CVE-2026-95325
Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to...
9.6 CriticalFix available
Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.34%Down 0.1 points since Sep 30, 2026
What each source reports
CVE List Score used
Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
- Record
CVE-2026-95325- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
EUVDEUVD-2026-89132
Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
- Record
EUVD-2026-89132- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-365g-qr8c-6v6r
Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to...
Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
- Record
GHSA-365g-qr8c-6v6r- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
NVD
Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
- Record
CVE-2026-95325- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-95325
Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
- Record
DEBIAN-CVE-2026-95325- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:91580
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
-
chromium-browser: angle: Use after free in ANGLE (CVE-2026-95325)
-
chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-95331)
-
chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-106304)
-
chromium-browser: angle: Buffer overflow in ANGLE (CVE-2026-106247)
-
chromium-browser: angle: Type confusion in ANGLE (CVE-2026-106293)
-
chromium-browser: angle: Uninitialized resource in ANGLE (CVE-2026-106245)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:91580- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 6 moreShow less
OSVRLSA-2026:91636
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
-
chromium-browser: angle: Use after free in ANGLE (CVE-2026-95325)
-
chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-95331)
-
chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-106304)
-
chromium-browser: angle: Buffer overflow in ANGLE (CVE-2026-106247)
-
chromium-browser: angle: Type confusion in ANGLE (CVE-2026-106293)
-
chromium-browser: angle: Uninitialized resource in ANGLE (CVE-2026-106245)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:91636- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALSA-2026:91580 No score
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
- chromium-browser: angle: Use after free in ANGLE (CVE-2026-95325)
- chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-95331)
- chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-106304)
- chromium-browser: angle: Buffer overflow in ANGLE (CVE-2026-106247)
- chromium-browser: angle: Type confusion in ANGLE (CVE-2026-106293)
- chromium-browser: angle: Uninitialized resource in ANGLE (CVE-2026-106245)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:91580- Updated
- 2026-11-04
OSVALSA-2026:91636 No score
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
- chromium-browser: angle: Use after free in ANGLE (CVE-2026-95325)
- chromium-browser: angle: Out of bounds write in ANGLE (CVE-2026-95331)
- chromium-browser: angle: Out of bounds read in ANGLE (CVE-2026-106304)
- chromium-browser: angle: Buffer overflow in ANGLE (CVE-2026-106247)
- chromium-browser: angle: Type confusion in ANGLE (CVE-2026-106293)
- chromium-browser: angle: Uninitialized resource in ANGLE (CVE-2026-106245)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:91636- Updated
- 2026-11-04
OSVopenSUSE-SU-2026:11888-1 No score
chromedriver-154.0.8037.57-1.1 on GA media
These are all security issues fixed in the chromedriver-154.0.8037.57-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11888-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:21987-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Changes in chromium:
- Chromium 154.0.8037.57 (boo#1282334):
- CVE-2026-95350: Buffer overflow in ANGLE
- CVE-2026-95357: Out of bounds write in GPU
- CVE-2026-95339: Use after free in ServiceWorker
- CVE-2026-95281: Buffer overflow in ANGLE
- CVE-2026-95313: Use after free in Fullscreen
- CVE-2026-95349: Buffer overflow in WebGL
- CVE-2026-95284: Buffer overflow in ANGLE
- CVE-2026-95322: Out of bounds write in GPU
- CVE-2026-95329: Out of bounds write in WebGL
- CVE-2026-95356: Use after free in WindowDialog
- CVE-2026-95310: Use after free in AdFilter
- CVE-2026-95301: Missing authorization in Extensions
- CVE-2026-95291: UI misrepresentation in SecurityIndicators
- CVE-2026-95355: Incorrect authorization in Navigation
- CVE-2026-95315: Use after free in Aura
- CVE-2026-95298: Use after free in Browser
- CVE-2026-95372: Use after free in Chromecast
- CVE-2026-95324: Uninitialized resource in GPU
- CVE-2026-95283: Buffer overflow in Tint
- CVE-2026-95293: Uninitialized resource in GPU
- CVE-2026-95274: Improper output encoding in DevTools
- CVE-2026-95282: Use after free in Platform
- CVE-2026-95373: Use after free in DevTools
- CVE-2026-95277: Use after free in Views
- CVE-2026-95348: Use after free in Bluetooth
- CVE-2026-95335: Use after free in HID
- CVE-2026-95338: Use after free in PDFium
- CVE-2026-95318: Buffer overflow in Video
- CVE-2026-95286: Type confusion in Bindings
- CVE-2026-95365: Type confusion in IndexedDB
- CVE-2026-95343: Use after free in WebAudio
- CVE-2026-95280: Race condition in V8
- CVE-2026-95304: Out of bounds write in V8
- CVE-2026-95306: Type confusion in V8
- CVE-2026-95299: Use after free in GPU
- CVE-2026-95351: Use after free in Views
- CVE-2026-95287: Missing authorization in Navigation
- CVE-2026-95366: Use of released resource in Core
- CVE-2026-95382: Improper input validation in Auth
- CVE-2026-95381: Improper input validation in Printing
- CVE-2026-95331: Out of bounds write in ANGLE
- CVE-2026-95297: Missing authorization in Contextual Tasks
- CVE-2026-95375: Incorrect authorization in BrowserTag
- CVE-2026-95302: Incorrect authorization in WebAPKs
- CVE-2026-95362: Cross-site request forgery in DevTools
- CVE-2026-95369: Inappropriate implementation in XML
- CVE-2026-95376: Externally controlled reference in DevTools
- CVE-2026-95359: Uninitialized resource in GPU
- CVE-2026-95294: UI misrepresentation in Browser
- CVE-2026-95337: UI misrepresentation in Messages
- CVE-2026-95346: UI misrepresentation in Chromoting
- CVE-2026-95320: Missing authorization in Navigation
- CVE-2026-95317: Incorrect authorization in MediaCapture
- CVE-2026-95345: Use after free in Actor
- CVE-2026-95330: Improper state validation in Downloads
- CVE-2026-95370: Inappropriate implementation in NFC
- CVE-2026-95303: Incomplete cleanup in SmartCard
- CVE-2026-95360: Race condition in Editing
- CVE-2026-95295: Information leak in Mobile
- CVE-2026-95276: Improper input validation in Themes
- CVE-2026-95314: Incorrect authorization in HID
- CVE-2026-95371: Missing authorization in Views
- CVE-2026-95353: Use after free in Bindings
- CVE-2026-95363: UI misrepresentation in FileSystem
- CVE-2026-95341: Improper input validation in Desktop
- CVE-2026-95354: Use after free in Verifier
- CVE-2026-95384: Race condition in Transactions Platform
- CVE-2026-95336: Information leak in Transactions Platform
- CVE-2026-95290: Missing authorization in NFC
- CVE-2026-95325: Use after free in ANGLE
- CVE-2026-95275: Incorrect reference resolution in MediaStream
- CVE-2026-95374: Incorrect authorization in Network
- CVE-2026-95300: Missing authorization in DevTools
- CVE-2026-95321: UI misrepresentation in Payments
- CVE-2026-95323: UI misrepresentation in Chromium
- CVE-2026-95332: Use of uninitialized variable in Tint…
- Record
openSUSE-SU-2026:21987-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:22023-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Changes in chromium:
-
Chromium 154.0.8037.97 (boo#1284015)
- CVE-2026-103628: Out of bounds write in WebGL
- CVE-2026-103626: Incorrect authorization in FileSystem
- CVE-2026-103621: Integer overflow in Compositing
- CVE-2026-103630: Use after free in FedCM
- CVE-2026-103625: Type confusion in V8
- CVE-2026-103624: Use after free in Contextual Tasks
- CVE-2026-103629: Integer overflow in Skia
- CVE-2026-103622: Use after free in SVG
- CVE-2026-103623: Use after free in MediaStream
- CVE-2026-103631: Buffer overflow in WebRTC
- CVE-2026-103627: Information leak in SVG
-
Chromium 154.0.8037.92 (boo#1283262):
- CVE-2026-102331: Buffer overflow in ANGLE
- CVE-2026-102317: Improper privilege management in Mojo
- CVE-2026-102312: UI misrepresentation in Omnibox
- CVE-2026-102313: Uninitialized resource in ANGLE
- CVE-2026-102299: Type confusion in V8
- CVE-2026-102306: Use after free in Bluetooth
- CVE-2026-102307: Uninitialized resource in Dawn
- CVE-2026-102323: Type confusion in V8
- CVE-2026-102303: Uninitialized resource in GPU
- CVE-2026-102311: Uninitialized resource in GPU
- CVE-2026-102300: Uninitialized resource in WebGPU
- CVE-2026-102326: Type confusion in V8
- CVE-2026-102316: Use after free in Views
- CVE-2026-102304: Use after free in Passwords
- CVE-2026-102328: Type confusion in V8
- CVE-2026-102309: Use after free in FullScreen
- CVE-2026-102325: Uninitialized resource in Skia
- CVE-2026-102308: Use after free in Views
- CVE-2026-102301: Out of bounds write in GPU
- CVE-2026-102319: Uninitialized resource in GPU
- CVE-2026-102324: Use after free in PictureInPicture
- CVE-2026-102318: Out of bounds read in WebGL
- CVE-2026-102329: Cross-site scripting in WebUI
- CVE-2026-102315: Uninitialized resource in Media
- CVE-2026-102302: Buffer overflow in V8
- CVE-2026-102321: Type confusion in V8
- CVE-2026-102320: Missing authorization in CORS
- CVE-2026-102310: Missing authorization in Payments
- CVE-2026-102327: Incorrect authorization in WebView
- CVE-2026-102330: Incorrect authorization in SiteIsolation
- CVE-2026-102314: UI misrepresentation in TabStrip
- CVE-2026-102305: UI misrepresentation in SignIn
-
Chromium 154.0.8037.57 (boo#1282334):
- CVE-2026-95350: Buffer overflow in ANGLE
- CVE-2026-95357: Out of bounds write in GPU
- CVE-2026-95339: Use after free in ServiceWorker
- CVE-2026-95281: Buffer overflow in ANGLE
- CVE-2026-95313: Use after free in Fullscreen
- CVE-2026-95349: Buffer overflow in WebGL
- CVE-2026-95284: Buffer overflow in ANGLE
- CVE-2026-95322: Out of bounds write in GPU
- CVE-2026-95329: Out of bounds write in WebGL
- CVE-2026-95356: Use after free in WindowDialog
- CVE-2026-95310: Use after free in AdFilter
- CVE-2026-95301: Missing authorization in Extensions
- CVE-2026-95291: UI misrepresentation in SecurityIndicators
- CVE-2026-95355: Incorrect authorization in Navigation
- CVE-2026-95315: Use after free in Aura
- CVE-2026-95298: Use after free in Browser
- CVE-2026-95372: Use after free in Chromecast
- CVE-2026-95324: Uninitialized resource in GPU
- CVE-2026-95283: Buffer overflow in Tint
- CVE-2026-95293: Uninitialized resource in GPU
- CVE-2026-95274: Improper output encoding in DevTools
- CVE-2026-95282: Use after free in Platform
- CVE-2026-95373: Use after free in DevTools
- CVE-2026-95277: Use after free in Views
- CVE-2026-95348: Use after free in Bluetooth
- CVE-2026-95335: Use after free in HID
- CVE-2026-95338: Use after free in PDFium
- CVE-2026-95318: Buffer overflow in Video
- CVE-2026-95286: Type confusion in Bindings
- CVE-2026-95365: Type confusion in IndexedDB
- CVE-2026-95343: Use after free in WebAudio
- CVE-2026-95280: Race condition in V8
- CVE-2026-95304: Out of bounds write in V8
- CVE-2026-95306: Type confusion in V8
- CVE-2026-95299: Use after free in…
- Record
openSUSE-SU-2026:22023-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
webkit2gtk3AlmaLinux:9 From an advisory covering 14 CVEs |
before 2.54.2-0.el9_8.1 | 2.54.2-0.el9_8.1 |
webkit2gtk3-develAlmaLinux:9 From an advisory covering 14 CVEs |
before 2.54.2-0.el9_8.1 | 2.54.2-0.el9_8.1 |
webkit2gtk3-jscAlmaLinux:9 From an advisory covering 14 CVEs |
before 2.54.2-0.el9_8.1 | 2.54.2-0.el9_8.1 |
webkit2gtk3-jsc-develAlmaLinux:9 From an advisory covering 14 CVEs |
before 2.54.2-0.el9_8.1 | 2.54.2-0.el9_8.1 |
webkit2gtk3AlmaLinux:8 From an advisory covering 14 CVEs |
before 2.54.2-1.el8_10 | 2.54.2-1.el8_10 |
webkit2gtk3-develAlmaLinux:8 From an advisory covering 14 CVEs |
before 2.54.2-1.el8_10 | 2.54.2-1.el8_10 |
webkit2gtk3-jscAlmaLinux:8 From an advisory covering 14 CVEs |
before 2.54.2-1.el8_10 | 2.54.2-1.el8_10 |
webkit2gtk3-jsc-develAlmaLinux:8 From an advisory covering 14 CVEs |
before 2.54.2-1.el8_10 | 2.54.2-1.el8_10 |
chromiumDebian:12 |
before 154.0.8037.57-1, plus listed versions 113.0.5672.126-1114.0.5735.106-1114.0.5735.106-1~deb11u1114.0.5735.106-1~deb12u1114.0.5735.133-1 Show 45 moreShow less114.0.5735.133-1~deb11u1114.0.5735.133-1~deb12u1114.0.5735.198-1114.0.5735.198-1~deb11u1114.0.5735.198-1~deb12u1114.0.5735.90-1114.0.5735.90-2114.0.5735.90-2~deb11u1114.0.5735.90-2~deb12u1115.0.5790.102-1115.0.5790.102-2115.0.5790.170-1115.0.5790.170-1~deb11u1115.0.5790.170-1~deb12u1115.0.5790.98-1115.0.5790.98-1~deb11u1115.0.5790.98-1~deb12u1115.0.5790.98-2116.0.5845.110-1116.0.5845.110-1~deb11u1116.0.5845.110-1~deb12u1116.0.5845.110-2116.0.5845.140-1116.0.5845.140-1~deb11u1116.0.5845.140-1~deb12u1116.0.5845.180-1116.0.5845.180-1~deb11u1116.0.5845.180-1~deb12u1116.0.5845.96-1116.0.5845.96-1~deb11u1116.0.5845.96-1~deb12u1116.0.5845.96-2117.0.5938.132-1117.0.5938.132-1~deb11u1117.0.5938.132-1~deb12u1117.0.5938.132-2117.0.5938.149-1117.0.5938.149-1~deb11u1117.0.5938.149-1~deb12u1117.0.5938.62-1117.0.5938.62-1~deb11u1117.0.5938.62-1~deb12u1117.0.5938.92-1118.0.5993.117-1118.0.5993.117-1~deb11u1 |
154.0.8037.57-1 |
chromiumDebian:13 |
before 154.0.8037.57-1~deb13u1, plus listed versions 138.0.7204.183-1139.0.7258.127-1139.0.7258.127-1~deb12u1139.0.7258.127-1~deb13u1139.0.7258.127-2 Show 45 moreShow less139.0.7258.138-1139.0.7258.138-1~deb12u1139.0.7258.138-1~deb13u1139.0.7258.154-1139.0.7258.154-1~deb12u1139.0.7258.154-1~deb13u1139.0.7258.66-1139.0.7258.66-1~deb12u1140.0.7339.127-1140.0.7339.127-1~deb12u1140.0.7339.127-1~deb13u1140.0.7339.185-1140.0.7339.185-1~deb12u1140.0.7339.185-1~deb13u1140.0.7339.207-1140.0.7339.207-1~deb12u1140.0.7339.207-1~deb13u1140.0.7339.80-1140.0.7339.80-1~deb12u1140.0.7339.80-1~deb13u1141.0.7390.107-1141.0.7390.107-1~deb12u1141.0.7390.107-1~deb13u1141.0.7390.122-1141.0.7390.122-1~deb12u1141.0.7390.122-1~deb13u1141.0.7390.54-1141.0.7390.54-1~deb12u1141.0.7390.54-1~deb13u1141.0.7390.65-1141.0.7390.65-1~deb12u1141.0.7390.65-1~deb13u1142.0.7444.134-1142.0.7444.134-1~deb12u1142.0.7444.134-1~deb13u1142.0.7444.162-1142.0.7444.162-1~deb12u1142.0.7444.162-1~deb13u1142.0.7444.175-1142.0.7444.175-1~deb12u1142.0.7444.175-1~deb13u1142.0.7444.59-1142.0.7444.59-1~deb12u1142.0.7444.59-1~deb13u1143.0.7499.109-1 |
154.0.8037.57-1~deb13u1 |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
chromiumDebian:14 |
before 154.0.8037.57-1, plus listed versions 138.0.7204.183-1139.0.7258.127-1139.0.7258.127-1~deb12u1139.0.7258.127-1~deb13u1139.0.7258.127-2 Show 45 moreShow less139.0.7258.138-1139.0.7258.138-1~deb12u1139.0.7258.138-1~deb13u1139.0.7258.154-1139.0.7258.154-1~deb12u1139.0.7258.154-1~deb13u1139.0.7258.66-1139.0.7258.66-1~deb12u1140.0.7339.127-1140.0.7339.127-1~deb12u1140.0.7339.127-1~deb13u1140.0.7339.185-1140.0.7339.185-1~deb12u1140.0.7339.185-1~deb13u1140.0.7339.207-1140.0.7339.207-1~deb12u1140.0.7339.207-1~deb13u1140.0.7339.80-1140.0.7339.80-1~deb12u1140.0.7339.80-1~deb13u1141.0.7390.107-1141.0.7390.107-1~deb12u1141.0.7390.107-1~deb13u1141.0.7390.122-1141.0.7390.122-1~deb12u1141.0.7390.122-1~deb13u1141.0.7390.54-1141.0.7390.54-1~deb12u1141.0.7390.54-1~deb13u1141.0.7390.65-1141.0.7390.65-1~deb12u1141.0.7390.65-1~deb13u1142.0.7444.134-1142.0.7444.134-1~deb12u1142.0.7444.134-1~deb13u1142.0.7444.162-1142.0.7444.162-1~deb12u1142.0.7444.162-1~deb13u1142.0.7444.175-1142.0.7444.175-1~deb12u1142.0.7444.175-1~deb13u1142.0.7444.59-1142.0.7444.59-1~deb12u1142.0.7444.59-1~deb13u1143.0.7499.109-1 |
154.0.8037.57-1 |
webkit2gtk3Rocky Linux:9 From an advisory covering 6 CVEs |
before 0:2.54.2-0.el9_8.1 | 0:2.54.2-0.el9_8.1 |
webkit2gtk3Rocky Linux:8 From an advisory covering 6 CVEs |
before 0:2.54.2-1.el8_10 | 0:2.54.2-1.el8_10 |
chromiumopenSUSE:Tumbleweed From an advisory covering 108 CVEs |
before 154.0.8037.57-1.1 | 154.0.8037.57-1.1 |
chromiumopenSUSE:Leap 16.0 From an advisory covering 151 CVEs |
before 154.0.8037.97-bp160.1.1 | 154.0.8037.97-bp160.1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts, references | OSV | |
| affected | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-95325 is a critical vulnerability (CVSS 9.6) in Google Chrome, published September 26, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 28th percentile. Fixed in chromium 154.0.8037.57-1.
References
chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html
issues.chromium.org/issues/536648933
nvd.nist.gov/vuln/detail/CVE-2026-95325
github.com/advisories/GHSA-365g-qr8c-6v6r
access.redhat.com/errata/RHSA-2026:91580
Show 185 moreShow less
bugzilla.redhat.com/2543413
errata.almalinux.org/9/ALSA-2026-91580.html
redhat.com/security/data/cve/CVE-2026-113140.html
security-tracker.debian.org/tracker/CVE-2026-95325
errata.rockylinux.org/RLSA-2026:91580
suse.com/security/cve/CVE-2026-95274
bugzilla.suse.com/1282334
This page doesn't list everything
Left out here: 660 versions and the rest of 2 source descriptions. The JSON record has them.