← All tracked CVEs
Updated 07:01
538 fixed in the last 7 days
| CVE | Status | Severity | Summary | Distribution | Fixed |
|---|---|---|---|---|---|
| Fixed | Medium | Chrome Windows PlatformIntegration bug pre-154.0.8037.57 allows social-engineered HTML to bypass system access restrictions | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Transactions Platform race in Google Chrome <154.0.8037.57 leaks sensitive data via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Google Chrome <154.0.8037.57 Auth validation flaw lets renderer-compromised attacker steal data via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Improper input validation in Chrome Printing before 154.0.8037.57 enables RCE outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome V8 type confusion pre-154.0.8037.57 enables sandboxed code execution via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Externally controlled reference in Chrome DevTools pre-154.0.8037.57 lets adjacent attacker bypass system access restrictions | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome BrowserTag auth flaw lets compromised renderer bypass web origin policy via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Incorrect authorization in Chrome Network enables origin policy bypass via crafted HTML (pre-154.0.8037.57) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Use-after-free in Chrome DevTools enables sandbox RCE via crafted HTML (pre-154.0.8037.57) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chromecast use-after-free in Chrome <154.0.8037.57 allows code execution outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Missing authorization in Chrome Views on Mac <154.0.8037.57 allows UI spoofing by compromised renderer | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome NFC vulnerability allowed remote system access restrictions bypass via crafted HTML pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | XML bug in Chrome <154.0.8037.57 enables remote sandboxed code execution via HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome DevTools authorization bug (<154.0.8037.57) allows social-engineered cross-origin data exposure | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | DataTransfer information leak in Chrome <154.0.8037.57 via crafted HTML, renderer compromise, social engineering | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Google Chrome Core use-after-free lets compromised renderer bypass web origin policy pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Type confusion in Chrome IndexedDB pre-154.0.8037.57 enables sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Google Chrome Passwords pre-154.0.8037.57 improper input validation enables remote UI spoofing via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome FileSystem UI misrepresentation pre-154.0.8037.57 enables spoofed UI via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | DevTools CSRF bypasses web origin policy via crafted HTML in Chrome <154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome DevTools confused deputy enables web origin policy bypass via crafted HTML (pre-154.0.8037.57) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Google Chrome <154.0.8037.57 Editing race condition leaks sensitive data via crafted HTML and social engineering | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Low | Android Chrome prior to 154.0.8037.57 GPU uninitialized resource leaks out-of-sandbox memory via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome for Android <154.0.8037.57 authorization flaw lets co-installed app access privileged page | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | GPU out-of-bounds write in Chrome Android enables remote sandbox escape RCE pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Critical Chrome WindowDialog UAF before 154.0.8037.57 allows sandbox escape RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome iOS <154.0.8037.57 Navigation auth flaw enables sandbox escape and RCE | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Use-after-free in Chrome Verifier enables sandbox escape RCE via network pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Use-after-free in Google Chrome Bindings enables sandboxed RCE via crafted HTML (pre-154.0.8037.57) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome DevTools improper authorization allows origin policy bypass via crafted extension pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome pre-154.0.8037.57 Views use-after-free allows sandbox escape RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Critical Chrome Android ANGLE buffer overflow allows remote code execution outside sandbox | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Critical WebGL buffer overflow in Chrome Android prior to 154.0.8037.57 allows remote out-of-sandbox RCE | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Use-after-free in Chrome Bluetooth pre-154.0.8037.57 allows renderer sandbox escape, remote code execution | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Mac Chrome Updater use-after-free pre-154.0.8037.57 enables remote code execution outside sandbox via network | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chromoting UI misrepresentation in Chrome pre-154.0.8037.57 enables remote UI spoofing via crafted network traffic | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome Actor use-after-free before 154.0.8037.57 enables sandboxed RCE via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome DevTools race condition pre-154.0.8037.57 enabled site isolation bypass via crafted extension | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome WebAudio use-after-free allows sandbox remote code execution via crafted HTML pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Google Chrome V8 missing authorization allows remote origin policy bypass via crafted HTML pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Chrome Desktop <154.0.8037.57 input validation bug enables RCE outside sandbox via network | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Google Chrome Picture-in-Picture authorization flaw enabled origin policy bypass pre-154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Critical | Chrome pre-154.0.8037.57 ServiceWorker use-after-free enables RCE outside sandbox via crafted HTML | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | PDFium use-after-free enables sandboxed RCE via crafted PDF in Chrome <154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Android Chrome Messages UI spoofing via crafted HTML with social engineering (pre-154.0.8037.57) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Transactions Platform sensitive information leak via crafted HTML (pre-154.0.8037.57) | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | HID use-after-free enables sandbox escape code execution via crafted HTML in Chrome <154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Incorrect WebProtect reference resolution allows compromised renderer sandbox escape RCE in Chrome <154.0.8037.57 | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | High | Google Chrome Metrics use-after-free (pre-154.0.8037.57) enables remote code execution outside sandbox via crafted network traffic | secure-packages-25.11 | Oct 9, 2026 | |
| Fixed | Medium | Chrome Android <154.0.8037.57 Tint uninitialized variable enables remote outside-sandbox memory read via crafted HTML | secure-packages-25.11 | Oct 9, 2026 |