← All tracked CVEs
Updated 08:00
last 30 days
933 fixed within SLA
| CVE | Status | Severity | Summary | Release | Clock started | Deadline | Fixed | Time to fix |
|---|---|---|---|---|---|---|---|---|
| Fixed within SLA | Medium | Google Chrome pre-151.0.7922.72 CSS bug allows remote UXSS via crafted HTML | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | GetUserMedia cross-origin data leak in Chrome before 151.0.7922.72 via compromised renderer using crafted HTML page | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Google Chrome Credential Management vulnerability enables remote UI spoofing via crafted HTML pre-151.0.7922.72 | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Chrome Payments insufficient input validation allows UI spoofing via compromised renderer prior to 151.0.7922.72 | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Chrome iOS pre-151.0.7922.72 input validation flaw enables remote navigation restriction bypass | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Blink vulnerability allowed cross-origin data leak via crafted HTML in Chrome <151.0.7922.72 | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Inappropriate DevTools implementation enables same-origin policy bypass before Chrome 151.0.7922.72 via crafted HTML | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | High | Insufficient DevTools input validation enables privilege escalation via malicious Chrome extension (pre-151.0.7922.72) | secure-packages-rolling | Aug 5, 2026 | Aug 20, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Uninitialized use in ANGLE allowed cross-origin data leak in Chrome <151.0.7922.72 via crafted HTML page | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | High | Chrome Mac Audio use-after-free permits sandbox escape after renderer compromise via crafted HTML (pre-151.0.7922.72) | secure-packages-rolling | Aug 5, 2026 | Aug 20, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Chrome pre-151.0.7922.72 Loader bug leaks cross-origin data via crafted HTML page | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Chrome iOS <151.0.7922.72: Omnibox URL spoofing via crafted HTML page | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Chrome Isolated Web Apps navigation restriction bypass via crafted HTML (pre-151.0.7922.72) | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Chrome prior to 151.0.7922.72: Remote Site Isolation bypass via crafted HTML page | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Chrome Autofill pre-151.0.7922.72 cross-origin data leak via crafted HTML page | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Chrome <151.0.7922.72 Receiver policy bypass allows sandbox escape via crafted HTML | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Chrome <151.0.7922.72 PresentationAPI vulnerability allows cross-origin data leak via crafted HTML | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | High | Pre-151.0.7922.72 Chrome Variations input validation flaw enables heap corruption via privileged network attacker | secure-packages-rolling | Aug 5, 2026 | Aug 20, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Chrome Cast insufficient input validation allowed cross-origin data leak via crafted HTML (pre-151.0.7922.72) | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Chrome WebGL out-of-bounds read pre-151.0.7922.72 enables remote memory disclosure via crafted HTML page | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Uninitialized Skia use in Chrome <151.0.7922.72 leaks cross-origin data via crafted HTML | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Chrome macOS Media out-of-bounds read enables sandbox escape after renderer compromise (pre-151.0.7922.72) | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Chrome Cast insufficient input validation leaks cross-origin data via crafted HTML (pre-151.0.7922.72) | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Critical | Chrome <151.0.7922.72 WebSocket input validation bug enables sandbox escape from compromised renderer | secure-packages-rolling | Aug 5, 2026 | Aug 12, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Android Chrome WebView <151.0.7922.72: insufficient input validation enables cross-origin data leak | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | FedCM in Chrome <151.0.7922.72 allows remote same-origin policy bypass via crafted HTML | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | iOS Chrome pre-151.0.7922.72 cross-origin data leak via crafted HTML | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Chrome iOS <151.0.7922.72: Insufficient input validation enables UXSS script/HTML injection via malicious traffic | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Chrome before 151.0.7922.72 Presentation policy flaw allowed remote navigation bypass via crafted HTML | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Chrome Extensions security UI bug allowed spoofing via malicious extension before 151.0.7922.72 | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Blink same-origin policy bypass via crafted HTML in Chrome before 151.0.7922.72 | secure-packages-rolling | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | High | Insufficient input validation in Chrome Network enables sandbox escape via crafted HTML (pre-151.0.7922.72) | secure-packages-rolling | Aug 7, 2026 | Aug 22, 2026 | Aug 11, 2026 | 4 days | |
| Fixed within SLA | Medium | Chrome pre-151.0.7922.72 SiteIsolation flaw allows compromised renderer to bypass isolation via crafted HTML | secure-packages-rolling | Aug 7, 2026 | Sep 21, 2026 | Aug 11, 2026 | 4 days | |
| Fixed within SLA | High | V8 use-after-free in Chrome <151.0.7922.72 allows sandboxed remote code execution via crafted HTML page | secure-packages-rolling | Aug 7, 2026 | Aug 22, 2026 | Aug 11, 2026 | 4 days | |
| Fixed within SLA | High | Chrome Navigation use-after-free allowed sandbox escape via crafted HTML (pre-151.0.7922.72) | secure-packages-rolling | Aug 7, 2026 | Aug 22, 2026 | Aug 11, 2026 | 4 days | |
| Fixed within SLA | Critical | Critical use-after-free in Chrome Ozone pre-151.0.7922.72 enables remote crafted-HTML sandbox escape | secure-packages-rolling | Aug 7, 2026 | Aug 14, 2026 | Aug 11, 2026 | 4 days | |
| Fixed within SLA | Critical | Critical ANGLE input validation flaw enables remote sandbox escape via crafted HTML in Chrome <151.0.7922.72 | secure-packages-rolling | Aug 7, 2026 | Aug 14, 2026 | Aug 11, 2026 | 4 days | |
| Fixed within SLA | High | Critical race in Chrome Updater on Mac pre-151.0.7922.72 enables local privilege escalation | secure-packages-rolling | Aug 7, 2026 | Aug 22, 2026 | Aug 11, 2026 | 4 days | |
| Fixed within SLA | High | Critical Skia use-after-free in Google Chrome <151.0.7922.72 enables sandbox escape via crafted HTML | secure-packages-rolling | Aug 7, 2026 | Aug 22, 2026 | Aug 11, 2026 | 4 days | |
| Fixed within SLA | Critical | Chrome <151.0.7922.72: Views use-after-free enables sandbox escape via crafted HTML | secure-packages-rolling | Aug 7, 2026 | Aug 14, 2026 | Aug 11, 2026 | 4 days | |
| Fixed within SLA | High | Chrome Compositing use-after-free pre-151.0.7922.72 enables sandbox escape via crafted HTML | secure-packages-rolling | Aug 7, 2026 | Aug 22, 2026 | Aug 11, 2026 | 4 days | |
| Fixed within SLA | Medium | Windows Chrome Updater vulnerability enables local UI spoofing via malicious file (pre-151.0.7922.72) | secure-packages-26.05 | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Critical | Pre-151.0.7922.72 Chrome for Mac Tint flaw enabled remote sandbox escape via HTML | secure-packages-26.05 | Aug 5, 2026 | Aug 12, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | DevTools input validation flaw allowed remote attacker to bypass navigation via crafted HTML before 151.0.7922.72 | secure-packages-26.05 | Aug 4, 2026 | Sep 18, 2026 | Aug 11, 2026 | 7 days | |
| Fixed within SLA | High | Chrome Linux Views use-after-free allows remote heap corruption via crafted HTML, prior to 151.0.7922.72 | secure-packages-26.05 | Aug 5, 2026 | Aug 20, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Chrome Android GPU side-channel leaks cross-origin data via crafted HTML page pre-151.0.7922.72 | secure-packages-26.05 | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Chrome Cast pre-151.0.7922.72 allows remote cross-origin data leak via crafted HTML | secure-packages-26.05 | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Chrome pre-151.0.7922.72 CSS implementation enables UXSS script/HTML injection via crafted page | secure-packages-26.05 | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | GetUserMedia flaw leaks cross-origin data via crafted page after renderer compromise in Chrome <151.0.7922.72 | secure-packages-26.05 | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days | |
| Fixed within SLA | Medium | Credential Management UI spoofing via crafted HTML in Chrome prior to 151.0.7922.72 | secure-packages-26.05 | Aug 5, 2026 | Sep 19, 2026 | Aug 11, 2026 | 6 days |