CVE-2026-103629
Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to...
Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
- Record
CVE-2026-103629- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Weakness
- CWE-190
- Updated
- 2026-11-02
EUVDEUVD-2026-91712
Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
- Record
EUVD-2026-91712- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-f6x2-c3qc-93q9
Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to...
Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
- Record
GHSA-f6x2-c3qc-93q9- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Weakness
- CWE-190
- Updated
- 2026-11-02
NVD
Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
- Record
CVE-2026-103629- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Weakness
- CWE-190
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-103629
Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
- Record
DEBIAN-CVE-2026-103629- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVRLSA-2026:95194
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-85049)
chromium-browser: skia: Skia: Cross-origin data disclosure via use-after-free vulnerability (CVE-2026-91747)
chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation (CVE-2026-91733)
chromium-browser: skia: Google Chrome: Cross-origin data disclosure due to uninitialized resource in Skia (CVE-2026-91740)
chromium-browser: skia: Google Chrome Skia: Cross-origin data disclosure via improper state validation (CVE-2026-93387)
chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-102325)
chromium-browser: skia: Integer overflow in Skia (CVE-2026-103629)
chromium-browser: skia: Uninitialized resource in Skia (CVE-2026-106379)
chromium-browser: skia: Out of bounds read in Skia (CVE-2026-106399)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-113106)
chromium-browser: skia: Improper input validation in Skia (CVE-2026-118348)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-118351)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-118340)
chromium-browser: skia: Improper input validation in Skia (CVE-2026-118354)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-118319)
chromium-browser: skia: Use after free in Skia (CVE-2026-119271)
chromium-browser: skia: Improper input validation in Skia (CVE-2026-119261)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:95194- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-05
Show 7 moreShow less
OSVRLSA-2026:96080
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-85049)
chromium-browser: skia: Skia: Cross-origin data disclosure via use-after-free vulnerability (CVE-2026-91747)
chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation (CVE-2026-91733)
chromium-browser: skia: Google Chrome: Cross-origin data disclosure due to uninitialized resource in Skia (CVE-2026-91740)
chromium-browser: skia: Google Chrome Skia: Cross-origin data disclosure via improper state validation (CVE-2026-93387)
chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-102325)
chromium-browser: skia: Integer overflow in Skia (CVE-2026-103629)
chromium-browser: skia: Uninitialized resource in Skia (CVE-2026-106379)
chromium-browser: skia: Out of bounds read in Skia (CVE-2026-106399)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-113106)
chromium-browser: skia: Improper input validation in Skia (CVE-2026-118348)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-118351)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-118340)
chromium-browser: skia: Improper input validation in Skia (CVE-2026-118354)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-118319)
chromium-browser: skia: Use after free in Skia (CVE-2026-119271)
chromium-browser: skia: Improper input validation in Skia (CVE-2026-119261)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:96080- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-10
OSVRLSA-2026:98455
Critical: webkit2gtk3 security, bug fix, and enhancement update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2023-4860)
chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page (CVE-2024-7966)
chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8193)
chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8198)
chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8636)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome (CVE-2024-9123)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2025-0436)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2025-0444)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-3538)
chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-3931)
chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-4460)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-5870)
chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-6364)
chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-6298)
chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-7353)
chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-7949)
chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-7923)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-7920)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-8510)
chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-8579)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9923)
chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-10020)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9909)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-10012)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9893)
chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-9981)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9998)
chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-10011)
chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-9892)
chromium-browser: skia: chromium-browser: skia: Type Confusion in Skia (CVE-2026-9983)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-10009)
chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-10985)
chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-10993)
chromium-browser: skia: chromium-browser: skia: Stack buffer overflow in Skia (CVE-2026-11024)
chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-11121)
chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11057)
chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-11124)
chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11039)
chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11159)
*…
- Record
RLSA-2026:98455- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-13
OSVUBUNTU-CVE-2026-103629
Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
- Record
UBUNTU-CVE-2026-103629- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVALSA-2026:95194No score
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
- chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-85049)
- chromium-browser: skia: Skia: Cross-origin data disclosure via use-after-free vulnerability (CVE-2026-91747)
- chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation (CVE-2026-91733)
- chromium-browser: skia: Google Chrome: Cross-origin data disclosure due to uninitialized resource in Skia (CVE-2026-91740)
- chromium-browser: skia: Google Chrome Skia: Cross-origin data disclosure via improper state validation (CVE-2026-93387)
- chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-102325)
- chromium-browser: skia: Integer overflow in Skia (CVE-2026-103629)
- chromium-browser: skia: Uninitialized resource in Skia (CVE-2026-106379)
- chromium-browser: skia: Out of bounds read in Skia (CVE-2026-106399)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-113106)
- chromium-browser: skia: Improper input validation in Skia (CVE-2026-118348)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-118351)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-118340)
- chromium-browser: skia: Improper input validation in Skia (CVE-2026-118354)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-118319)
- chromium-browser: skia: Use after free in Skia (CVE-2026-119271)
- chromium-browser: skia: Improper input validation in Skia (CVE-2026-119261)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:95194- Updated
- 2026-11-05
OSVALSA-2026:96080No score
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
- chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359)
- chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-85049)
- chromium-browser: skia: Skia: Cross-origin data disclosure via use-after-free vulnerability (CVE-2026-91747)
- chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation (CVE-2026-91733)
- chromium-browser: skia: Google Chrome: Cross-origin data disclosure due to uninitialized resource in Skia (CVE-2026-91740)
- chromium-browser: skia: Google Chrome Skia: Cross-origin data disclosure via improper state validation (CVE-2026-93387)
- chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-102325)
- chromium-browser: skia: Integer overflow in Skia (CVE-2026-103629)
- chromium-browser: skia: Uninitialized resource in Skia (CVE-2026-106379)
- chromium-browser: skia: Out of bounds read in Skia (CVE-2026-106399)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-113106)
- chromium-browser: skia: Improper input validation in Skia (CVE-2026-118348)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-118351)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-118340)
- chromium-browser: skia: Improper input validation in Skia (CVE-2026-118354)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-118319)
- chromium-browser: skia: Use after free in Skia (CVE-2026-119271)
- chromium-browser: skia: Improper input validation in Skia (CVE-2026-119261)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:96080- Updated
- 2026-11-09
OSVopenSUSE-SU-2026:12063-1No score
chromedriver-154.0.8037.97-1.1 on GA media
These are all security issues fixed in the chromedriver-154.0.8037.97-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:12063-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:22023-1No score
Security update for chromium
This update for chromium fixes the following issues:
Changes in chromium:
Chromium 154.0.8037.97 (boo#1284015)
- CVE-2026-103628: Out of bounds write in WebGL
- CVE-2026-103626: Incorrect authorization in FileSystem
- CVE-2026-103621: Integer overflow in Compositing
- CVE-2026-103630: Use after free in FedCM
- CVE-2026-103625: Type confusion in V8
- CVE-2026-103624: Use after free in Contextual Tasks
- CVE-2026-103629: Integer overflow in Skia
- CVE-2026-103622: Use after free in SVG
- CVE-2026-103623: Use after free in MediaStream
- CVE-2026-103631: Buffer overflow in WebRTC
- CVE-2026-103627: Information leak in SVG
Chromium 154.0.8037.92 (boo#1283262):
- CVE-2026-102331: Buffer overflow in ANGLE
- CVE-2026-102317: Improper privilege management in Mojo
- CVE-2026-102312: UI misrepresentation in Omnibox
- CVE-2026-102313: Uninitialized resource in ANGLE
- CVE-2026-102299: Type confusion in V8
- CVE-2026-102306: Use after free in Bluetooth
- CVE-2026-102307: Uninitialized resource in Dawn
- CVE-2026-102323: Type confusion in V8
- CVE-2026-102303: Uninitialized resource in GPU
- CVE-2026-102311: Uninitialized resource in GPU
- CVE-2026-102300: Uninitialized resource in WebGPU
- CVE-2026-102326: Type confusion in V8
- CVE-2026-102316: Use after free in Views
- CVE-2026-102304: Use after free in Passwords
- CVE-2026-102328: Type confusion in V8
- CVE-2026-102309: Use after free in FullScreen
- CVE-2026-102325: Uninitialized resource in Skia
- CVE-2026-102308: Use after free in Views
- CVE-2026-102301: Out of bounds write in GPU
- CVE-2026-102319: Uninitialized resource in GPU
- CVE-2026-102324: Use after free in PictureInPicture
- CVE-2026-102318: Out of bounds read in WebGL
- CVE-2026-102329: Cross-site scripting in WebUI
- CVE-2026-102315: Uninitialized resource in Media
- CVE-2026-102302: Buffer overflow in V8
- CVE-2026-102321: Type confusion in V8
- CVE-2026-102320: Missing authorization in CORS
- CVE-2026-102310: Missing authorization in Payments
- CVE-2026-102327: Incorrect authorization in WebView
- CVE-2026-102330: Incorrect authorization in SiteIsolation
- CVE-2026-102314: UI misrepresentation in TabStrip
- CVE-2026-102305: UI misrepresentation in SignIn
Chromium 154.0.8037.57 (boo#1282334):
- CVE-2026-95350: Buffer overflow in ANGLE
- CVE-2026-95357: Out of bounds write in GPU
- CVE-2026-95339: Use after free in ServiceWorker
- CVE-2026-95281: Buffer overflow in ANGLE
- CVE-2026-95313: Use after free in Fullscreen
- CVE-2026-95349: Buffer overflow in WebGL
- CVE-2026-95284: Buffer overflow in ANGLE
- CVE-2026-95322: Out of bounds write in GPU
- CVE-2026-95329: Out of bounds write in WebGL
- CVE-2026-95356: Use after free in WindowDialog
- CVE-2026-95310: Use after free in AdFilter
- CVE-2026-95301: Missing authorization in Extensions
- CVE-2026-95291: UI misrepresentation in SecurityIndicators
- CVE-2026-95355: Incorrect authorization in Navigation
- CVE-2026-95315: Use after free in Aura
- CVE-2026-95298: Use after free in Browser
- CVE-2026-95372: Use after free in Chromecast
- CVE-2026-95324: Uninitialized resource in GPU
- CVE-2026-95283: Buffer overflow in Tint
- CVE-2026-95293: Uninitialized resource in GPU
- CVE-2026-95274: Improper output encoding in DevTools
- CVE-2026-95282: Use after free in Platform
- CVE-2026-95373: Use after free in DevTools
- CVE-2026-95277: Use after free in Views
- CVE-2026-95348: Use after free in Bluetooth
- CVE-2026-95335: Use after free in HID
- CVE-2026-95338: Use after free in PDFium
- CVE-2026-95318: Buffer overflow in Video
- CVE-2026-95286: Type confusion in Bindings
- CVE-2026-95365: Type confusion in IndexedDB
- CVE-2026-95343: Use after free in WebAudio
- CVE-2026-95280: Race condition in V8
- CVE-2026-95304: Out of bounds write in V8
- CVE-2026-95306: Type confusion in V8
- CVE-2026-95299: Use after free in…
- Record
openSUSE-SU-2026:22023-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
webkit2gtk3AlmaLinux:9 From an advisory covering 17 CVEs | before 2.54.2-0.el9_8.2 | 2.54.2-0.el9_8.2 |
webkit2gtk3-develAlmaLinux:9 From an advisory covering 17 CVEs | before 2.54.2-0.el9_8.2 | 2.54.2-0.el9_8.2 |
webkit2gtk3-jscAlmaLinux:9 From an advisory covering 17 CVEs | before 2.54.2-0.el9_8.2 | 2.54.2-0.el9_8.2 |
webkit2gtk3-jsc-develAlmaLinux:9 From an advisory covering 17 CVEs | before 2.54.2-0.el9_8.2 | 2.54.2-0.el9_8.2 |
webkit2gtk3AlmaLinux:8 From an advisory covering 18 CVEs | before 2.54.2-2.el8_10 | 2.54.2-2.el8_10 |
webkit2gtk3-develAlmaLinux:8 From an advisory covering 18 CVEs | before 2.54.2-2.el8_10 | 2.54.2-2.el8_10 |
webkit2gtk3-jscAlmaLinux:8 From an advisory covering 18 CVEs | before 2.54.2-2.el8_10 | 2.54.2-2.el8_10 |
webkit2gtk3-jsc-develAlmaLinux:8 From an advisory covering 18 CVEs | before 2.54.2-2.el8_10 | 2.54.2-2.el8_10 |
chromiumDebian:12 | before 155.0.8059.39-1~deb12u1, plus listed versions 113.0.5672.126-1114.0.5735.106-1114.0.5735.106-1~deb11u1114.0.5735.106-1~deb12u1114.0.5735.133-1 Show 45 moreShow less114.0.5735.133-1~deb11u1114.0.5735.133-1~deb12u1114.0.5735.198-1114.0.5735.198-1~deb11u1114.0.5735.198-1~deb12u1114.0.5735.90-1114.0.5735.90-2114.0.5735.90-2~deb11u1114.0.5735.90-2~deb12u1115.0.5790.102-1115.0.5790.102-2115.0.5790.170-1115.0.5790.170-1~deb11u1115.0.5790.170-1~deb12u1115.0.5790.98-1115.0.5790.98-1~deb11u1115.0.5790.98-1~deb12u1115.0.5790.98-2116.0.5845.110-1116.0.5845.110-1~deb11u1116.0.5845.110-1~deb12u1116.0.5845.110-2116.0.5845.140-1116.0.5845.140-1~deb11u1116.0.5845.140-1~deb12u1116.0.5845.180-1116.0.5845.180-1~deb11u1116.0.5845.180-1~deb12u1116.0.5845.96-1116.0.5845.96-1~deb11u1116.0.5845.96-1~deb12u1116.0.5845.96-2117.0.5938.132-1117.0.5938.132-1~deb11u1117.0.5938.132-1~deb12u1117.0.5938.132-2117.0.5938.149-1117.0.5938.149-1~deb11u1117.0.5938.149-1~deb12u1117.0.5938.62-1117.0.5938.62-1~deb11u1117.0.5938.62-1~deb12u1117.0.5938.92-1118.0.5993.117-1118.0.5993.117-1~deb11u1 | 155.0.8059.39-1~deb12u1 |
chromiumDebian:13 | before 155.0.8059.39-1~deb13u1, plus listed versions 138.0.7204.183-1139.0.7258.127-1139.0.7258.127-1~deb12u1139.0.7258.127-1~deb13u1139.0.7258.127-2 Show 45 moreShow less139.0.7258.138-1139.0.7258.138-1~deb12u1139.0.7258.138-1~deb13u1139.0.7258.154-1139.0.7258.154-1~deb12u1139.0.7258.154-1~deb13u1139.0.7258.66-1139.0.7258.66-1~deb12u1140.0.7339.127-1140.0.7339.127-1~deb12u1140.0.7339.127-1~deb13u1140.0.7339.185-1140.0.7339.185-1~deb12u1140.0.7339.185-1~deb13u1140.0.7339.207-1140.0.7339.207-1~deb12u1140.0.7339.207-1~deb13u1140.0.7339.80-1140.0.7339.80-1~deb12u1140.0.7339.80-1~deb13u1141.0.7390.107-1141.0.7390.107-1~deb12u1141.0.7390.107-1~deb13u1141.0.7390.122-1141.0.7390.122-1~deb12u1141.0.7390.122-1~deb13u1141.0.7390.54-1141.0.7390.54-1~deb12u1141.0.7390.54-1~deb13u1141.0.7390.65-1141.0.7390.65-1~deb12u1141.0.7390.65-1~deb13u1142.0.7444.134-1142.0.7444.134-1~deb12u1142.0.7444.134-1~deb13u1142.0.7444.162-1142.0.7444.162-1~deb12u1142.0.7444.162-1~deb13u1142.0.7444.175-1142.0.7444.175-1~deb12u1142.0.7444.175-1~deb13u1142.0.7444.59-1142.0.7444.59-1~deb12u1142.0.7444.59-1~deb13u1143.0.7499.109-1 | 155.0.8059.39-1~deb13u1 |
Show 17 moreShow less
| Package | Affected | Fixed |
|---|---|---|
chromiumDebian:14 | before 155.0.8059.39-1, plus listed versions 138.0.7204.183-1139.0.7258.127-1139.0.7258.127-1~deb12u1139.0.7258.127-1~deb13u1139.0.7258.127-2 Show 45 moreShow less139.0.7258.138-1139.0.7258.138-1~deb12u1139.0.7258.138-1~deb13u1139.0.7258.154-1139.0.7258.154-1~deb12u1139.0.7258.154-1~deb13u1139.0.7258.66-1139.0.7258.66-1~deb12u1140.0.7339.127-1140.0.7339.127-1~deb12u1140.0.7339.127-1~deb13u1140.0.7339.185-1140.0.7339.185-1~deb12u1140.0.7339.185-1~deb13u1140.0.7339.207-1140.0.7339.207-1~deb12u1140.0.7339.207-1~deb13u1140.0.7339.80-1140.0.7339.80-1~deb12u1140.0.7339.80-1~deb13u1141.0.7390.107-1141.0.7390.107-1~deb12u1141.0.7390.107-1~deb13u1141.0.7390.122-1141.0.7390.122-1~deb12u1141.0.7390.122-1~deb13u1141.0.7390.54-1141.0.7390.54-1~deb12u1141.0.7390.54-1~deb13u1141.0.7390.65-1141.0.7390.65-1~deb12u1141.0.7390.65-1~deb13u1142.0.7444.134-1142.0.7444.134-1~deb12u1142.0.7444.134-1~deb13u1142.0.7444.162-1142.0.7444.162-1~deb12u1142.0.7444.162-1~deb13u1142.0.7444.175-1142.0.7444.175-1~deb12u1142.0.7444.175-1~deb13u1142.0.7444.59-1142.0.7444.59-1~deb12u1142.0.7444.59-1~deb13u1143.0.7499.109-1 | 155.0.8059.39-1 |
libskiaDebian:14 | All versions, plus listed versions 146.20260311+dfsg-1146.20260311+dfsg-2146.20260311+dfsg-3146.20260311+dfsg-4146.20260414~git.ef5f213+dfsg-1 Show 9 moreShow less146.20260414~git.ef5f213+dfsg-2146.20260414~git.ef5f213+dfsg-3146.20260414~git.ef5f213+dfsg-4146.20260414~git.ef5f213+dfsg-5146.20260602~git.3476902+dfsg-1146.20260602~git.3476902+dfsg-2146.20260602~git.3476902+dfsg-3146.20260602~git.3476902+dfsg-4146.20260602~git.3476902+dfsg-5 | None known |
webkit2gtk3Rocky Linux:9 From an advisory covering 17 CVEs | before 0:2.54.2-0.el9_8.2 | 0:2.54.2-0.el9_8.2 |
webkit2gtk3Rocky Linux:8 From an advisory covering 18 CVEs | before 0:2.54.2-2.el8_10 | 0:2.54.2-2.el8_10 |
webkit2gtk3Rocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-debuginfoRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-debugsourceRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-develRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-devel-debuginfoRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-jscRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-jsc-debuginfoRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-jsc-develRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-jsc-devel-debuginfoRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
libskiaUbuntu:26.10 | All versions, plus listed versions 146.20260311+dfsg-4ubuntu1146.20260414~git.ef5f213+dfsg-5146.20260602~git.3476902+dfsg-2146.20260602~git.3476902+dfsg-4 | None known |
libskiaUbuntu:26.04:LTS | All versions, plus listed versions 146.20260311+dfsg-4ubuntu1 | None known |
chromiumopenSUSE:Tumbleweed From an advisory covering 11 CVEs | before 154.0.8037.97-1.1 | 154.0.8037.97-1.1 |
chromiumopenSUSE:Leap 16.0 From an advisory covering 151 CVEs | before 154.0.8037.97-bp160.1.1 | 154.0.8037.97-bp160.1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases, references | OSV | |
| affected, aliases, references | OSV | |
| affected, aliases, references | OSV | |
| affected | ||
| affected, aliases, references | OSV | |
| affected, aliases, facts, references | OSV | |
| affected, aliases, references | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-103629 is a medium vulnerability (CVSS 4.3) in Google Chrome, published October 2, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.20%, the 10th percentile. Fixed in chromium 155.0.8059.39-1~deb12u1.
References
chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html
issues.chromium.org/issues/562038679
nvd.nist.gov/vuln/detail/CVE-2026-103629
github.com/advisories/GHSA-f6x2-c3qc-93q9
access.redhat.com/errata/RHSA-2026:95194
Show 194 moreShow less
bugzilla.redhat.com/2528197
errata.almalinux.org/9/ALSA-2026-95194.html
security-tracker.debian.org/tracker/CVE-2026-103629
errata.rockylinux.org/RLSA-2026:95194
ubuntu.com/security/CVE-2026-103629
cve.org/CVERecord?id=CVE-2026-103629
suse.com/security/cve/CVE-2026-103621
bugzilla.suse.com/1282334
Left out here: 676 versions, 98 references and the rest of 2 source descriptions. The JSON record has them.