Skip to content
← All tracked CVEs

Updated 08:00

last 30 days

933 fixed within SLA

CVEStatusSeveritySummaryReleaseClock startedDeadlineFixedTime to fix
Fixed within SLAMediumInsufficient input validation in Chrome Payments pre-151.0.7922.72 enables UI spoofing from compromised renderersecure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome iOS pre-151.0.7922.72: Untrusted input validation flaw enables remote navigation restrictions bypasssecure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumBlink cross-origin data leak via crafted HTML in Chrome before 151.0.7922.72secure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome DevTools SOP bypass via crafted HTML before 151.0.7922.72; remote attacker, Mediumsecure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAHighInsufficient DevTools input validation in Chrome allows privilege escalation via crafted extension (<151.0.7922.72)secure-packages-26.05Aug 5, 2026Aug 20, 2026Aug 11, 20266 days
Fixed within SLAMediumANGLE uninitialized use in Chrome <151.0.7922.72 enables cross-origin data leak via crafted HTML pagesecure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAHighChrome Mac Audio use-after-free enables sandbox escape pre-151.0.7922.72 via crafted HTMLsecure-packages-26.05Aug 5, 2026Aug 20, 2026Aug 11, 20266 days
Fixed within SLAMediumPre-151.0.7922.72 Chrome Loader leaks cross-origin data via crafted HTMLsecure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome iOS prior to 151.0.7922.72 Omnibox spoofing via crafted HTML (incorrect security UI)secure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome Isolated Web Apps allowed remote bypass of navigation restrictions via crafted HTML pre-151.0.7922.72secure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumGoogle Chrome Site Isolation bypass before 151.0.7922.72 via crafted HTML pagesecure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome Autofill flaw pre-151.0.7922.72 enables remote cross-origin data leak via crafted HTMLsecure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumReceiver policy bypass in Chrome pre-151.0.7922.72 enables sandbox escape from compromised renderer via crafted HTMLsecure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumPresentationAPI in Chrome <151.0.7922.72 leaked cross-origin data via crafted HTML pagesecure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAHighInsufficient input validation in Chrome Variations pre-151.0.7922.72 allows heap corruption by privileged network attackersecure-packages-26.05Aug 5, 2026Aug 20, 2026Aug 11, 20266 days
Fixed within SLAMediumGoogle Chrome Cast input validation flaw leaks cross-origin data via crafted HTMLsecure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumWebGL out-of-bounds read in Chrome pre-151.0.7922.72 allows remote memory disclosuresecure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumSkia uninitialized use in Chrome <151.0.7922.72 leaks cross-origin data via crafted HTMLsecure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome Mac Media out-of-bounds read allows sandbox escape after renderer compromise pre-151.0.7922.72secure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumInsufficient untrusted input validation in Chrome Cast enables cross-origin data leak via crafted HTML (pre-151.0.7922.72)secure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLACriticalWebSockets input validation flaw enables sandbox escape from compromised renderer in Chrome <151.0.7922.72secure-packages-26.05Aug 5, 2026Aug 12, 2026Aug 11, 20266 days
Fixed within SLAMediumAndroid Chrome WebView untrusted input validation flaw leaks cross-origin data via compromised renderer pre-151.0.7922.72secure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumFedCM SOP bypass in Chrome prior to 151.0.7922.72 via crafted HTML pagesecure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome for iOS <151.0.7922.72 cross-origin data leak via crafted HTML pagesecure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome iOS <151.0.7922.72 UXSS from insufficient validation of untrusted network inputsecure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumChrome pre-151.0.7922.72 Presentation policy flaw enables remote navigation bypass via crafted HTMLsecure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumGoogle Chrome pre-151 Extensions UI security flaw enables malicious extension-based UI spoofingsecure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAMediumBlink same-origin policy bypass in Chrome before 151.0.7922.72 via crafted HTMLsecure-packages-26.05Aug 5, 2026Sep 19, 2026Aug 11, 20266 days
Fixed within SLAHighChrome Network input validation flaw enables sandbox escape from compromised renderer via HTMLsecure-packages-26.05Aug 7, 2026Aug 22, 2026Aug 11, 20264 days
Fixed within SLAMediumSite Isolation bypass in Chrome <151.0.7922.72 via crafted HTML after renderer compromisesecure-packages-26.05Aug 7, 2026Sep 21, 2026Aug 11, 20264 days
Fixed within SLAHighHigh severity V8 use-after-free enables sandboxed RCE via crafted HTML in Chrome <151.0.7922.72secure-packages-26.05Aug 7, 2026Aug 22, 2026Aug 11, 20264 days
Fixed within SLAHighChrome <151.0.7922.72 Navigation use-after-free enables sandbox escape via crafted HTMLsecure-packages-26.05Aug 7, 2026Aug 22, 2026Aug 11, 20264 days
Fixed within SLACriticalCritical Chrome Ozone use-after-free enables remote sandbox escape via crafted HTML before 151.0.7922.72secure-packages-26.05Aug 7, 2026Aug 14, 2026Aug 11, 20264 days
Fixed within SLACriticalCritical ANGLE input validation flaw enables sandbox escape via crafted HTML (Chrome <151.0.7922.72)secure-packages-26.05Aug 7, 2026Aug 14, 2026Aug 11, 20264 days
Fixed within SLAHighRace in macOS Chrome Updater allows local privilege escalation before 151.0.7922.72 via malicious filesecure-packages-26.05Aug 7, 2026Aug 22, 2026Aug 11, 20264 days
Fixed within SLAHighSkia use-after-free enables sandbox escape via crafted HTML in Chrome <151.0.7922.72secure-packages-26.05Aug 7, 2026Aug 22, 2026Aug 11, 20264 days
Fixed within SLACriticalUse-after-free in Views enables sandbox escape on Chrome before 151.0.7922.72 via crafted HTMLsecure-packages-26.05Aug 7, 2026Aug 14, 2026Aug 11, 20264 days
Fixed within SLAHighUse-after-free in Chrome Compositing allows sandbox escape from compromised renderer via HTML (pre-151.0.7922.72)secure-packages-26.05Aug 7, 2026Aug 22, 2026Aug 11, 20264 days
Fixed within SLAHighFFmpeg ADX decoder OOB read/write on mid-stream extradata channel change (v4.4–8.1.2)secure-packages-rollingJul 29, 2026Aug 13, 2026Aug 11, 202613 days
Fixed within SLAHighFFmpeg 0.6.3–8.1.2 RTP/ASF demuxer infinite loop DoS in rtp_asf_fix_headersecure-packages-rollingJul 29, 2026Aug 13, 2026Aug 11, 202613 days
Fixed within SLAHighFFmpeg 0.7.1–8.1.2 S/PDIF muxer out-of-bounds read via crafted DTS core_sizesecure-packages-rollingJul 29, 2026Aug 13, 2026Aug 11, 202613 days
Fixed within SLAHighFFmpeg 4.4–8.1.2 NVDEC double-free enables memory corruption via crafted video filessecure-packages-rollingJul 29, 2026Aug 13, 2026Aug 11, 202613 days
Fixed within SLAHighFFmpeg 8.0-8.1.2 Vulkan HEVC decoder stack buffer overflow enables remote code executionsecure-packages-rollingJul 29, 2026Aug 13, 2026Aug 11, 202613 days
Fixed within SLAHighFFmpeg 2.1-8.1.2 VobSub demuxer heap overflow from .sub/.idx with excessive stream IDssecure-packages-rollingJul 29, 2026Aug 13, 2026Aug 11, 202613 days
Fixed within SLAMediumPartial IO fetch leaves canceled flags set, blocking ublk io_uring cancel completionsecure-packages-rollingJul 27, 2026Sep 10, 2026Aug 11, 202615 days
Fixed within SLAMediumpowerpc/64s race between move_pages PMD migration and munmap hits VM_BUG_ON in pmdp_huge_get_and_clear_fullsecure-packages-rollingJul 27, 2026Sep 10, 2026Aug 11, 202615 days
Fixed within SLAHighUse-after-free when querying offloaded BPF map/prog due to netns teardown racesecure-packages-rollingJul 27, 2026Aug 11, 2026Aug 11, 202615 days
Fixed within SLAMediumice: race between ice_free_tx_tstamp_ring and ice_tx_map causes NULL derefsecure-packages-rollingJul 16, 2026Aug 30, 2026Aug 11, 202626 days
Fixed within SLAMediumice: Potential NULL dereference in ice_set_ringparam() error path with TXTIME flag setsecure-packages-rollingJul 16, 2026Aug 30, 2026Aug 11, 202626 days
Fixed within SLAMediumublk I/O cancellation may never complete due to stale per-IO canceled flag after partial fetchsecure-packages-26.05Jul 27, 2026Sep 10, 2026Aug 11, 202615 days