSeveritySummaryReleaseClock startedDeadlineFixedTime to fix
Fixed within SLAMediumImageMagick <7.1.2-27 magick CLI memory leak on invalid options enables memory exhaustionsecure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 12, 20267 days
Fixed within SLAMediumHeap buffer over-read in ImageMagick BGR decoder due to missing EOF checks (<7.1.2-27)secure-packages-25.11Aug 4, 2026Sep 18, 2026Aug 12, 20268 days
Fixed within SLAMediumLarge JNX files on 32-bit ImageMagick cause integer overflow and heap buffer overwritesecure-packages-25.11Aug 4, 2026Sep 18, 2026Aug 12, 20268 days
Fixed within SLAMediumImageMagick <7.1.2-27 heap buffer overwrite in fx operation via crafted argumentsecure-packages-25.11Aug 4, 2026Sep 18, 2026Aug 12, 20268 days
Fixed within SLAMediumPre-5.0.8/6.0.0-alpha8 Capstone reduced x86 NULL deref on 3DNow! 0F 0F remote crashsecure-packages-25.11Aug 4, 2026Sep 18, 2026Aug 12, 20268 days
Fixed within SLAHighUse-after-free in Aura allows sandbox escape after renderer compromise in Chrome Linux <151.0.7922.109secure-packages-25.11Aug 12, 2026Aug 27, 2026Aug 12, 2026same day
Fixed within SLAHighChrome pre-151.0.7922.109 HTML use-after-free allows remote heap corruption via crafted pagesecure-packages-25.11Aug 12, 2026Aug 27, 2026Aug 12, 2026same day
Fixed within SLAHighChrome pre-151.0.7922.109 Views UAF enables remote heap corruption via crafted HTML page, requires UI gesturessecure-packages-25.11Aug 12, 2026Aug 27, 2026Aug 12, 2026same day
Fixed within SLAMediumcJSON <=1.7.19 JSON Patch non-atomic; failed replace/move deletes target memberssecure-packages-rollingAug 5, 2026Sep 19, 2026Aug 12, 20267 days
Fixed within SLAHighcJSON <=1.7.19 cJSON_Compare exponential time on deep nested equal objects causes DoSsecure-packages-rollingAug 5, 2026Aug 20, 2026Aug 12, 20267 days
Fixed within SLAHighcJSON through 1.7.19: Untrusted RFC 6902 patch triggers recursion, stack exhaustion DoSsecure-packages-rollingAug 5, 2026Aug 20, 2026Aug 12, 20267 days
Fixed within SLAMediumcJSON ≤1.7.19 JSON Patch non-atomic; failed replace/move deletes target memberssecure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 12, 20267 days
Fixed within SLAHighcJSON 1.7.19 and earlier: cJSON_Compare exponential complexity allows DoS via nested JSONsecure-packages-26.05Aug 5, 2026Aug 20, 2026Aug 12, 20267 days
Fixed within SLAHighcJSON <=1.7.19: Untrusted JSON Patch via cJSONUtils_ApplyPatches triggers uncontrolled recursion and stack exhaustion DoSsecure-packages-26.05Aug 5, 2026Aug 20, 2026Aug 12, 20267 days
Fixed within SLAMediumcJSON ≤1.7.19: non-atomic JSON Patch lets failed replace/move delete target memberssecure-packages-25.11Aug 5, 2026Sep 19, 2026Aug 12, 20267 days
Fixed within SLAHighcJSON <=1.7.19: cJSON_Compare exponential-time recursion causes DoS on deeply nested JSONsecure-packages-25.11Aug 5, 2026Aug 20, 2026Aug 12, 20267 days
Fixed within SLAHighcJSON <=1.7.19 DoS: stack exhaustion from uncontrolled recursion applying RFC6902 JSON Patchsecure-packages-25.11Aug 5, 2026Aug 20, 2026Aug 12, 20267 days
Fixed within SLAHighglibc ≤ 2.43 ungetwc wrong buffer causes under-read with overlapping encodings, data leak/crashsecure-packages-26.05Aug 4, 2026Aug 19, 2026Aug 12, 20267 days
Fixed within SLAHighglibc <=2.43 iconv assertion failure on IBM1390/IBM1399 may allow remote crashsecure-packages-26.05Aug 4, 2026Aug 19, 2026Aug 12, 20267 days
Fixed within SLAHighsecure-packages-rollingAug 10, 2026Aug 25, 2026Aug 12, 20261 day
Fixed within SLAHighsecure-packages-rollingAug 10, 2026Aug 25, 2026Aug 12, 20261 day
Fixed within SLAHighChrome UI input validation flaw enables sandbox escape from renderer via crafted HTML pre-151.0.7922.109secure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAHighSkia use-after-free in Chrome <151.0.7922.109 enables sandboxed RCE via crafted HTMLsecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLACriticalUse-after-free in Chrome Payments allows remote sandbox escape via crafted HTML pre-151.0.7922.109secure-packages-26.05Aug 11, 2026Aug 18, 2026Aug 11, 2026same day
Fixed within SLAHighV8 integer overflow enables sandboxed arbitrary code execution in Chrome <151.0.7922.109 via crafted HTMLsecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAHighSkia out-of-bounds write enables sandbox escape from compromised renderer in Chrome <151.0.7922.109secure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAHighUse-after-free in Chrome Views enables sandbox escape from compromised renderer via crafted HTMLsecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLACriticalUse-after-free in Chrome Media on Windows pre-151.0.7922.109 enables remote sandbox escape via crafted HTMLsecure-packages-26.05Aug 11, 2026Aug 18, 2026Aug 11, 2026same day
Fixed within SLACriticalCritical WebGL use-after-free allows remote sandbox escape in Android Chrome <151.0.7922.109secure-packages-26.05Aug 11, 2026Aug 18, 2026Aug 11, 2026same day
Fixed within SLAHighChrome pre-151.0.7922.109 Contextual Tasks input validation flaw allows remote privilege escalation via crafted HTMLsecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAHighChrome V8 sandbox arbitrary code execution via crafted HTML pre-151.0.7922.109secure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLALowChrome GPU integer overflow allowed cross-origin data leak via crafted page (pre-151.0.7922.109)secure-packages-26.05Aug 11, 2026Nov 9, 2026Aug 11, 2026same day
Fixed within SLACriticalGoogle Chrome WebAuthn use-after-free allows remote sandbox escape via crafted HTML (pre-151.0.7922.109)secure-packages-26.05Aug 11, 2026Aug 18, 2026Aug 11, 2026same day
Fixed within SLAHighUse-after-free in Chrome Extensions pre-151.0.7922.109 enables sandboxed arbitrary code executionsecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLACriticalInsufficient Chrome Codecs input validation enables remote sandbox escape via crafted HTML (pre-151.0.7922.109)secure-packages-26.05Aug 11, 2026Aug 18, 2026Aug 11, 2026same day
Fixed within SLAHighChrome Windows pre-151.0.7922.109 Media use-after-free enables sandbox escape via crafted HTMLsecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAHighChrome V8 out-of-bounds write before 151.0.7922.109 enables sandboxed RCE via crafted HTMLsecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLALowSkia uninitialized use in Chrome <151.0.7922.109 enables cross-origin data leak after renderer compromisesecure-packages-26.05Aug 11, 2026Nov 9, 2026Aug 11, 2026same day
Fixed within SLALowUninitialized use in Skia allows cross-origin data leak in Chrome before 151.0.7922.109 after renderer compromisesecure-packages-26.05Aug 11, 2026Nov 9, 2026Aug 11, 2026same day
Fixed within SLAHighChrome Views use-after-free enables remote heap corruption via crafted HTML requiring user gestures before 151.0.7922.109secure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAHighChrome Views use-after-free on Windows <151.0.7922.109 allows heap corruption via HTML and UI gesturessecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLACriticalANGLE out-of-bounds write in Chrome Android pre-151.0.7922.109 enables remote sandbox escapesecure-packages-26.05Aug 11, 2026Aug 18, 2026Aug 11, 2026same day
Fixed within SLAHighChrome Base heap buffer overflow pre-151.0.7922.109 via crafted malicious extensionsecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAHighUse-after-free in Chrome Payments enables sandbox escape via crafted HTML (pre-151.0.7922.109)secure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAHighSkia use-after-free in Chrome for Android pre-151.0.7922.109 enables sandbox escape via crafted HTMLsecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAHighGoogle Chrome Workers input validation flaw allows site isolation bypass before 151.0.7922.109secure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAHighChrome <151.0.7922.109 Navigation policy flaw allows renderer sandbox escape via crafted HTMLsecure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAHighChrome V8 use-after-free enables sandboxed RCE via crafted HTML pre-151.0.7922.109secure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLAHighV8 inappropriate implementation allows remote sandboxed RCE via crafted HTML in Chrome <151.0.7922.109secure-packages-26.05Aug 11, 2026Aug 26, 2026Aug 11, 2026same day
Fixed within SLACriticalCritical use-after-free in Google Chrome Aura on Linux <151.0.7922.109 enables remote sandbox escapesecure-packages-26.05Aug 11, 2026Aug 18, 2026Aug 11, 2026same day