CVE-2026-91733
Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote...
CVE-2026-91733 is a high vulnerability (CVSS 8.3) in Google Chrome, published September 15, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 24th percentile. Fixed in chromium 153.0.8010.52-1~deb12u1.
- Severity
- 8.3 HighCVSS 3.1, CVE List
- Exploit chance
- 0.32%EPSS, 24th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
153.0.8010.52-1~deb12u1chromium +64 more
Description
Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
webkit2gtk3AlmaLinux:9 From an advisory covering 307 CVEs | before 2.54.0-1.el9_8 | 2.54.0-1.el9_8 |
webkit2gtk3-develAlmaLinux:9 From an advisory covering 307 CVEs | before 2.54.0-1.el9_8 | 2.54.0-1.el9_8 |
webkit2gtk3-jscAlmaLinux:9 From an advisory covering 307 CVEs | before 2.54.0-1.el9_8 | 2.54.0-1.el9_8 |
webkit2gtk3-jsc-develAlmaLinux:9 From an advisory covering 307 CVEs | before 2.54.0-1.el9_8 | 2.54.0-1.el9_8 |
webkit2gtk3AlmaLinux:9 From an advisory covering 17 CVEs | before 2.54.2-0.el9_8.2 | 2.54.2-0.el9_8.2 |
webkit2gtk3-develAlmaLinux:9 From an advisory covering 17 CVEs | before 2.54.2-0.el9_8.2 | 2.54.2-0.el9_8.2 |
webkit2gtk3-jscAlmaLinux:9 From an advisory covering 17 CVEs | before 2.54.2-0.el9_8.2 | 2.54.2-0.el9_8.2 |
webkit2gtk3-jsc-develAlmaLinux:9 From an advisory covering 17 CVEs | before 2.54.2-0.el9_8.2 | 2.54.2-0.el9_8.2 |
webkit2gtk3AlmaLinux:8 From an advisory covering 18 CVEs | before 2.54.2-2.el8_10 | 2.54.2-2.el8_10 |
webkit2gtk3-develAlmaLinux:8 From an advisory covering 18 CVEs | before 2.54.2-2.el8_10 | 2.54.2-2.el8_10 |
Show 55 moreShow less
| Package | Affected | Fixed |
|---|---|---|
webkit2gtk3-jscAlmaLinux:8 From an advisory covering 18 CVEs | before 2.54.2-2.el8_10 | 2.54.2-2.el8_10 |
webkit2gtk3-jsc-develAlmaLinux:8 From an advisory covering 18 CVEs | before 2.54.2-2.el8_10 | 2.54.2-2.el8_10 |
webkit2gtk3TuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs | before 2.54.0-1.el9_6.tuxcare.els8 | 2.54.0-1.el9_6.tuxcare.els8 |
webkit2gtk3-develTuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs | before 2.54.0-1.el9_6.tuxcare.els8 | 2.54.0-1.el9_6.tuxcare.els8 |
webkit2gtk3-jscTuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs | before 2.54.0-1.el9_6.tuxcare.els8 | 2.54.0-1.el9_6.tuxcare.els8 |
webkit2gtk3-jsc-develTuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs | before 2.54.0-1.el9_6.tuxcare.els8 | 2.54.0-1.el9_6.tuxcare.els8 |
webkit2gtk3TuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs | before 2.54.0-1.el9.tuxcare.els13 | 2.54.0-1.el9.tuxcare.els13 |
webkit2gtk3-develTuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs | before 2.54.0-1.el9.tuxcare.els13 | 2.54.0-1.el9.tuxcare.els13 |
webkit2gtk3-jscTuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs | before 2.54.0-1.el9.tuxcare.els13 | 2.54.0-1.el9.tuxcare.els13 |
webkit2gtk3-jsc-develTuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs | before 2.54.0-1.el9.tuxcare.els13 | 2.54.0-1.el9.tuxcare.els13 |
chromiumDebian:12 | before 153.0.8010.52-1~deb12u1, plus listed versions 113.0.5672.126-1114.0.5735.106-1114.0.5735.106-1~deb11u1114.0.5735.106-1~deb12u1114.0.5735.133-1 Show 45 moreShow less114.0.5735.133-1~deb11u1114.0.5735.133-1~deb12u1114.0.5735.198-1114.0.5735.198-1~deb11u1114.0.5735.198-1~deb12u1114.0.5735.90-1114.0.5735.90-2114.0.5735.90-2~deb11u1114.0.5735.90-2~deb12u1115.0.5790.102-1115.0.5790.102-2115.0.5790.170-1115.0.5790.170-1~deb11u1115.0.5790.170-1~deb12u1115.0.5790.98-1115.0.5790.98-1~deb11u1115.0.5790.98-1~deb12u1115.0.5790.98-2116.0.5845.110-1116.0.5845.110-1~deb11u1116.0.5845.110-1~deb12u1116.0.5845.110-2116.0.5845.140-1116.0.5845.140-1~deb11u1116.0.5845.140-1~deb12u1116.0.5845.180-1116.0.5845.180-1~deb11u1116.0.5845.180-1~deb12u1116.0.5845.96-1116.0.5845.96-1~deb11u1116.0.5845.96-1~deb12u1116.0.5845.96-2117.0.5938.132-1117.0.5938.132-1~deb11u1117.0.5938.132-1~deb12u1117.0.5938.132-2117.0.5938.149-1117.0.5938.149-1~deb11u1117.0.5938.149-1~deb12u1117.0.5938.62-1117.0.5938.62-1~deb11u1117.0.5938.62-1~deb12u1117.0.5938.92-1118.0.5993.117-1118.0.5993.117-1~deb11u1 | 153.0.8010.52-1~deb12u1 |
chromiumDebian:13 | before 153.0.8010.47-2~deb13u1, plus listed versions 138.0.7204.183-1139.0.7258.127-1139.0.7258.127-1~deb12u1139.0.7258.127-1~deb13u1139.0.7258.127-2 Show 45 moreShow less139.0.7258.138-1139.0.7258.138-1~deb12u1139.0.7258.138-1~deb13u1139.0.7258.154-1139.0.7258.154-1~deb12u1139.0.7258.154-1~deb13u1139.0.7258.66-1139.0.7258.66-1~deb12u1140.0.7339.127-1140.0.7339.127-1~deb12u1140.0.7339.127-1~deb13u1140.0.7339.185-1140.0.7339.185-1~deb12u1140.0.7339.185-1~deb13u1140.0.7339.207-1140.0.7339.207-1~deb12u1140.0.7339.207-1~deb13u1140.0.7339.80-1140.0.7339.80-1~deb12u1140.0.7339.80-1~deb13u1141.0.7390.107-1141.0.7390.107-1~deb12u1141.0.7390.107-1~deb13u1141.0.7390.122-1141.0.7390.122-1~deb12u1141.0.7390.122-1~deb13u1141.0.7390.54-1141.0.7390.54-1~deb12u1141.0.7390.54-1~deb13u1141.0.7390.65-1141.0.7390.65-1~deb12u1141.0.7390.65-1~deb13u1142.0.7444.134-1142.0.7444.134-1~deb12u1142.0.7444.134-1~deb13u1142.0.7444.162-1142.0.7444.162-1~deb12u1142.0.7444.162-1~deb13u1142.0.7444.175-1142.0.7444.175-1~deb12u1142.0.7444.175-1~deb13u1142.0.7444.59-1142.0.7444.59-1~deb12u1142.0.7444.59-1~deb13u1143.0.7499.109-1 | 153.0.8010.47-2~deb13u1 |
chromiumDebian:14 | before 153.0.8010.47-1, plus listed versions 138.0.7204.183-1139.0.7258.127-1139.0.7258.127-1~deb12u1139.0.7258.127-1~deb13u1139.0.7258.127-2 Show 45 moreShow less139.0.7258.138-1139.0.7258.138-1~deb12u1139.0.7258.138-1~deb13u1139.0.7258.154-1139.0.7258.154-1~deb12u1139.0.7258.154-1~deb13u1139.0.7258.66-1139.0.7258.66-1~deb12u1140.0.7339.127-1140.0.7339.127-1~deb12u1140.0.7339.127-1~deb13u1140.0.7339.185-1140.0.7339.185-1~deb12u1140.0.7339.185-1~deb13u1140.0.7339.207-1140.0.7339.207-1~deb12u1140.0.7339.207-1~deb13u1140.0.7339.80-1140.0.7339.80-1~deb12u1140.0.7339.80-1~deb13u1141.0.7390.107-1141.0.7390.107-1~deb12u1141.0.7390.107-1~deb13u1141.0.7390.122-1141.0.7390.122-1~deb12u1141.0.7390.122-1~deb13u1141.0.7390.54-1141.0.7390.54-1~deb12u1141.0.7390.54-1~deb13u1141.0.7390.65-1141.0.7390.65-1~deb12u1141.0.7390.65-1~deb13u1142.0.7444.134-1142.0.7444.134-1~deb12u1142.0.7444.134-1~deb13u1142.0.7444.162-1142.0.7444.162-1~deb12u1142.0.7444.162-1~deb13u1142.0.7444.175-1142.0.7444.175-1~deb12u1142.0.7444.175-1~deb13u1142.0.7444.59-1142.0.7444.59-1~deb12u1142.0.7444.59-1~deb13u1143.0.7499.109-1 | 153.0.8010.47-1 |
libskiaDebian:14 | All versions, plus listed versions 146.20260311+dfsg-1146.20260311+dfsg-2146.20260311+dfsg-3146.20260311+dfsg-4146.20260414~git.ef5f213+dfsg-1 Show 9 moreShow less146.20260414~git.ef5f213+dfsg-2146.20260414~git.ef5f213+dfsg-3146.20260414~git.ef5f213+dfsg-4146.20260414~git.ef5f213+dfsg-5146.20260602~git.3476902+dfsg-1146.20260602~git.3476902+dfsg-2146.20260602~git.3476902+dfsg-3146.20260602~git.3476902+dfsg-4146.20260602~git.3476902+dfsg-5 | None known |
webkit2gtk3Red Hat:enterprise_linux:9::appstream From an advisory covering 18 CVEs | before 0:2.54.2-0.el9_8.2 | 0:2.54.2-0.el9_8.2 |
webkit2gtk3-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 18 CVEs | before 0:2.54.2-0.el9_8.2 | 0:2.54.2-0.el9_8.2 |
webkit2gtk3-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 18 CVEs | before 0:2.54.2-0.el9_8.2 | 0:2.54.2-0.el9_8.2 |
webkit2gtk3-develRed Hat:enterprise_linux:9::appstream From an advisory covering 18 CVEs | before 0:2.54.2-0.el9_8.2 | 0:2.54.2-0.el9_8.2 |
webkit2gtk3-devel-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 18 CVEs | before 0:2.54.2-0.el9_8.2 | 0:2.54.2-0.el9_8.2 |
webkit2gtk3-jscRed Hat:enterprise_linux:9::appstream From an advisory covering 18 CVEs | before 0:2.54.2-0.el9_8.2 | 0:2.54.2-0.el9_8.2 |
webkit2gtk3-jsc-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 18 CVEs | before 0:2.54.2-0.el9_8.2 | 0:2.54.2-0.el9_8.2 |
webkit2gtk3-jsc-develRed Hat:enterprise_linux:9::appstream From an advisory covering 18 CVEs | before 0:2.54.2-0.el9_8.2 | 0:2.54.2-0.el9_8.2 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 18 CVEs | before 0:2.54.2-0.el9_8.2 | 0:2.54.2-0.el9_8.2 |
webkit2gtk3Red Hat:enterprise_linux:8::appstream From an advisory covering 18 CVEs | before 0:2.54.2-2.el8_10 | 0:2.54.2-2.el8_10 |
webkit2gtk3-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 18 CVEs | before 0:2.54.2-2.el8_10 | 0:2.54.2-2.el8_10 |
webkit2gtk3-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 18 CVEs | before 0:2.54.2-2.el8_10 | 0:2.54.2-2.el8_10 |
webkit2gtk3-develRed Hat:enterprise_linux:8::appstream From an advisory covering 18 CVEs | before 0:2.54.2-2.el8_10 | 0:2.54.2-2.el8_10 |
webkit2gtk3-devel-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 18 CVEs | before 0:2.54.2-2.el8_10 | 0:2.54.2-2.el8_10 |
webkit2gtk3-jscRed Hat:enterprise_linux:8::appstream From an advisory covering 18 CVEs | before 0:2.54.2-2.el8_10 | 0:2.54.2-2.el8_10 |
webkit2gtk3-jsc-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 18 CVEs | before 0:2.54.2-2.el8_10 | 0:2.54.2-2.el8_10 |
webkit2gtk3-jsc-develRed Hat:enterprise_linux:8::appstream From an advisory covering 18 CVEs | before 0:2.54.2-2.el8_10 | 0:2.54.2-2.el8_10 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 18 CVEs | before 0:2.54.2-2.el8_10 | 0:2.54.2-2.el8_10 |
webkit2gtk3Red Hat:enterprise_linux:9::appstream From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-develRed Hat:enterprise_linux:9::appstream From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-devel-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-jscRed Hat:enterprise_linux:9::appstream From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-jsc-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-jsc-develRed Hat:enterprise_linux:9::appstream From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3Rocky Linux:9 From an advisory covering 116 CVEs | before 0:2.54.0-1.el9_8 | 0:2.54.0-1.el9_8 |
webkit2gtk3Rocky Linux:9 From an advisory covering 17 CVEs | before 0:2.54.2-0.el9_8.2 | 0:2.54.2-0.el9_8.2 |
webkit2gtk3Rocky Linux:8 From an advisory covering 18 CVEs | before 0:2.54.2-2.el8_10 | 0:2.54.2-2.el8_10 |
webkit2gtk3Rocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-debuginfoRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-debugsourceRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-develRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-devel-debuginfoRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-jscRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-jsc-debuginfoRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-jsc-develRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
webkit2gtk3-jsc-devel-debuginfoRocky Linux:9 From an advisory covering 93 CVEs | before 0:2.54.2-2.el9_9 | 0:2.54.2-2.el9_9 |
chromiumopenSUSE:Tumbleweed From an advisory covering 58 CVEs | before 153.0.8010.47-1.1 | 153.0.8010.47-1.1 |
chromiumopenSUSE:Leap 16.0 From an advisory covering 288 CVEs | before 153.0.8010.52-bp160.1.1 | 153.0.8010.52-bp160.1.1 |
What each source reports
CVE List Score used
Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
- Record
CVE-2026-91733- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - Weakness
- CWE-754
- Updated
- 2026-11-02
EUVDEUVD-2026-79968
Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
- Record
EUVD-2026-79968- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-pfh7-rj4p-69qv
Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote...
Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
- Record
GHSA-pfh7-rj4p-69qv- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - Weakness
- CWE-754
- Updated
- 2026-11-02
NVD
Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
- Record
CVE-2026-91733- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - Weakness
- CWE-754
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-91733
Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
- Record
DEBIAN-CVE-2026-91733- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:95194
Red Hat Security Advisory: webkit2gtk3 security update
- Record
RHSA-2026:95194- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-13
Show 14 moreShow less
OSVRHSA-2026:96080
Red Hat Security Advisory: webkit2gtk3 security update
- Record
RHSA-2026:96080- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-13
OSVRHSA-2026:98455
Red Hat Security Advisory: webkit2gtk3 security, bug fix, and enhancement update
- Record
RHSA-2026:98455- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-13
OSVRLSA-2026:69098
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154)
chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173)
chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161)
chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)
chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)
webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)
webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)
webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787)
webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)
webkitgtk: use-after-free of JSCValue function parameters (CVE-2026-78376)
chromium-browser: Skia: Information disclosure via out-of-bounds read in crafted media file (CVE-2026-79020)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43795)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-64715)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64718)
webkitgtk: Visiting a maliciously crafted website may leak sensitive data (CVE-2026-64778)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64779)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64780)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64782)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64784)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65331)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65332)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65334)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65335)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65336)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65337)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65338)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65340)
webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2026-65341)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65351)
webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature (CVE-2026-83596)
chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359)
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-84635)
webkitgtk: Processing maliciously crafted web…
- Record
RLSA-2026:69098- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:95194
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-85049)
chromium-browser: skia: Skia: Cross-origin data disclosure via use-after-free vulnerability (CVE-2026-91747)
chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation (CVE-2026-91733)
chromium-browser: skia: Google Chrome: Cross-origin data disclosure due to uninitialized resource in Skia (CVE-2026-91740)
chromium-browser: skia: Google Chrome Skia: Cross-origin data disclosure via improper state validation (CVE-2026-93387)
chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-102325)
chromium-browser: skia: Integer overflow in Skia (CVE-2026-103629)
chromium-browser: skia: Uninitialized resource in Skia (CVE-2026-106379)
chromium-browser: skia: Out of bounds read in Skia (CVE-2026-106399)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-113106)
chromium-browser: skia: Improper input validation in Skia (CVE-2026-118348)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-118351)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-118340)
chromium-browser: skia: Improper input validation in Skia (CVE-2026-118354)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-118319)
chromium-browser: skia: Use after free in Skia (CVE-2026-119271)
chromium-browser: skia: Improper input validation in Skia (CVE-2026-119261)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:95194- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-05
OSVRLSA-2026:96080
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-85049)
chromium-browser: skia: Skia: Cross-origin data disclosure via use-after-free vulnerability (CVE-2026-91747)
chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation (CVE-2026-91733)
chromium-browser: skia: Google Chrome: Cross-origin data disclosure due to uninitialized resource in Skia (CVE-2026-91740)
chromium-browser: skia: Google Chrome Skia: Cross-origin data disclosure via improper state validation (CVE-2026-93387)
chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-102325)
chromium-browser: skia: Integer overflow in Skia (CVE-2026-103629)
chromium-browser: skia: Uninitialized resource in Skia (CVE-2026-106379)
chromium-browser: skia: Out of bounds read in Skia (CVE-2026-106399)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-113106)
chromium-browser: skia: Improper input validation in Skia (CVE-2026-118348)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-118351)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-118340)
chromium-browser: skia: Improper input validation in Skia (CVE-2026-118354)
chromium-browser: skia: Memory corruption in Skia (CVE-2026-118319)
chromium-browser: skia: Use after free in Skia (CVE-2026-119271)
chromium-browser: skia: Improper input validation in Skia (CVE-2026-119261)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:96080- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-10
OSVRLSA-2026:98455
Critical: webkit2gtk3 security, bug fix, and enhancement update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2023-4860)
chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page (CVE-2024-7966)
chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8193)
chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8198)
chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8636)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome (CVE-2024-9123)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2025-0436)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2025-0444)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-3538)
chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-3931)
chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-4460)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-5870)
chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-6364)
chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-6298)
chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-7353)
chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-7949)
chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-7923)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-7920)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-8510)
chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-8579)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9923)
chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-10020)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9909)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-10012)
chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9893)
chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-9981)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9998)
chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-10011)
chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-9892)
chromium-browser: skia: chromium-browser: skia: Type Confusion in Skia (CVE-2026-9983)
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-10009)
chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-10985)
chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-10993)
chromium-browser: skia: chromium-browser: skia: Stack buffer overflow in Skia (CVE-2026-11024)
chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-11121)
chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11057)
chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-11124)
chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11039)
chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11159)
*…
- Record
RLSA-2026:98455- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-13
OSVALSA-2026:69098No score
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
- chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154)
- chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173)
- chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161)
- chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)
- chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)
- webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)
- webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)
- webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787)
- webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)
- webkitgtk: use-after-free of JSCValue function parameters (CVE-2026-78376)
- chromium-browser: Skia: Information disclosure via out-of-bounds read in crafted media file (CVE-2026-79020)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-43795)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2026-64715)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64718)
- webkitgtk: Visiting a maliciously crafted website may leak sensitive data (CVE-2026-64778)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64779)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64780)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64782)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64784)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65331)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65332)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65334)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65335)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65336)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65337)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65338)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65340)
- webkitgtk: Processing maliciously crafted web content may lead to memory corruption (CVE-2026-65341)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65351)
- webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature (CVE-2026-83596)
- chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359)
- webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-84635) *…
- Record
ALSA-2026:69098- Updated
- 2026-11-02
OSVALSA-2026:95194No score
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
- chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-85049)
- chromium-browser: skia: Skia: Cross-origin data disclosure via use-after-free vulnerability (CVE-2026-91747)
- chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation (CVE-2026-91733)
- chromium-browser: skia: Google Chrome: Cross-origin data disclosure due to uninitialized resource in Skia (CVE-2026-91740)
- chromium-browser: skia: Google Chrome Skia: Cross-origin data disclosure via improper state validation (CVE-2026-93387)
- chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-102325)
- chromium-browser: skia: Integer overflow in Skia (CVE-2026-103629)
- chromium-browser: skia: Uninitialized resource in Skia (CVE-2026-106379)
- chromium-browser: skia: Out of bounds read in Skia (CVE-2026-106399)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-113106)
- chromium-browser: skia: Improper input validation in Skia (CVE-2026-118348)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-118351)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-118340)
- chromium-browser: skia: Improper input validation in Skia (CVE-2026-118354)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-118319)
- chromium-browser: skia: Use after free in Skia (CVE-2026-119271)
- chromium-browser: skia: Improper input validation in Skia (CVE-2026-119261)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:95194- Updated
- 2026-11-05
OSVALSA-2026:96080No score
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
- chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359)
- chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-85049)
- chromium-browser: skia: Skia: Cross-origin data disclosure via use-after-free vulnerability (CVE-2026-91747)
- chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation (CVE-2026-91733)
- chromium-browser: skia: Google Chrome: Cross-origin data disclosure due to uninitialized resource in Skia (CVE-2026-91740)
- chromium-browser: skia: Google Chrome Skia: Cross-origin data disclosure via improper state validation (CVE-2026-93387)
- chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-102325)
- chromium-browser: skia: Integer overflow in Skia (CVE-2026-103629)
- chromium-browser: skia: Uninitialized resource in Skia (CVE-2026-106379)
- chromium-browser: skia: Out of bounds read in Skia (CVE-2026-106399)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-113106)
- chromium-browser: skia: Improper input validation in Skia (CVE-2026-118348)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-118351)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-118340)
- chromium-browser: skia: Improper input validation in Skia (CVE-2026-118354)
- chromium-browser: skia: Memory corruption in Skia (CVE-2026-118319)
- chromium-browser: skia: Use after free in Skia (CVE-2026-119271)
- chromium-browser: skia: Improper input validation in Skia (CVE-2026-119261)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:96080- Updated
- 2026-11-09
OSVCLSA-2026-1790805563No score
webkit2gtk3: Fix of 7 CVEs
- CVE-2026-91747: use-after-free in the Skia GPU glyph atlas after a partial atlas update
- CVE-2026-91740: uninitialized GPU resource read after a failed render task in Skia
- CVE-2026-91733: missing flush failure handling in the Skia GPU backend
- CVE-2026-17771: uninitialized texture padding read by Skia linear sampling
- Record
CLSA-2026-1790805563- Updated
- 2026-11-02
OSVCLSA-2026-1792402249No score
webkit2gtk3: Fix of 4 CVEs
- CVE-2026-91747: use-after-free in the Skia GPU glyph atlas after a partial atlas update
- CVE-2026-91740: uninitialized GPU resource read after a failed render task in Skia
- CVE-2026-91733: missing flush failure handling in the Skia GPU backend
- CVE-2026-17771: uninitialized texture padding read by Skia linear sampling
- Record
CLSA-2026-1792402249- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11812-1No score
chromedriver-153.0.8010.47-1.1 on GA media
These are all security issues fixed in the chromedriver-153.0.8010.47-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11812-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:21913-1No score
Security update for chromium
This update for chromium fixes the following issues:
Changes in chromium:
- Chromium 153.0.8010.47 (boo#1280687):
- CVE-2026-91726: Out of bounds read in WebGL
- CVE-2026-91721: Use after free in Internals
- CVE-2026-91749: Use after free in Workers
- CVE-2026-91724: Use after free in Input
- CVE-2026-91728: Integer overflow in V8
- CVE-2026-91734: Incorrect authorization in Core
- CVE-2026-91727: Incorrect reference resolution in Extensions
- CVE-2026-91743: Race condition in Core
- CVE-2026-91744: Race condition in PlatformIntegration
- CVE-2026-91712: Race condition in Extensions
- CVE-2026-91748: Race condition in Extensions
- CVE-2026-91720: Uninitialized resource in ANGLE
- CVE-2026-91731: Type confusion in Compositing
- CVE-2026-91747: Use after free in Skia
- CVE-2026-91733: Improper state validation in Skia
- CVE-2026-91741: Type confusion in CacheStorage
- CVE-2026-91709: Type confusion in ServiceWorker
- CVE-2026-91717: Missing authorization in Android
- CVE-2026-91735: Incorrect authorization in WebUI
- CVE-2026-91708: Race condition in Network
- CVE-2026-91736: Use after free in DOM
- CVE-2026-91740: Uninitialized resource in Skia
- CVE-2026-91710: Use after free in WebAppInstalls
- CVE-2026-91718: Use after free in Core
- CVE-2026-91716: Use after free in Auth
- CVE-2026-91746: Integer overflow in Compositing
- CVE-2026-91729: Use after free in DigitalCredentials
- CVE-2026-91737: Use after free in PDF
- CVE-2026-91711: Out of bounds write in ServiceWorker
- CVE-2026-91715: Type confusion in ServiceWorker
- CVE-2026-91745: Use after free in V8
- CVE-2026-91723: Race condition in WebAppInstalls
- CVE-2026-91732: Missing authorization in AppManifest
- CVE-2026-91742: Confused deputy in PriceTracking
- CVE-2026-91714: Observable discrepancy in Fonts
- CVE-2026-91725: Observable discrepancy in CSS
- CVE-2026-91739: Missing authorization in Transactions Platform
- CVE-2026-91713: Missing authorization in Browser
- CVE-2026-91738: Improper input validation in ANGLE
- CVE-2026-91730: Incomplete cleanup in GetUserMedia
- CVE-2026-91722: Use after free in Input
- CVE-2026-91719: Code injection in XML
- Record
openSUSE-SU-2026:21913-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:21921-1No score
Security update for chromium
This update for chromium fixes the following issues:
Changes in chromium:
Chromium 153.0.8010.52 (boo#1281123):
- CVE-2026-93374: Use after free in Dawn
- CVE-2026-93372: Buffer overflow in WebGL
- CVE-2026-93375: Incorrect reference resolution in Tracing
- CVE-2026-93382: Use after free in PDFium
- CVE-2026-93387: Improper state validation in Skia
- CVE-2026-93373: Use after free in Extensions
- CVE-2026-93381: Buffer overflow in PDFium
- CVE-2026-93379: Incorrect authorization in ORB
- CVE-2026-93377: Type confusion in V8
- CVE-2026-93380: Race condition in FileSystem
- CVE-2026-93384: Server-side request forgery in Omnibox
- CVE-2026-93383: Information leak in Permissions
- CVE-2026-93376: Out of bounds read in DataTransfer
- CVE-2026-93378: Missing authorization in Storage
- CVE-2026-93385: Information leak in Paint
- CVE-2026-93386: UI misrepresentation in WebAppInstalls
Chromium 153.0.8010.47 (boo#1280687):
- CVE-2026-91726: Out of bounds read in WebGL
- CVE-2026-91721: Use after free in Internals
- CVE-2026-91749: Use after free in Workers
- CVE-2026-91724: Use after free in Input
- CVE-2026-91728: Integer overflow in V8
- CVE-2026-91734: Incorrect authorization in Core
- CVE-2026-91727: Incorrect reference resolution in Extensions
- CVE-2026-91743: Race condition in Core
- CVE-2026-91744: Race condition in PlatformIntegration
- CVE-2026-91712: Race condition in Extensions
- CVE-2026-91748: Race condition in Extensions
- CVE-2026-91720: Uninitialized resource in ANGLE
- CVE-2026-91731: Type confusion in Compositing
- CVE-2026-91747: Use after free in Skia
- CVE-2026-91733: Improper state validation in Skia
- CVE-2026-91741: Type confusion in CacheStorage
- CVE-2026-91709: Type confusion in ServiceWorker
- CVE-2026-91717: Missing authorization in Android
- CVE-2026-91735: Incorrect authorization in WebUI
- CVE-2026-91708: Race condition in Network
- CVE-2026-91736: Use after free in DOM
- CVE-2026-91740: Uninitialized resource in Skia
- CVE-2026-91710: Use after free in WebAppInstalls
- CVE-2026-91718: Use after free in Core
- CVE-2026-91716: Use after free in Auth
- CVE-2026-91746: Integer overflow in Compositing
- CVE-2026-91729: Use after free in DigitalCredentials
- CVE-2026-91737: Use after free in PDF
- CVE-2026-91711: Out of bounds write in ServiceWorker
- CVE-2026-91715: Type confusion in ServiceWorker
- CVE-2026-91745: Use after free in V8
- CVE-2026-91723: Race condition in WebAppInstalls
- CVE-2026-91732: Missing authorization in AppManifest
- CVE-2026-91742: Confused deputy in PriceTracking
- CVE-2026-91714: Observable discrepancy in Fonts
- CVE-2026-91725: Observable discrepancy in CSS
- CVE-2026-91739: Missing authorization in Transactions Platform
- CVE-2026-91713: Missing authorization in Browser
- CVE-2026-91738: Improper input validation in ANGLE
- CVE-2026-91730: Incomplete cleanup in GetUserMedia
- CVE-2026-91722: Use after free in Input
- CVE-2026-91719: Code injection in XML
Chromium 153.0.8010.36 (boo#1279840):
- CVE-2026-87464: Use after free in WebGL
- CVE-2026-87488: Use after free in WebGL
- CVE-2026-87438: Out of bounds write in WebGL
- CVE-2026-87527: Buffer overflow in WebGL
- CVE-2026-87628: Use after free in Cast
- CVE-2026-87512: Use after free in ANGLE
- CVE-2026-87585: Double free in PDFium
- CVE-2026-87444: Memory corruption in Codecs
- CVE-2026-87447: Incorrect authorization in Network
- CVE-2026-87440: Out of bounds read in Media
- CVE-2026-87633: Use after free in Views
- CVE-2026-87525: Out of bounds read in Chromoting
- CVE-2026-87578: Use after free in Receiver
- CVE-2026-87517: Race condition in Mobile
- CVE-2026-87524: Use after free in Core
- CVE-2026-87569: Missing authorization in Views
- CVE-2026-87554: Race condition in Chromoting
- CVE-2026-87467: Race condition in Updater
- CVE-2026-87492: Incorrect…
- Record
openSUSE-SU-2026:21921-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases, references | OSV | |
| affected, aliases, references | OSV | |
| affected, aliases, references | OSV | |
| affected, aliases, references | OSV | |
| affected | ||
| affected, aliases, references | OSV | |
| affected, aliases, facts, references | OSV | |
| affected | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html
issues.chromium.org/issues/540021213
nvd.nist.gov/vuln/detail/CVE-2026-91733
github.com/advisories/GHSA-pfh7-rj4p-69qv
access.redhat.com/errata/RHSA-2026:69098
Show 194 moreShow less
bugzilla.redhat.com/2388151
errata.almalinux.org/9/ALSA-2026-69098.html
redhat.com/security/data/cve/CVE-2023-4860.html
errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1790805563.html
security-tracker.debian.org/tracker/CVE-2026-91733
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_95194.json
cve.org/CVERecord?id=CVE-2026-84359
issues.redhat.com/browse/RHEL-271317
support.apple.com/en-us/148281
errata.rockylinux.org/RLSA-2026:69098
suse.com/security/cve/CVE-2026-91708
bugzilla.suse.com/1280687
Left out here: 640 versions, 1,202 references and the rest of 4 source descriptions. The JSON record has them.