← All tracked CVEs
Updated 11:00
1007 fixed in the last 30 days
| CVE | Status | Severity | Summary | Distribution | Fixed |
|---|---|---|---|---|---|
| Fixed | High | Chrome <155.0.8059.39 Storage use-after-free enables sandbox escape RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Google Chrome WebAudio info leak enables cross-origin data exfiltration via crafted page (pre-155.0.8059.39) | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Android Chrome pre-155.0.8059.39 WebShare auth bug let renderer-compromised attacker spoof UI via HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 SanitizerAPI vulnerability leaks sensitive information via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 DataTransfer auth bug lets compromised renderer access sensitive data via HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Use-after-free in Chrome Media (<155.0.8059.39) enables sandboxed RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Critical | Chromecast use-after-free in Chrome <155.0.8059.39 allows remote code execution outside sandbox | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 UI misrepresentation enables HTML-based UI spoofing via social engineering | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Uninitialized Skia resource in Chrome <155.0.8059.39 enables cross-origin data exfiltration | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Chrome Mac sandbox privilege escalation enables renderer-compromised code execution outside sandbox pre-155.0.8059.39 | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Chrome pre-155.0.8059.39 Fonts race lets compromised renderer execute code outside sandbox via HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Critical | Incomplete Dawn cleanup allows arbitrary code execution outside sandbox via crafted HTML in Chrome <155.0.8059.39 | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Type confusion in Chrome V8 <155.0.8059.39 enables sandboxed RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Chrome Windows Fonts use-after-free enables sandboxed RCE via crafted HTML pre-155.0.8059.39 | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Critical | Chrome <155.0.8059.39 UI authorization flaw enables remote RCE outside sandbox via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Chrome Android <155.0.8059.39: Transactions Platform auth bug exposes sensitive data via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Low | Chrome Core UAF pre-155.0.8059.39 let compromised renderer read cross-origin data via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Android <155.0.8059.39 PiP UI flaw enables address bar spoofing via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Android <155.0.8059.39 UI misrepresentation lets remote attacker spoof UI via crafted HTML Medium severity | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Google Chrome Paint discrepancy pre-155.0.8059.39 enables cross-origin data leak via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Use-after-free in Chrome Media pre-155.0.8059.39 enables sandboxed RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome pre-155.0.8059.39 Compositing integer overflow leaks cross-origin data via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Google Chrome Paint information leak before 155.0.8059.39 via crafted HTML enabled remote sensitive data exfiltration | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Critical | Chrome FileSystem auth flaw allowed sandbox escape RCE via crafted HTML (pre-155.0.8059.39) | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Android Chrome pre-155.0.8059.39 PDF auth flaw let co-installed app access sensitive data | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Android pre-155.0.8059.39 UI confused deputy allowed local access to privileged page via co-installed app | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Core reference resolution bug pre-155.0.8059.39 leaks cross-origin data via social engineering | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Incorrect authorization in WebAppInstalls Chrome Android allowed remote system access bypass via crafted HTML pre-155.0.8059.39 | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Critical | iOS Chrome pre-155.0.8059.39 missing authorization enables sandbox-escape RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Google Chrome pre-155.0.8059.39 Editing info leak via crafted HTML, social engineering | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 UI use-after-free lets compromised renderer spoof UI elements | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Chrome Media use-after-free allows sandbox remote code execution via crafted HTML (pre-155.0.8059.39) | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Android fullscreen UI bug allowed address bar spoofing before 155.0.8059.39 | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | UI spoofing vulnerability in Chromoting on macOS Chrome prior to 155.0.8059.39 | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Use-after-free in Chrome Modularization before 155.0.8059.39 allows sandbox RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Chrome <155.0.8059.39 Bluetooth authorization bug leaks data via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Android pre-155.0.8059.39 incorrect authorization lets local co-installed app exfiltrate data via social engineering | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Missing SignIn authorization in Chrome <155.0.8059.39 enables crafted extension data theft via social engineering | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Clickjacking in Chrome PermissionElement pre-155.0.8059.39 enables UI spoofing via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | FontAccess use-after-free enables origin policy bypass by renderer-compromised attacker (Chrome <155.0.8059.39) | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Chrome iOS pre-155 Selection authorization flaw exposes sensitive data via crafted HTML (Low severity) | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Android Chrome Autofill reference resolution bug leaks sensitive data via crafted HTML (pre-155.0.8059.39) | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Mobile Chrome on Android <155.0.8059.39 allows remote UI spoofing via crafted HTML. | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | ANGLE out-of-bounds read in Google Chrome <155.0.8059.39 via crafted HTML enables outside-sandbox memory read | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 Autofill AI bug leaks data via compromised renderer, crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Google Chrome pre-155.0.8059.39 PermissionElement UI misrepresentation enables remote spoofing via crafted HTML and social engineering | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | CacheStorage race in Chrome <155.0.8059.39 leads to out-of-sandbox memory read | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Critical | Use-after-free in Chrome Tabs on Mac <155.0.8059.39 allows sandbox escape RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 Unbounded Element auth bug allows UI spoofing via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | ANGLE type confusion in Chrome <155.0.8059.39 enables sandbox escape RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 |