← All tracked CVEs
Updated 08:00
1007 fixed in the last 30 days
| CVE | Status | Severity | Summary | Distribution | Fixed |
|---|---|---|---|---|---|
| Fixed | Medium | Chrome Extensions pre-155.0.8059.39 authorization flaw permits cross-origin data exfiltration via crafted extension | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Incorrect comparison in Chrome Fonts prior to 155.0.8059.39 enables sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chromoting UI spoofing in macOS Chrome pre-155.0.8059.39 via crafted traffic, social engineering | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 Actor authorization missing enables access restriction bypass via crafted HTML social engineering | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Android Chrome <155.0.8059.39 Autofill auth flaw exposes sensitive data via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Use-after-free in Chrome Bindings pre-155.0.8059.39 enables sandbox RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Buffer overflow in ANGLE allows code execution outside Chrome sandbox pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Incorrect authorization allows Chrome <155.0.8059.39 address bar spoof via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | ANGLE uninitialized resource allows cross-origin data exposure in Chrome <155.0.8059.39 via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 Permissions auth flaw enables remote system access bypass via crafted network traffic | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome pre-155.0.8059.39 proxy auth cleanup flaw leaks data to adjacent attacker via crafted traffic | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Information leak in Android Chrome Omnibox pre-155.0.8059.39 via crafted network traffic, social engineering | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Chrome Android Search auth bug allows RCE outside sandbox via crafted HTML pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Pre-155.0.8059.39 Chrome V8 type confusion enables sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | WebGL integer overflow in Chrome Android <155.0.8059.39 enables RCE outside sandbox | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome <155.0.8059.39 Fonts race condition enables sandbox escape RCE via crafted HTML. | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Google Chrome Permissions info leak pre-155.0.8059.39 enables site isolation bypass via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chromoting UI misrepresentation allows UI spoofing via crafted traffic on Windows Chrome <155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome <155.0.8059.39 WebAudio use-after-free allows sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Chrome Network use-after-free before 155.0.8059.39 enables RCE outside sandbox via crafted extension, social engineering | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome pre-155.0.8059.39 Metrics use-after-free enables post-renderer sandbox escape RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 UI misrepresentation allows remote UI spoofing via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Mac Chrome <155.0.8059.39 Dawn uninitialized resource allows crafted HTML to read memory outside sandbox | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Offline reference resolution info leak in Android Chrome <155.0.8059.39 with renderer compromise | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome FileSystem UI misrepresentation allows social-engineering system access restriction bypass pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome Google Lens confused deputy allowed code execution outside sandbox via crafted HTML pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Google Chrome Core use-after-free before 155.0.8059.39 allows remote RCE outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome pre-155.0.8059.39 Compositing validation bug enables address bar spoof after renderer compromise | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Missing authorization in Chrome Autofill before 155.0.8059.39 exposes sensitive data via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Low | Chrome <155.0.8059.39 Google Lens auth missing lets renderer-compromised attacker steal cross-origin data via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Uninitialized GPU resource allows remote out-of-sandbox memory read in Chrome Android <155.0.8059.39 via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Incorrect authorization in Google Chrome Sync before 155.0.8059.39 allows data exfiltration via crafted traffic | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome Android WebAPKs confused deputy bypasses web origin via crafted HTML, pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Google Chrome <155.0.8059.39 Passwords info leak via crafted HTML page (low severity) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Google Lens missing authorization enabled compromised renderer to leak cross-origin data via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Windows ANGLE uninitialized resource allows remote memory read outside sandbox pre-155.0.8059.39 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Google Chrome Windows Proxy sensitive data leak via crafted traffic by adjacent attacker (pre-155.0.8059.39) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Hugo code fence attribute values not escaped, enabling XSS via info string under default config | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | WebRTC buffer overflow in Chrome <154.0.8037.97 allows sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Google Chrome <154.0.8037.97 FedCM use-after-free enables remote code execution outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Skia integer overflow in Chrome <154.0.8037.97 enables cross-origin data leak via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Chrome <154.0.8037.97 WebGL out-of-bounds write enabling sandbox-escape RCE via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | SVG information leak in Chrome <154.0.8037.97 enables remote sensitive data exposure | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Chrome <154.0.8037.97 Windows FileSystem authorization flaw enables sandbox escape and RCE. | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | V8 type confusion in Chrome pre-154.0.8037.97 enables sandbox RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome Windows pre-154.0.8037.97 Contextual Tasks UAF enables RCE outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Use-after-free in Chrome MediaStream allows sandboxed RCE via crafted HTML (pre-154.0.8037.97) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome pre-154.0.8037.97 SVG use-after-free enables remote sandboxed code execution via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Integer overflow in Chrome Compositing leaks cross-origin data via crafted HTML (pre-154.0.8037.97) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Critical Android Chrome ANGLE buffer overflow pre-154.0.8037.92 enables remote sandbox-escape RCE | secure-packages-25.11 | Oct 9, 2026 |