← All tracked CVEs
Updated 06:01
241 fixed in the last 7 days
| CVE | Status | Severity | Summary | Distribution | Fixed |
|---|---|---|---|---|---|
| Fixed | High | Incorrect Core authorization in Chrome Windows pre-153.0.8010.47 enables local sandbox escape, arbitrary code | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Skia state validation bug in Chrome <153.0.8010.47 enables out-of-sandbox memory read via HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Chrome Compositing type confusion allowed sandboxed RCE via crafted HTML before 153.0.8010.47 | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Low | Incomplete GetUserMedia cleanup in Chrome <153.0.8010.47 leaks cross-origin data post-renderer compromise | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Critical | Use-after-free in Chrome DigitalCredentials <153.0.8010.47 enables remote RCE outside sandbox via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Critical | V8 integer overflow in Chrome <153.0.8010.47 allows sandboxed RCE via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Chrome Mac <153.0.8010.47 Extensions ref resolution bug allows renderer sandbox escape code execution | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Medium | Critical WebGL out-of-bounds read in Chrome Android <153.0.8010.47 via crafted HTML leaks sandbox memory | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Medium | Chrome <153.0.8010.47 CSS discrepancy allows remote sensitive information leak via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Chrome Input use-after-free enables sandbox escape RCE via crafted HTML (pre-153.0.8010.47) | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Use-after-free in Chrome Input before 153.0.8010.47 enables remote code execution outside sandbox | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Use-after-free in Chrome Internals before 153.0.8010.47 enables remote RCE outside sandbox via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Medium | Chrome <153.0.8010.47 ANGLE uninitialized resource allows remote memory read outside sandbox via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Critical | Chrome Core use-after-free enables RCE outside sandbox via crafted HTML before 153.0.8010.47 | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Medium | Missing authorization in Android Chrome <153.0.8010.47 lets local co-installed app access sensitive information | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Critical | Use-after-free in Google Chrome Auth before 153.0.8010.47 allows RCE outside sandbox | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Chrome <153.0.8010.47 ServiceWorker type confusion allows sandboxed remote code execution via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Medium | Pre-153.0.8010.47 Google Chrome Fonts discrepancy leaks sensitive data via crafted HTML page | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Medium | Missing authorization lets compromised renderer spoof UI via crafted HTML in Chrome <153.0.8010.47 | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Pre-153.0.8010.47 Chrome Mac Extensions race condition allows RCE outside sandbox via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Out-of-bounds write in Chrome ServiceWorker <153.0.8010.47 allows sandboxed remote code execution | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Critical | Use-after-free in Chrome WebAppInstalls <153.0.8010.47 enables remote RCE outside sandbox via HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Pre-153.0.8010.47 Chrome ServiceWorker type confusion allows sandboxed RCE via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | Low | Chrome pre-153.0.8010.47 network race lets compromised renderer exfiltrate cross-origin data via crafted HTML | secure-packages-25.11 | Sep 18, 2026 | |
| Fixed | High | Chrome Mac <153.0.8010.47 Extensions race condition enables code execution outside sandbox via UI interaction | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Low | Skia use-after-free in Chrome <153.0.8010.47 enables renderer-compromised cross-origin data exfiltration | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Medium | Chrome Compositing integer overflow before 153.0.8010.47 leaks cross-origin data via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | High | V8 use-after-free enables sandbox RCE via crafted HTML in Chrome <153.0.8010.47 | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Medium | Chrome Mac <153.0.8010.47 PlatformIntegration race condition leaks sensitive data via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | High | Chrome <153.0.8010.47 Core race condition allows sandbox escape and RCE via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | High | Chrome CacheStorage type confusion <153.0.8010.47 enables remote sandboxed code execution via HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Medium | Skia uninitialized resource in Chrome <153.0.8010.47 enables cross-origin data exposure | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Medium | Missing authorization in Chrome Transactions Platform enables UI spoofing after renderer compromise (pre-153.0.8010.47) | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Critical | Improper ANGLE input validation in Chrome <153.0.8010.47 allows RCE outside sandbox | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | High | Use-after-free in Chrome PDF enables sandboxed RCE via crafted HTML pre-153.0.8010.47 | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | High | Use-after-free in Chrome DOM pre-153.0.8010.47 allows sandboxed RCE via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | High | Chrome WebUI authorization flaw pre-153.0.8010.47 allows renderer-compromised RCE outside sandbox via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | High | Google Chrome Windows pre-153.0.8010.47 Core auth bug enables local sandbox escape arbitrary code execution | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | High | Chrome <153.0.8010.47 Skia validation bug enables compromised renderer to read outside sandbox | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | High | High severity Chrome pre-153.0.8010.47 Compositing type confusion allows remote sandboxed code execution via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Low | Chrome pre-153.0.8010.47 GetUserMedia cleanup bug enabled cross-origin data exfiltration via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Critical | Chrome <153.0.8010.47 DigitalCredentials UAF enables RCE outside sandbox via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Critical | V8 integer overflow in Chrome <153.0.8010.47 enabling sandboxed RCE via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | High | Mac Chrome Extensions ref resolution bug enables sandbox escape RCE pre-153.0.8010.47 | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Medium | Chrome Android <153.0.8010.47 WebGL OOB read leaks sandbox memory via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Medium | Observable CSS discrepancy in Google Chrome pre-153.0.8010.47 leaks data via crafted HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | High | Chrome Input UAF pre-153.0.8010.47 enables RCE outside sandbox from compromised renderer | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | High | Chrome Input use-after-free before 153.0.8010.47 allows remote code execution outside sandbox | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | High | Chrome Internals use-after-free pre-153.0.8010.47 allows RCE outside sandbox via HTML | secure-packages-rolling | Sep 18, 2026 | |
| Fixed | Medium | Chrome <153.0.8010.47 ANGLE uninitialized resource enables remote cross-sandbox memory read via crafted HTML page | secure-packages-rolling | Sep 18, 2026 |