← All tracked CVEs
Updated 09:00
1007 fixed in the last 30 days
| CVE | Status | Severity | Summary | Distribution | Fixed |
|---|---|---|---|---|---|
| Fixed | Medium | Pre-154.0.8037.92 Chrome SiteIsolation auth flaw: compromised renderer bypasses web origin policy | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | High-severity WebUI XSS in Chrome <154.0.8037.92 bypasses web origin to privileged page | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | High-severity V8 type confusion enables sandboxed RCE in Chrome <154.0.8037.92 via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Incorrect WebView authorization in Android Chrome enables sandbox escape RCE pre-154.0.8037.92 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome V8 type confusion allowed sandbox RCE via crafted HTML before 154.0.8037.92 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Skia uninitialized resource leaks cross-origin data in Chrome before 154.0.8037.92 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome pre-154.0.8037.92 Picture-in-Picture use-after-free enabling renderer sandbox escape, RCE | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome V8 type confusion enables sandboxed RCE via crafted HTML before 154.0.8037.92 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome V8 type confusion enables sandbox RCE via crafted HTML pre-154.0.8037.92 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Missing CORS authorization in Chrome <154.0.8037.92 lets compromised renderer bypass origin policy | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Low | Pre-154.0.8037.92 Chrome GPU uninitialized resource allows post-renderer-compromise sandbox memory read | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | WebGL out-of-bounds read in Chrome prior to 154.0.8037.92 leaks sandbox memory via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome Windows Mojo privilege mismanagement allows local sandbox escape and arbitrary code execution | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Use-after-free in Chrome Views <154.0.8037.92 enables remote code exec outside sandbox | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Low | Uninitialized Chrome Media resource enables out-of-sandbox memory read via crafted HTML (Windows <154.0.8037.92) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome TabStrip UI misrepresentation allows spoofing via crafted HTML before 154.0.8037.92 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Pre-154.0.8037.92 Chrome Windows ANGLE uninitialized resource allows memory read outside sandbox via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Omnibox UI misrepresentation allows address bar spoofing via crafted HTML on Chrome for Android pre-154.0.8037.92 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Low | Chrome Android GPU uninitialized resource permits out-of-sandbox memory read after renderer compromise via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | pre-154.0.8037.92 Chrome Payments missing auth lets compromised renderer bypass web origin via crafted HTML page | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Chrome FullScreen use-after-free allows remote code execution outside sandbox via crafted HTML pre-154.0.8037.92 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Chrome Views use-after-free (<154.0.8037.92) allows arbitrary code execution outside sandbox | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Dawn uninitialized resource in Android Chrome <154.0.8037.92 allows sandbox memory read via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Use-after-free in Chrome Bluetooth pre-154.0.8037.92 allows remote sandbox escape and RCE | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome iOS SignIn UI misrepresentation allows remote UI spoofing via crafted HTML before 154.0.8037.92 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Chrome pre-154.0.8037.92 Passwords use-after-free enabling remote code execution outside sandbox via crafted HTML page | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Android pre-154.0.8037.92 GPU uninitialized resource enables cross-origin data leak via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome V8 buffer overflow before 154.0.8037.92 allows sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Google Chrome pre-154 GPU out-of-bounds write enables sandbox escape and RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | V8 type confusion allows sandboxed RCE in Chrome before 154.0.8037.92 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | cgroup css_task_iter may resurrect zero-refcount dying tasks, causing use-after-free race | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Medium | pmem_submit_bio records PREFLUSH error but overwritten by FUA, allowing writes post-failure | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Medium | staging: rtl8723bs: kfree used on vzalloc-backed HalData in rtw_sdio_if1_init error path | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Medium | nvmet-rdma leaks queues and IB resources when connect backlog exceeded by pending disconnects | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Medium | Bluetooth hci_core race: power_on before msft_register causes uninitialized MSFT filter_lock mutex use | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | High | Btrfs use-after-free via double transaction end after RAID stripe extent allocation failure | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Medium | btrfs bioc_list memory leak on btrfs_ordered_extent errors and skipped RAID insertion | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Medium | Btrfs qgroup snapshot accounting triggers reloc root, corrupts backrefs, flips filesystem read-only | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Medium | BPF tp_btf dereferences signal_generate/signal_deliver siginfo 0/1 sentinels, panicking kernel | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Medium | ASoC Intel avs: strace_open leaks module ref on subsequent failure after try_module_get | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Medium | Out-of-bounds init_configs access in ASoC Intel avs due to invalid ID indexing | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | High | bcmasp: stale txcb->last on descriptor reuse frees SKB mid-transmit | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Medium | bcmasp tx_spb_ring_full() checks same descriptor slot repeatedly due to next_index reset | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | High | mlxsw spectrum_ptp: napi_gro_receive() called from GC workqueue causes concurrent GRO list corruption, panic | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | High | OpenSSL 4.0 X.509 extension cache race causes use-after-free, DoS in multithreaded TLS | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Medium | GStreamer gst-plugins-good avidemux FUJIFILM strd underflow causes heap OOB read/write, info leak, crash | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | High | Chrome: WebRTC buffer overflow enables remote sandboxed code execution via crafted HTML (pre-154.0.8037.97) | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Critical | Chrome FedCM use-after-free before 154.0.8037.97 enables remote code execution outside sandbox via HTML | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Medium | Skia integer overflow in Chrome before 154.0.8037.97 enables cross-origin data exfiltration via crafted HTML | secure-packages-rolling | Oct 9, 2026 | |
| Fixed | Critical | Critical WebGL out-of-bounds write in Chrome <154.0.8037.97 enables remote sandbox-escape RCE | secure-packages-rolling | Oct 9, 2026 |