← All tracked CVEs
Updated 09:00
972 in progress
| CVE | Status | Severity | Summary | Distribution |
|---|---|---|---|---|
| In progress | Medium | Android Chrome <155.0.8059.39 fullscreen UI bug allows address bar spoofing | secure-packages-rolling | |
| In progress | High | Use-after-free in Chrome Media before 155.0.8059.39 enables sandbox RCE via crafted HTML | secure-packages-rolling | |
| In progress | Medium | Chrome <155.0.8059.39 UI use-after-free lets compromised renderer spoof UI via crafted HTML | secure-packages-rolling | |
| In progress | Medium | Chrome pre-155.0.8059.39 Editing sensitive data leak via crafted HTML, remote social engineering | secure-packages-rolling | |
| In progress | Medium | Open redirect in Chrome AppManifest allowed origin bypass via crafted HTML (pre-155.0.8059.39) | secure-packages-rolling | |
| In progress | Critical | Chrome iOS pre-155.0.8059.39 missing authorization enables RCE outside sandbox via crafted HTML | secure-packages-rolling | |
| In progress | Medium | Chrome Android pre-155.0.8059.39 WebAppInstalls auth bug allows remote system access restrictions bypass via crafted HTML | secure-packages-rolling | |
| In progress | Medium | Chrome Core incorrect reference resolution enables cross-origin data leak before 155.0.8059.39 | secure-packages-rolling | |
| In progress | Medium | Android Chrome UI confused deputy lets local app bypass access to privileged pages pre-155.0.8059.39 | secure-packages-rolling | |
| In progress | Medium | Incorrect PDF authorization in Chrome Android <155.0.8059.39 exposes sensitive data via co-installed app | secure-packages-rolling | |
| In progress | Critical | Chrome <155.0.8059.39 FileSystem authorization flaw enables remote sandbox escape RCE via crafted HTML social engineering | secure-packages-rolling | |
| In progress | Medium | Chrome Paint info leak via crafted HTML enables remote data exposure (Medium; pre-155.0.8059.39) | secure-packages-rolling | |
| In progress | Medium | High-severity Chrome Compositing integer overflow leaks cross-origin data pre-155.0.8059.39 | secure-packages-rolling | |
| In progress | Medium | Google Chrome prior to 155.0.8059.39 Input auth flaw enables UI spoofing via crafted HTML | secure-packages-rolling | |
| In progress | High | Google Chrome Payments info leak via crafted HTML and social engineering (<155.0.8059.39) | secure-packages-rolling | |
| In progress | High | Use-after-free in Chrome Media before 155.0.8059.39 allows sandboxed RCE via crafted HTML | secure-packages-rolling | |
| In progress | Medium | Pre-155.0.8059.39 Chrome Paint flaw allows remote cross-origin data leak via crafted HTML | secure-packages-rolling | |
| In progress | Medium | Chrome for Android <155.0.8059.39 allows remote UI spoofing via crafted HTML | secure-packages-rolling | |
| In progress | Medium | Chrome Android <155.0.8059.39: PiP UI misrepresentation allows address bar spoofing via crafted HTML | secure-packages-rolling | |
| In progress | Low | Chrome Core use-after-free allows compromised renderer to read cross-origin data pre-155.0.8059.39 | secure-packages-rolling | |
| In progress | High | Chrome Android Transactions Platform auth flaw pre-155.0.8059.39 leaks sensitive data via crafted HTML | secure-packages-rolling | |
| In progress | Critical | UI authorization flaw in Chrome <155.0.8059.39 enabling sandbox-escape arbitrary code execution via crafted HTML | secure-packages-rolling | |
| In progress | High | Use-after-free in Chrome Fonts on Windows pre-155.0.8059.39 enables sandboxed RCE via HTML | secure-packages-rolling | |
| In progress | High | V8 type confusion enables sandboxed RCE via crafted HTML in Chrome <155.0.8059.39 | secure-packages-rolling | |
| In progress | Critical | Incomplete cleanup in Dawn enables remote sandbox escape in Chrome <155.0.8059.39 | secure-packages-rolling | |
| In progress | Medium | ANGLE uninitialized resource in Chrome Windows <155.0.8059.39 allows remote out-of-sandbox memory read | secure-packages-rolling | |
| In progress | High | Chrome Fonts race allows arbitrary code execution outside sandbox pre-155.0.8059.39 | secure-packages-rolling | |
| In progress | High | Chrome Mac pre-155.0.8059.39 sandbox escape allows code execution outside sandbox via HTML | secure-packages-rolling | |
| In progress | Medium | Skia uninitialized resource in Chrome pre-155.0.8059.39 enables cross-origin data exposure via crafted HTML | secure-packages-rolling | |
| In progress | Medium | Chrome <155.0.8059.39 UI spoofing via crafted HTML, social engineering | secure-packages-rolling | |
| In progress | Critical | Chromecast use-after-free in Chrome <155.0.8059.39 enables RCE outside sandbox via crafted HTML | secure-packages-rolling | |
| In progress | High | Use-after-free in Chrome Media allows sandbox RCE via crafted HTML pre-155.0.8059.39 | secure-packages-rolling | |
| In progress | Medium | Chrome <155.0.8059.39 Site Isolation bypass via missing authorization after renderer compromise | secure-packages-rolling | |
| In progress | Medium | WebAudio uninitialized resource in Chrome before 155.0.8059.39 allows remote sandbox memory read | secure-packages-rolling | |
| In progress | High | Missing authorization in iOS Chrome <155.0.8059.39 lets remote attacker exfiltrate data via HTML | secure-packages-rolling | |
| In progress | Medium | Chrome DataTransfer missing authorization pre-155.0.8059.39 allows compromised renderer to access sensitive data | secure-packages-rolling | |
| In progress | Medium | Chrome USB authorization bug pre-155.0.8059.39 lets crafted extension bypass system access via social engineering | secure-packages-rolling | |
| In progress | Medium | Chrome <155.0.8059.39 SanitizerAPI bug leaks data via remote crafted HTML | secure-packages-rolling | |
| In progress | Medium | Incorrect WebShare authorization lets compromised renderer spoof UI in Chrome Android <155.0.8059.39 | secure-packages-rolling | |
| In progress | Medium | WebAudio info leak enabled cross-origin data exfiltration in Chrome <155.0.8059.39 | secure-packages-rolling | |
| In progress | High | Chrome pre-155.0.8059.39 Storage UAF enables sandbox escape RCE via crafted HTML after renderer compromise | secure-packages-rolling | |
| In progress | Medium | Chrome <155.0.8059.39 Glic cleanup flaw leaks cross-origin data via social-engineered HTML | secure-packages-rolling | |
| In progress | Medium | Dawn uninitialized resource in Chrome Android <155.0.8059.39 enables remote sandbox memory read | secure-packages-rolling | |
| In progress | Medium | iOS Chrome <155.0.8059.39 authorization flaw allows social-engineered HTML bypass of system access restrictions | secure-packages-rolling | |
| In progress | Medium | Google Chrome Media authorization flaw pre-155.0.8059.39 enables cross-origin data leak via crafted HTML page | secure-packages-rolling | |
| In progress | Low | Out-of-bounds read in Skia before Chrome 155.0.8059.39 enables memory disclosure via crafted file | secure-packages-rolling | |
| In progress | Medium | Chrome Android Messages clickjacking enabled remote UI spoofing via crafted HTML pre-155.0.8059.39 | secure-packages-rolling | |
| In progress | Critical | Chrome Media out-of-bounds write <155.0.8059.39 enables RCE outside sandbox via HTML | secure-packages-rolling | |
| In progress | Medium | Chrome Extensions incorrect authorization enables UI spoofing via crafted extension (pre-155.0.8059.39) | secure-packages-rolling | |
| In progress | High | Accessibility auth flaw in Chrome <155.0.8059.39 enables compromised renderer site isolation bypass via crafted HTML. | secure-packages-rolling |