← All tracked CVEs
Updated 12:00
1007 fixed in the last 30 days
| CVE | Status | Severity | Summary | Distribution | Fixed |
|---|---|---|---|---|---|
| Fixed | High | Buffer overflow in Chrome Fonts pre-155.0.8059.39 allows renderer sandbox escape RCE via crafted HTML page | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Chrome <155.0.8059.39 GarbageCollection use-after-free allows sandboxed RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 WebAppInstalls UI misrepresentation enables social-engineering system access bypass via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Chrome Streaming use-after-free allows remote sandboxed RCE via crafted HTML (pre-155.0.8059.39) | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome pre-155.0.8059.39 WebOTP UI misrepresentation allows remote UI spoofing via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Critical | Use-after-free in Tint enables RCE outside sandbox via crafted HTML, Chrome <155.0.8059.39 | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Pre-155 iOS Chrome Passwords reference-resolution flaw enables sandbox escape arbitrary code execution from compromised renderer | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Chrome <155.0.8059.39 Select use-after-free enables sandboxed RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Animation info leak pre-155.0.8059.39 allows remote cross-origin data exfiltration via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Payments UI spoofing vulnerability in Chrome pre-155.0.8059.39 via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 WebAppInstalls auth flaw allows UI spoofing via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Chrome <155.0.8059.39 CSS use-after-free allows remote sandboxed code execution via HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | WebRTC use-after-free in Chrome <155.0.8059.39 enables sandbox RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome 'File' UI spoofing pre-155.0.8059.39 via crafted HTML and social engineering | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 WebAuthn missing authorization enables UI spoofing via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome GetUserMedia cleanup bug allows UI spoofing via crafted page from compromised renderer pre-155.0.8059.39 | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome DevTools auth flaw pre-155.0.8059.39 enables cross-origin data leak via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Google Chrome HTML use-after-free allows sandboxed RCE via crafted page (pre-155.0.8059.39) | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Remote info leak in Chrome Android Passwords <155.0.8059.39 via crafted HTML social engineering | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Chrome V8 race condition before 155.0.8059.39 enables sandboxed code execution via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Android <155.0.8059.39 info leak via co-installed app enables local attacker access to sensitive data | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Extensions auth bug before 155.0.8059.39 lets remote attacker access cross-origin data | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Chrome <155.0.8059.39 Fonts comparison bug enables sandboxed RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Chromoting UI misrepresentation enables remote UI spoofing via crafted traffic on macOS pre-155.0.8059.39 | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Missing Actor authorization in Chrome <155.0.8059.39 enables crafted HTML social engineering bypass of system restrictions | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Chrome Android Autofill auth flaw exposes sensitive data via crafted HTML pre-155.0.8059.39 | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Chrome <155.0.8059.39 Bindings use-after-free enables sandbox RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Chrome ANGLE buffer overflow before 155.0.8059.39 enables code execution outside sandbox via HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Incorrect authorization enables address bar spoofing via crafted HTML in Chrome <155.0.8059.39 | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | ANGLE uninitialized resource in Chrome <155.0.8059.39 enables remote cross-origin data exfiltration via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome prior to 155.0.8059.39 Permissions authorization flaw enables remote system access bypass via crafted traffic | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 Proxy Auth cleanup bug exposes data to adjacent attacker | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Android Chrome Omnibox info leak pre-155.0.8059.39 via crafted traffic, social engineering | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Critical | Incorrect authorization in Chrome Android Search pre-155.0.8059.39 allows remote sandbox escape RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | High-severity V8 type confusion in Chrome <155.0.8059.39 enables remote sandboxed RCE | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Critical | Chrome Android <155.0.8059.39 WebGL integer overflow enables remote arbitrary code execution outside sandbox | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Chrome Fonts race condition pre-155.0.8059.39 enables sandbox escape RCE from compromised renderer | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Critical | Chrome pre-155.0.8059.39 Permissions info leak enables site isolation bypass via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chromoting UI spoofing in Chrome on Windows <155.0.8059.39 via social engineering and crafted traffic | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Use-after-free in Chrome WebAudio enables sandboxed RCE via crafted HTML (pre-155.0.8059.39) | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Critical | Use-after-free in Chrome Network pre-155.0.8059.39 allows RCE outside sandbox via extension | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Use-after-free in Chrome Metrics <155.0.8059.39 allows sandbox escape RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 allows crafted HTML page to spoof browser UI elements via social engineering | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Uninitialized resource in Dawn on Chrome Mac enables remote sandbox memory disclosure via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Android pre-155.0.8059.39 Offline reference resolution flaw allows info leak via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome pre-155.0.8059.39 FileSystem UI misrepresentation enables remote system access restriction bypass via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Chrome Lens confused deputy enables post-renderer RCE outside sandbox pre-155.0.8059.39 | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Critical | Use-after-free in Chrome Core before 155.0.8059.39 enables remote sandbox-escape RCE via crafted HTML | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | Medium | Chrome <155.0.8059.39 Compositing input validation bug allows address bar spoofing via compromised renderer | secure-packages-26.05 | Oct 9, 2026 | |
| Fixed | High | Chrome Autofill <155.0.8059.39 missing authorization enables social-engineered data theft via crafted HTML page | secure-packages-26.05 | Oct 9, 2026 |