CVE-2026-119261
Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote...
CVE-2026-119261 is a critical vulnerability (CVSS 9.6) in Google Chrome, published October 30, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 24th percentile. Fixed in chromium 156.0.8078.79-1~deb12u1.
- Severity
- 9.6 CriticalCVSS 3.1, CVE List
- Exploit chance
- 0.32%EPSS, 24th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
156.0.8078.79-1~deb12u1chromium +50 more
Description
Buffer overflow in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
webkit2gtk3AlmaLinux:9 From an advisory covering 17 CVEs | before 2.54.2-0.el9_8.2 | 2.54.2-0.el9_8.2 |
webkit2gtk3-develAlmaLinux:9 From an advisory covering 17 CVEs | before 2.54.2-0.el9_8.2 | 2.54.2-0.el9_8.2 |
webkit2gtk3-jscAlmaLinux:9 From an advisory covering 17 CVEs | before 2.54.2-0.el9_8.2 | 2.54.2-0.el9_8.2 |
webkit2gtk3-jsc-develAlmaLinux:9 From an advisory covering 17 CVEs | before 2.54.2-0.el9_8.2 | 2.54.2-0.el9_8.2 |
webkit2gtk3AlmaLinux:8 From an advisory covering 18 CVEs | before 2.54.2-2.el8_10 | 2.54.2-2.el8_10 |
webkit2gtk3-develAlmaLinux:8 From an advisory covering 18 CVEs | before 2.54.2-2.el8_10 | 2.54.2-2.el8_10 |
webkit2gtk3-jscAlmaLinux:8 From an advisory covering 18 CVEs | before 2.54.2-2.el8_10 | 2.54.2-2.el8_10 |
webkit2gtk3-jsc-develAlmaLinux:8 From an advisory covering 18 CVEs | before 2.54.2-2.el8_10 | 2.54.2-2.el8_10 |
chromiumDebian:12 | before 156.0.8078.79-1~deb12u1, plus listed versions 113.0.5672.126-1114.0.5735.106-1114.0.5735.106-1~deb11u1114.0.5735.106-1~deb12u1114.0.5735.133-1 Show 45 moreShow less114.0.5735.133-1~deb11u1114.0.5735.133-1~deb12u1114.0.5735.198-1114.0.5735.198-1~deb11u1114.0.5735.198-1~deb12u1114.0.5735.90-1114.0.5735.90-2114.0.5735.90-2~deb11u1114.0.5735.90-2~deb12u1115.0.5790.102-1115.0.5790.102-2115.0.5790.170-1115.0.5790.170-1~deb11u1115.0.5790.170-1~deb12u1115.0.5790.98-1115.0.5790.98-1~deb11u1115.0.5790.98-1~deb12u1115.0.5790.98-2116.0.5845.110-1116.0.5845.110-1~deb11u1116.0.5845.110-1~deb12u1116.0.5845.110-2116.0.5845.140-1116.0.5845.140-1~deb11u1116.0.5845.140-1~deb12u1116.0.5845.180-1116.0.5845.180-1~deb11u1116.0.5845.180-1~deb12u1116.0.5845.96-1116.0.5845.96-1~deb11u1116.0.5845.96-1~deb12u1116.0.5845.96-2117.0.5938.132-1117.0.5938.132-1~deb11u1117.0.5938.132-1~deb12u1117.0.5938.132-2117.0.5938.149-1117.0.5938.149-1~deb11u1117.0.5938.149-1~deb12u1117.0.5938.62-1117.0.5938.62-1~deb11u1117.0.5938.62-1~deb12u1117.0.5938.92-1118.0.5993.117-1118.0.5993.117-1~deb11u1 | 156.0.8078.79-1~deb12u1 |
chromiumDebian:13 | before 156.0.8078.79-1~deb13u1, plus listed versions 138.0.7204.183-1139.0.7258.127-1139.0.7258.127-1~deb12u1139.0.7258.127-1~deb13u1139.0.7258.127-2 Show 45 moreShow less139.0.7258.138-1139.0.7258.138-1~deb12u1139.0.7258.138-1~deb13u1139.0.7258.154-1139.0.7258.154-1~deb12u1139.0.7258.154-1~deb13u1139.0.7258.66-1139.0.7258.66-1~deb12u1140.0.7339.127-1140.0.7339.127-1~deb12u1140.0.7339.127-1~deb13u1140.0.7339.185-1140.0.7339.185-1~deb12u1140.0.7339.185-1~deb13u1140.0.7339.207-1140.0.7339.207-1~deb12u1140.0.7339.207-1~deb13u1140.0.7339.80-1140.0.7339.80-1~deb12u1140.0.7339.80-1~deb13u1141.0.7390.107-1141.0.7390.107-1~deb12u1141.0.7390.107-1~deb13u1141.0.7390.122-1141.0.7390.122-1~deb12u1141.0.7390.122-1~deb13u1141.0.7390.54-1141.0.7390.54-1~deb12u1141.0.7390.54-1~deb13u1141.0.7390.65-1141.0.7390.65-1~deb12u1141.0.7390.65-1~deb13u1142.0.7444.134-1142.0.7444.134-1~deb12u1142.0.7444.134-1~deb13u1142.0.7444.162-1142.0.7444.162-1~deb12u1142.0.7444.162-1~deb13u1142.0.7444.175-1142.0.7444.175-1~deb12u1142.0.7444.175-1~deb13u1142.0.7444.59-1142.0.7444.59-1~deb12u1142.0.7444.59-1~deb13u1143.0.7499.109-1 | 156.0.8078.79-1~deb13u1 |
Show 41 moreShow less
| Package | Affected | Fixed |
|---|---|---|
chromiumDebian:14 | before 156.0.8078.79-1, plus listed versions 138.0.7204.183-1139.0.7258.127-1139.0.7258.127-1~deb12u1139.0.7258.127-1~deb13u1139.0.7258.127-2 Show 45 moreShow less139.0.7258.138-1139.0.7258.138-1~deb12u1139.0.7258.138-1~deb13u1139.0.7258.154-1139.0.7258.154-1~deb12u1139.0.7258.154-1~deb13u1139.0.7258.66-1139.0.7258.66-1~deb12u1140.0.7339.127-1140.0.7339.127-1~deb12u1140.0.7339.127-1~deb13u1140.0.7339.185-1140.0.7339.185-1~deb12u1140.0.7339.185-1~deb13u1140.0.7339.207-1140.0.7339.207-1~deb12u1140.0.7339.207-1~deb13u1140.0.7339.80-1140.0.7339.80-1~deb12u1140.0.7339.80-1~deb13u1141.0.7390.107-1141.0.7390.107-1~deb12u1141.0.7390.107-1~deb13u1141.0.7390.122-1141.0.7390.122-1~deb12u1141.0.7390.122-1~deb13u1141.0.7390.54-1141.0.7390.54-1~deb12u1141.0.7390.54-1~deb13u1141.0.7390.65-1141.0.7390.65-1~deb12u1141.0.7390.65-1~deb13u1142.0.7444.134-1142.0.7444.134-1~deb12u1142.0.7444.134-1~deb13u1142.0.7444.162-1142.0.7444.162-1~deb12u1142.0.7444.162-1~deb13u1142.0.7444.175-1142.0.7444.175-1~deb12u1142.0.7444.175-1~deb13u1142.0.7444.59-1142.0.7444.59-1~deb12u1142.0.7444.59-1~deb13u1143.0.7499.109-1 | 156.0.8078.79-1 |
webkit2gtk3Red Hat:enterprise_linux:9::appstream From an advisory covering 18 CVEs | before 0:2.54.2-0.el9_8.2 | 0:2.54.2-0.el9_8.2 |
webkit2gtk3-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 18 CVEs | before 0:2.54.2-0.el9_8.2 | 0:2.54.2-0.el9_8.2 |
webkit2gtk3-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 18 CVEs | before 0:2.54.2-0.el9_8.2 | 0:2.54.2-0.el9_8.2 |
webkit2gtk3-develRed Hat:enterprise_linux:9::appstream From an advisory covering 18 CVEs | before 0:2.54.2-0.el9_8.2 | 0:2.54.2-0.el9_8.2 |
webkit2gtk3-devel-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 18 CVEs | before 0:2.54.2-0.el9_8.2 | 0:2.54.2-0.el9_8.2 |
webkit2gtk3-jscRed Hat:enterprise_linux:9::appstream From an advisory covering 18 CVEs | before 0:2.54.2-0.el9_8.2 | 0:2.54.2-0.el9_8.2 |
webkit2gtk3-jsc-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 18 CVEs | before 0:2.54.2-0.el9_8.2 | 0:2.54.2-0.el9_8.2 |
webkit2gtk3-jsc-develRed Hat:enterprise_linux:9::appstream From an advisory covering 18 CVEs | before 0:2.54.2-0.el9_8.2 | 0:2.54.2-0.el9_8.2 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 18 CVEs | before 0:2.54.2-0.el9_8.2 | 0:2.54.2-0.el9_8.2 |
webkit2gtk3Red Hat:enterprise_linux:8::appstream From an advisory covering 18 CVEs | before 0:2.54.2-2.el8_10 | 0:2.54.2-2.el8_10 |
webkit2gtk3-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 18 CVEs | before 0:2.54.2-2.el8_10 | 0:2.54.2-2.el8_10 |
webkit2gtk3-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 18 CVEs | before 0:2.54.2-2.el8_10 | 0:2.54.2-2.el8_10 |
webkit2gtk3-develRed Hat:enterprise_linux:8::appstream From an advisory covering 18 CVEs | before 0:2.54.2-2.el8_10 | 0:2.54.2-2.el8_10 |
webkit2gtk3-devel-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 18 CVEs | before 0:2.54.2-2.el8_10 | 0:2.54.2-2.el8_10 |
webkit2gtk3-jscRed Hat:enterprise_linux:8::appstream From an advisory covering 18 CVEs | before 0:2.54.2-2.el8_10 | 0:2.54.2-2.el8_10 |
webkit2gtk3-jsc-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 18 CVEs | before 0:2.54.2-2.el8_10 | 0:2.54.2-2.el8_10 |
webkit2gtk3-jsc-develRed Hat:enterprise_linux:8::appstream From an advisory covering 18 CVEs | before 0:2.54.2-2.el8_10 | 0:2.54.2-2.el8_10 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 18 CVEs | before 0:2.54.2-2.el8_10 | 0:2.54.2-2.el8_10 |
webkit2gtk3Red Hat:enterprise_linux:9::appstream From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-develRed Hat:enterprise_linux:9::appstream From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-devel-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-jscRed Hat:enterprise_linux:9::appstream From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-jsc-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-jsc-develRed Hat:enterprise_linux:9::appstream From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3Rocky Linux:9 From an advisory covering 17 CVEs | before 0:2.54.2-0.el9_8.2 | 0:2.54.2-0.el9_8.2 |
webkit2gtk3Rocky Linux:8 From an advisory covering 18 CVEs | before 0:2.54.2-2.el8_10 | 0:2.54.2-2.el8_10 |
webkit2gtk3Rocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-debuginfoRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-debugsourceRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-develRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-devel-debuginfoRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-jscRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-jsc-debuginfoRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-jsc-develRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-jsc-devel-debuginfoRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
chromiumopenSUSE:Tumbleweed From an advisory covering 21 CVEs | before 156.0.8078.79-1.1 | 156.0.8078.79-1.1 |
chromiumopenSUSE:Leap 16.0 From an advisory covering 21 CVEs | before 156.0.8078.79-bp160.1.1 | 156.0.8078.79-bp160.1.1 |
What each source reports
CVE List Score used
Buffer overflow in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
- Record
CVE-2026-119261- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Weakness
- CWE-122
- Updated
- 2026-11-03
EUVDEUVD-2026-113430
Buffer overflow in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
- Record
EUVD-2026-113430- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-88vq-7689-gvgx
Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote...
Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
- Record
GHSA-88vq-7689-gvgx- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Weakness
- CWE-20, CWE-122
- Updated
- 2026-11-04
NVD
Buffer overflow in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
- Record
CVE-2026-119261- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Weakness
- CWE-122
- Updated
- 2026-11-04
OSVDEBIAN-CVE-2026-119261
Buffer overflow in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
- Record
DEBIAN-CVE-2026-119261- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-05
OSVRHSA-2026:95194
Red Hat Security Advisory: webkit2gtk3 security update
- Record
RHSA-2026:95194- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-13
Show 9 moreShow less
OSVRHSA-2026:96080
Red Hat Security Advisory: webkit2gtk3 security update
- Record
RHSA-2026:96080- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-13
OSVRHSA-2026:98455
Red Hat Security Advisory: webkit2gtk3 security, bug fix, and enhancement update
- Record
RHSA-2026:98455- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-13
OSVRLSA-2026:95194
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-85049)
chromium-browser: skia: Skia: Cross-origin data disclosure via use-after-free vulnerability (CVE-2026-91747)
chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation (CVE-2026-91733)
chromium-browser: skia: Google Chrome: Cross-origin data disclosure due to uninitialized resource in Skia (CVE-2026-91740)
chromium-browser: skia: Google Chrome Skia: Cross-origin data disclosure via improper state validation (CVE-2026-93387)
chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-102325)
chromium-browser: skia: Integer overflow in Skia (CVE-2026-103629)
chromium-browser: skia: Uninitialized resource in Skia (CVE-2026-106379)
chromium-browser: skia: Out of bounds read in Skia (CVE-2026-106399)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-113106)
chromium-browser: skia: Improper input validation in Skia (CVE-2026-118348)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-118351)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-118340)
chromium-browser: skia: Improper input validation in Skia (CVE-2026-118354)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-118319)
chromium-browser: skia: Use after free in Skia (CVE-2026-119271)
chromium-browser: skia: Improper input validation in Skia (CVE-2026-119261)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:95194- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-05
OSVRLSA-2026:96080
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-85049)
chromium-browser: skia: Skia: Cross-origin data disclosure via use-after-free vulnerability (CVE-2026-91747)
chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation (CVE-2026-91733)
chromium-browser: skia: Google Chrome: Cross-origin data disclosure due to uninitialized resource in Skia (CVE-2026-91740)
chromium-browser: skia: Google Chrome Skia: Cross-origin data disclosure via improper state validation (CVE-2026-93387)
chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-102325)
chromium-browser: skia: Integer overflow in Skia (CVE-2026-103629)
chromium-browser: skia: Uninitialized resource in Skia (CVE-2026-106379)
chromium-browser: skia: Out of bounds read in Skia (CVE-2026-106399)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-113106)
chromium-browser: skia: Improper input validation in Skia (CVE-2026-118348)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-118351)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-118340)
chromium-browser: skia: Improper input validation in Skia (CVE-2026-118354)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-118319)
chromium-browser: skia: Use after free in Skia (CVE-2026-119271)
chromium-browser: skia: Improper input validation in Skia (CVE-2026-119261)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:96080- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-10
OSVRLSA-2026:98455
Critical: webkit2gtk3 security, bug fix, and enhancement update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2023-4860)
chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page (CVE-2024-7966)
chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8193)
chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8198)
chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8636)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome (CVE-2024-9123)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2025-0436)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2025-0444)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-3538)
chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-3931)
chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-4460)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-5870)
chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-6364)
chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-6298)
chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-7353)
chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-7949)
chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-7923)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-7920)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-8510)
chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-8579)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9923)
chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-10020)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9909)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-10012)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9893)
chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-9981)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9998)
chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-10011)
chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-9892)
chromium-browser: skia: chromium-browser: skia: Type Confusion in Skia (CVE-2026-9983)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-10009)
chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-10985)
chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-10993)
chromium-browser: skia: chromium-browser: skia: Stack buffer overflow in Skia (CVE-2026-11024)
chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-11121)
chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11057)
chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-11124)
chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11039)
chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11159)
*…
- Record
RLSA-2026:98455- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-13
OSVALSA-2026:95194No score
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
- chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-85049)
- chromium-browser: skia: Skia: Cross-origin data disclosure via use-after-free vulnerability (CVE-2026-91747)
- chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation (CVE-2026-91733)
- chromium-browser: skia: Google Chrome: Cross-origin data disclosure due to uninitialized resource in Skia (CVE-2026-91740)
- chromium-browser: skia: Google Chrome Skia: Cross-origin data disclosure via improper state validation (CVE-2026-93387)
- chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-102325)
- chromium-browser: skia: Integer overflow in Skia (CVE-2026-103629)
- chromium-browser: skia: Uninitialized resource in Skia (CVE-2026-106379)
- chromium-browser: skia: Out of bounds read in Skia (CVE-2026-106399)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-113106)
- chromium-browser: skia: Improper input validation in Skia (CVE-2026-118348)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-118351)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-118340)
- chromium-browser: skia: Improper input validation in Skia (CVE-2026-118354)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-118319)
- chromium-browser: skia: Use after free in Skia (CVE-2026-119271)
- chromium-browser: skia: Improper input validation in Skia (CVE-2026-119261)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:95194- Updated
- 2026-11-05
OSVALSA-2026:96080No score
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
- chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359)
- chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-85049)
- chromium-browser: skia: Skia: Cross-origin data disclosure via use-after-free vulnerability (CVE-2026-91747)
- chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation (CVE-2026-91733)
- chromium-browser: skia: Google Chrome: Cross-origin data disclosure due to uninitialized resource in Skia (CVE-2026-91740)
- chromium-browser: skia: Google Chrome Skia: Cross-origin data disclosure via improper state validation (CVE-2026-93387)
- chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-102325)
- chromium-browser: skia: Integer overflow in Skia (CVE-2026-103629)
- chromium-browser: skia: Uninitialized resource in Skia (CVE-2026-106379)
- chromium-browser: skia: Out of bounds read in Skia (CVE-2026-106399)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-113106)
- chromium-browser: skia: Improper input validation in Skia (CVE-2026-118348)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-118351)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-118340)
- chromium-browser: skia: Improper input validation in Skia (CVE-2026-118354)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-118319)
- chromium-browser: skia: Use after free in Skia (CVE-2026-119271)
- chromium-browser: skia: Improper input validation in Skia (CVE-2026-119261)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:96080- Updated
- 2026-11-09
OSVopenSUSE-SU-2026:12377-1No score
chromedriver-156.0.8078.79-1.1 on GA media
These are all security issues fixed in the chromedriver-156.0.8078.79-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:12377-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:22215-1No score
Security update for chromium
This update for chromium fixes the following issues:
Changes in chromium:
- Chromium 156.0.8078.79 (boo#1288840):
- CVE-2026-76024: Memory corruption in MediaStream
- CVE-2026-76025: Use after free in FileSystem
- CVE-2026-76026: Memory corruption in Autofill
- CVE-2026-76027: Memory corruption in CacheStorage
- CVE-2026-76028: Use after free in FileSystem
- CVE-2026-76029: Memory corruption in Network
- CVE-2026-76030: Memory corruption in FileSystem
- CVE-2026-76031: Use after free in Input
- CVE-2026-119260: Use after free in Frames
- CVE-2026-119261: Improper input validation in Skia
- CVE-2026-119262: Improper input validation in V8
- CVE-2026-119263: Memory corruption in GarbageCollection
- CVE-2026-119264: Memory corruption in Dawn
- CVE-2026-119265: Memory corruption in Quota
- CVE-2026-119266: Use after free in Quota
- CVE-2026-119267: Memory corruption in DOM
- CVE-2026-119268: Integer overflow in Editing
- CVE-2026-119269: Use after free in Blink
- CVE-2026-119270: Improper input validation in CacheStorage
- CVE-2026-119271: Use after free in Skia
- CVE-2026-119272: Out of bounds read in FileSystem
- Record
openSUSE-SU-2026:22215-1- Updated
- 2026-11-04
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases, references | OSV | |
| affected, aliases, references | OSV | |
| affected, aliases, references | OSV | |
| affected, aliases, references | OSV | |
| affected | ||
| affected | OSV | |
| affected | OSV | |
| affected, aliases, references | OSV | |
| affected, aliases, references | OSV | |
| affected, aliases, references | GitHub Advisories, NVD, OSV | |
| cwes, description, facts | CVE List, EUVD | |
| affected | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02107719452.html
issues.chromium.org/issues/574213633
nvd.nist.gov/vuln/detail/CVE-2026-119261
github.com/advisories/GHSA-88vq-7689-gvgx
access.redhat.com/errata/RHSA-2026:95194
Show 194 moreShow less
bugzilla.redhat.com/2528197
errata.almalinux.org/9/ALSA-2026-95194.html
security-tracker.debian.org/tracker/CVE-2026-119261
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_95194.json
cve.org/CVERecord?id=CVE-2026-84359
issues.redhat.com/browse/RHEL-271317
support.apple.com/en-us/148281
errata.rockylinux.org/RLSA-2026:95194
suse.com/security/cve/CVE-2026-119260
bugzilla.suse.com/1288840
Left out here: 712 versions, 356 references and the rest of 1 source description. The JSON record has them.