Vulnerability-Lookup

RHSA-2026:98455

Vulnerability from csaf_redhat - Published: 2026-11-11 12:30 - Updated: 2026-11-11 22:40

Summary

Red Hat Security Advisory: webkit2gtk3 security, bug fix, and enhancement update

Severity

Critical

Notes

Topic: An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2023-4860) * chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page (CVE-2024-7966) * chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8193) * chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8198) * chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8636) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome (CVE-2024-9123) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2025-0436) * chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2025-0444) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-3538) * chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-3931) * chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-4460) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-5870) * chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-6364) * chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-6298) * chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-7353) * chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-7949) * chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-7923) * chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-7920) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-8510) * chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-8579) * chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9923) * chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-10020) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9909) * chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-10012) * chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-9893) * chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-9981) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-9998) * chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-10011) * chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-9892) * chromium-browser: skia: chromium-browser: skia: Type Confusion in Skia (CVE-2026-9983) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-10009) * chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-10985) * chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-10993) * chromium-browser: skia: chromium-browser: skia: Stack buffer overflow in Skia (CVE-2026-11024) * chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-11121) * chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11057) * chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-11124) * chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11039) * chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-11159) * chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-10977) * chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia (CVE-2026-10925) * chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia (CVE-2026-10941) * chromium-browser: skia: chromium-browser: skia: Vulnerability in Skia (CVE-2026-11099) * chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-11663) * chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-11675) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-13841) * chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-13971) * chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-13820) * chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-13885) * chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-13781) * chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-14414) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-14389) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2026-14387) * chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-14410) * chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-14419) * chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia (CVE-2026-14429) * chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia (CVE-2026-14427) * chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-15766) * chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-15774) * chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized use in Skia (CVE-2026-16417) * chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2026-17702) * chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-17757) * chromium-browser: skia: chromium-browser: skia: Side-channel information leakage in Skia (CVE-2026-17914) * chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-17992) * chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-17745) * chromium-browser: skia: chromium-browser: skia: Race in Skia (CVE-2026-17712) * chromium-browser: skia: chromium-browser: skia: Uninitialized Use in Skia (CVE-2026-17771) * chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2026-17653) * chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized use in Google Chrome (CVE-2026-19160) * chromium-browser: skia: chromium-browser: Out of bounds read in Skia (CVE-2026-79112) * chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized resource in Skia (CVE-2026-78914) * chromium-browser: skia: chromium-browser: skia: Information leak via crafted HTML page in Google Chrome (CVE-2026-79147) * chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-78958) * chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-79144) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-65333) * chromium-browser: skia: chromium-browser: Information leak in Skia (CVE-2026-84359) * chromium-browser: skia: Skia in chromium-browser: Information disclosure via improper state validation (CVE-2026-91733) * chromium-browser: skia: Google Chrome: Cross-origin data disclosure due to uninitialized resource in Skia (CVE-2026-91740) * chromium-browser: skia: chromium-browser: Uninitialized resource in Skia (CVE-2026-102325) * chromium-browser: skia: Integer overflow in Skia (CVE-2026-103629) * chromium-browser: skia: Uninitialized resource in Skia (CVE-2026-106379) * chromium-browser: skia: Out of bounds read in Skia (CVE-2026-106399) * chromium-browser: skia: Memory corruption in Skia (CVE-2026-113106) * chromium-browser: skia: Improper input validation in Skia (CVE-2026-118348) * chromium-browser: skia: Memory corruption in Skia (CVE-2026-118351) * chromium-browser: skia: Memory corruption in Skia (CVE-2026-118340) * chromium-browser: skia: Improper input validation in Skia (CVE-2026-118354) * chromium-browser: skia: Memory corruption in Skia (CVE-2026-118319) * chromium-browser: skia: Use after free in Skia (CVE-2026-119271) * chromium-browser: skia: Improper input validation in Skia (CVE-2026-119261) Bug Fix(es) and Enhancement(s): * webkit2gtk3 2.54.0 regression breaks Eclipse IDE WebKit-based views on CentOS Stream 9 (JIRA:RHEL-271317) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2023-4860

An inappropriate implementation flaw was found in Skia in Google Chrome. This issue may allow a remote attacker to compromise the renderer process to perform a sandbox escape via a crafted HTML page.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-0:2.54.2-2.el9_9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-0:2.54.2-2.el9_9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-0:2.54.2-2.el9_9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-0:2.54.2-2.el9_9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-0:2.54.2-2.el9_9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-0:2.54.2-2.el9_9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.54.2-2.el9_9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.54.2-2.el9_9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.54.2-2.el9_9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.54.2-2.el9_9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-debuginfo-0:2.54.2-2.el9_9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-debugsource-0:2.54.2-2.el9_9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-debugsource-0:2.54.2-2.el9_9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-debugsource-0:2.54.2-2.el9_9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-debugsource-0:2.54.2-2.el9_9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-debugsource-0:2.54.2-2.el9_9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-devel-0:2.54.2-2.el9_9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-devel-0:2.54.2-2.el9_9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-devel-0:2.54.2-2.el9_9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-devel-0:2.54.2-2.el9_9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-devel-0:2.54.2-2.el9_9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.54.2-2.el9_9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.54.2-2.el9_9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.54.2-2.el9_9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.54.2-2.el9_9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-devel-debuginfo-0:2.54.2-2.el9_9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-jsc-0:2.54.2-2.el9_9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-jsc-0:2.54.2-2.el9_9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-jsc-0:2.54.2-2.el9_9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-jsc-0:2.54.2-2.el9_9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-jsc-0:2.54.2-2.el9_9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.54.2-2.el9_9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.54.2-2.el9_9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.54.2-2.el9_9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.54.2-2.el9_9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-jsc-debuginfo-0:2.54.2-2.el9_9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.54.2-2.el9_9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.54.2-2.el9_9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.54.2-2.el9_9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.54.2-2.el9_9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-jsc-devel-0:2.54.2-2.el9_9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.54.2-2.el9_9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.54.2-2.el9_9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.54.2-2.el9_9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.54.2-2.el9_9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.9.0.Z.MAIN:webkit2gtk3-jsc-devel-debuginfo-0:2.54.2-2.el9_9.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2024-7966

Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

8.3 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2024-8193

Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2024-8198

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2024-8636

Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2024-9123

Integer overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-472 - External Control of Assumed-Immutable Web Parameter

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2025-0436

A flaw was found in the Skia component of Google Chrome. This issue may allow a remote attacker to exploit heap corruption via a crafted HTML page.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2025-0444

Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-3538

An integer overflow flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=484983991

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-3931

A heap buffer overflow flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=417599694

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-4460

An out of bounds read flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=490254124

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-5870

An integer overflow flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=495534710

9.6 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-6298

A heap buffer overflow flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=495700484

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-6364

An out of bounds read flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=502103414

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-7353

A heap buffer overflow flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=498809718

8.2 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-7920

An use after free flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=498989348

9.0 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-825 - Expired Pointer Dereference

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-7923

An out of bounds write flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=500080194

9.0 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-7949

An out of bounds read flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=496206134

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-8510

An integer overflow flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=502636904

8.0 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Critical

CVE-2026-8579

An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=496526419

8.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-1286 - Improper Validation of Syntactic Correctness of Input

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-9892

An inappropriate implementation flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=513948178

8.7 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

CWE-807 - Reliance on Untrusted Inputs in a Security Decision

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Critical

CVE-2026-9893

An use after free flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=513972075

8.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-825 - Expired Pointer Dereference

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Critical

CVE-2026-9909

An integer overflow flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=499152771

8.0 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-9923

An use after free flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=500393328

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-825 - Expired Pointer Dereference

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-9981

An inappropriate implementation flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=512995705

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-825 - Expired Pointer Dereference

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-9983

A type confusion flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=513001309

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-843 - Access of Resource Using Incompatible Type

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-9998

An integer overflow flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=513337118

8.2 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-10009

An integer overflow flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=513973560

9.0 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-10011

An inappropriate implementation flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=514017326

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

CWE-346 - Origin Validation Error

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-10012

An use after free flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=514063977

8.2 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-364 - Signal Handler Race Condition

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-10020

An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=496565479

8.2 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-10925

An out of bounds write flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=500071763

8.2 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-10941

An out of bounds memory access flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=503958940

9.6 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-10977

An uninitialized use flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=513340227

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

CWE-824 - Access of Uninitialized Pointer

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-10985

An out of bounds read flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=514082801

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-10993

A heap buffer overflow flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=504160794

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-11024

A stack buffer overflow flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=497591594

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-11039

An uninitialized use flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=498204112

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-824 - Access of Uninitialized Pointer

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-11057

An uninitialized use flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=498951946

4.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N

CWE-824 - Access of Uninitialized Pointer

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-11099

A vulnerability flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=500414865

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-11121

An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=501483855

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

CWE-346 - Origin Validation Error

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-11124

A heap buffer overflow flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=501511299

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-11159

An uninitialized use flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=501861921

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-824 - Access of Uninitialized Pointer

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-11663

An use after free flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=513820666

9.0 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-825 - Expired Pointer Dereference

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-11675

An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=516915337

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-13781

An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=516457532

9.0 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-807 - Reliance on Untrusted Inputs in a Security Decision

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-13820

An out of bounds read flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=512986879

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-13841

An integer overflow flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=515467789

8.2 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-13885

An use after free flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=500474409

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-825 - Expired Pointer Dereference

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-13971

An uninitialized use flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=513780208

5.7 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

CWE-824 - Access of Uninitialized Pointer

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-14387

An integer overflow flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=500305404

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-14389

An integer overflow flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=500505046

8.2 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-14410

An inappropriate implementation flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=513836996

2.8 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

CWE-1021 - Improper Restriction of Rendered UI Layers or Frames

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Low

CVE-2026-14414

An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=513948227

5.0 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

CWE-1286 - Improper Validation of Syntactic Correctness of Input

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-14419

An use after free flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=516981393

9.6 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CWE-825 - Expired Pointer Dereference

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-14427

A heap buffer overflow flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=520113415

8.2 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-14429

An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=520571816

8.2 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-1289 - Improper Validation of Unsafe Equivalence in Input

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-15766

An uninitialized use flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=514010477

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

CWE-824 - Access of Uninitialized Pointer

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-15774

An use after free flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=530646115

9.0 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-825 - Expired Pointer Dereference

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-16417

A flaw was found in Skia, a 2D graphics library used in Chromium. A remote attacker, after compromising the renderer process, could exploit an uninitialized use vulnerability by crafting a malicious HTML page. This could lead to the leakage of sensitive cross-origin data, potentially exposing information from other websites or applications.

5.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N

CWE-824 - Access of Uninitialized Pointer

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-17653

An use after free flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=520514458

9.0 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-825 - Expired Pointer Dereference

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Critical

CVE-2026-17702

An inappropriate implementation flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=517973093

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

CWE-346 - Origin Validation Error

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-17712

A race flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=520535595

9.6 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CWE-368 - Context Switching Race Condition

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-17745

An out of bounds read flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=500172224

8.2 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-17757

An uninitialized use flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=502351526

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-824 - Access of Uninitialized Pointer

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-17771

An uninitialized use flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=513160525

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-824 - Access of Uninitialized Pointer

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-17914

A side-channel information leakage flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=506377118

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CWE-205 - Observable Behavioral Discrepancy

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Low

CVE-2026-17992

An uninitialized use flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=520506316

0.0 (None)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N

CWE-824 - Access of Uninitialized Pointer

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Low

CVE-2026-19160

A flaw was found in Skia, a 2D graphics library used in Google Chrome. A remote attacker, after compromising the renderer process, could exploit an uninitialized use vulnerability by crafting a malicious HTML page. This could lead to the disclosure of sensitive cross-origin data.

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

CWE-824 - Access of Uninitialized Pointer

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-65333

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-78914

A flaw was found in Skia, a 2D graphics library used in Chromium. A remote attacker could exploit an uninitialized resource vulnerability by tricking a user into opening a specially crafted HTML page. This could potentially allow the attacker to read sensitive memory within the browser's sandbox, leading to information disclosure.

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CWE-824 - Access of Uninitialized Pointer

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-78958

An uninitialized resource flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=497205529

5.9 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

CWE-908 - Use of Uninitialized Resource

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-79112

An out of bounds read flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=524864599

3.5 (Low)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Low

CVE-2026-79144

An information leak flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=501759192

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CWE-346 - Origin Validation Error

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-79147

A flaw was found in Skia, a 2D graphics library used in Google Chrome. A remote attacker, after compromising the renderer process, could exploit this vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially lead to the disclosure of sensitive information.

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CWE-201 - Insertion of Sensitive Information Into Sent Data

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-84359

An information leak flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=514078656

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

CWE-346 - Origin Validation Error

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-91733

A flaw was found in Skia, a 2D graphics library used in chromium-browser. This improper state validation vulnerability allows a remote attacker, who has already compromised the renderer process, to read memory outside of the security sandbox. This can be achieved by enticing a user to open a specially crafted HTML page, leading to information disclosure.

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-91740

A flaw was found in Skia, a 2D graphics library used in Google Chrome. This vulnerability, stemming from an uninitialized resource, allows a remote attacker to obtain sensitive cross-origin data. By crafting a malicious HTML page, an attacker can trick a user into visiting it, leading to the unauthorized disclosure of information from other web origins.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-908 - Use of Uninitialized Resource

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-102325

An uninitialized resource flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=561994362 https://code.google.com/p/chromium/issues/detail?id=102325

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-908 - Use of Uninitialized Resource

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-103629

An integer overflow flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/562038679

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-106379

An uninitialized resource flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/561987051

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-908 - Use of Uninitialized Resource

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-106399

An out of bounds read flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/530237174

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Low

CVE-2026-113106

A memory corruption flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/553126587

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Moderate

CVE-2026-118319

A memory corruption flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/576194994

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-118340

A memory corruption flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/568936530

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-118348

An improper input validation flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/574776938

9.6 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-118351

A memory corruption flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/570825067

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-118354

An improper input validation flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/568936430

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-119261

A buffer overflow flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/574213633

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

CVE-2026-119271

An uninitialized resource flaw was found in the Skia component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/577403270

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-908 - Use of Uninitialized Resource

Affected products

Fixed 46 products, the same list as for CVE-2023-4860

Threats

Impact Important

References

578 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:98455	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2298302	external
https://bugzilla.redhat.com/show_bug.cgi?id=2307088	external
https://bugzilla.redhat.com/show_bug.cgi?id=2308415	external
https://bugzilla.redhat.com/show_bug.cgi?id=2308417	external
https://bugzilla.redhat.com/show_bug.cgi?id=2311665	external
https://bugzilla.redhat.com/show_bug.cgi?id=2314571	external
https://bugzilla.redhat.com/show_bug.cgi?id=2338161	external
https://bugzilla.redhat.com/show_bug.cgi?id=2343797	external
https://bugzilla.redhat.com/show_bug.cgi?id=2444617	external
https://bugzilla.redhat.com/show_bug.cgi?id=2446868	external
https://bugzilla.redhat.com/show_bug.cgi?id=2449412	external
https://bugzilla.redhat.com/show_bug.cgi?id=2456802	external
https://bugzilla.redhat.com/show_bug.cgi?id=2458786	external
https://bugzilla.redhat.com/show_bug.cgi?id=2458798	external
https://bugzilla.redhat.com/show_bug.cgi?id=2463657	external
https://bugzilla.redhat.com/show_bug.cgi?id=2467316	external
https://bugzilla.redhat.com/show_bug.cgi?id=2467351	external
https://bugzilla.redhat.com/show_bug.cgi?id=2467385	external
https://bugzilla.redhat.com/show_bug.cgi?id=2477624	external
https://bugzilla.redhat.com/show_bug.cgi?id=2477666	external
https://bugzilla.redhat.com/show_bug.cgi?id=2482973	external
https://bugzilla.redhat.com/show_bug.cgi?id=2482975	external
https://bugzilla.redhat.com/show_bug.cgi?id=2483023	external
https://bugzilla.redhat.com/show_bug.cgi?id=2483035	external
https://bugzilla.redhat.com/show_bug.cgi?id=2483045	external
https://bugzilla.redhat.com/show_bug.cgi?id=2483056	external
https://bugzilla.redhat.com/show_bug.cgi?id=2483062	external
https://bugzilla.redhat.com/show_bug.cgi?id=2483070	external
https://bugzilla.redhat.com/show_bug.cgi?id=2483103	external
https://bugzilla.redhat.com/show_bug.cgi?id=2483108	external
https://bugzilla.redhat.com/show_bug.cgi?id=2483114	external
https://bugzilla.redhat.com/show_bug.cgi?id=2484949	external
https://bugzilla.redhat.com/show_bug.cgi?id=2484981	external
https://bugzilla.redhat.com/show_bug.cgi?id=2484992	external
https://bugzilla.redhat.com/show_bug.cgi?id=2485015	external
https://bugzilla.redhat.com/show_bug.cgi?id=2485036	external
https://bugzilla.redhat.com/show_bug.cgi?id=2485043	external
https://bugzilla.redhat.com/show_bug.cgi?id=2485071	external
https://bugzilla.redhat.com/show_bug.cgi?id=2485081	external
https://bugzilla.redhat.com/show_bug.cgi?id=2485236	external
https://bugzilla.redhat.com/show_bug.cgi?id=2485289	external
https://bugzilla.redhat.com/show_bug.cgi?id=2485352	external
https://bugzilla.redhat.com/show_bug.cgi?id=2485638	external
https://bugzilla.redhat.com/show_bug.cgi?id=2486642	external
https://bugzilla.redhat.com/show_bug.cgi?id=2486644	external
https://bugzilla.redhat.com/show_bug.cgi?id=2495548	external
https://bugzilla.redhat.com/show_bug.cgi?id=2495557	external
https://bugzilla.redhat.com/show_bug.cgi?id=2495595	external
https://bugzilla.redhat.com/show_bug.cgi?id=2495605	external
https://bugzilla.redhat.com/show_bug.cgi?id=2495660	external
https://bugzilla.redhat.com/show_bug.cgi?id=2496263	external
https://bugzilla.redhat.com/show_bug.cgi?id=2496264	external
https://bugzilla.redhat.com/show_bug.cgi?id=2496275	external
https://bugzilla.redhat.com/show_bug.cgi?id=2496282	external
https://bugzilla.redhat.com/show_bug.cgi?id=2496283	external
https://bugzilla.redhat.com/show_bug.cgi?id=2496304	external
https://bugzilla.redhat.com/show_bug.cgi?id=2496308	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500647	external
https://bugzilla.redhat.com/show_bug.cgi?id=2500689	external
https://bugzilla.redhat.com/show_bug.cgi?id=2505966	external
https://bugzilla.redhat.com/show_bug.cgi?id=2508687	external
https://bugzilla.redhat.com/show_bug.cgi?id=2508726	external
https://bugzilla.redhat.com/show_bug.cgi?id=2508773	external
https://bugzilla.redhat.com/show_bug.cgi?id=2508809	external
https://bugzilla.redhat.com/show_bug.cgi?id=2508884	external
https://bugzilla.redhat.com/show_bug.cgi?id=2508941	external
https://bugzilla.redhat.com/show_bug.cgi?id=2508949	external
https://bugzilla.redhat.com/show_bug.cgi?id=2508987	external
https://bugzilla.redhat.com/show_bug.cgi?id=2512341	external
https://bugzilla.redhat.com/show_bug.cgi?id=2523847	external
https://bugzilla.redhat.com/show_bug.cgi?id=2523904	external
https://bugzilla.redhat.com/show_bug.cgi?id=2523912	external
https://bugzilla.redhat.com/show_bug.cgi?id=2523958	external
https://bugzilla.redhat.com/show_bug.cgi?id=2524104	external
https://bugzilla.redhat.com/show_bug.cgi?id=2524577	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527168	external
https://bugzilla.redhat.com/show_bug.cgi?id=2534705	external
https://bugzilla.redhat.com/show_bug.cgi?id=2534759	external
https://bugzilla.redhat.com/show_bug.cgi?id=2543588	external
https://bugzilla.redhat.com/show_bug.cgi?id=2545277	external
https://bugzilla.redhat.com/show_bug.cgi?id=2546915	external
https://bugzilla.redhat.com/show_bug.cgi?id=2547009	external
https://bugzilla.redhat.com/show_bug.cgi?id=2556522	external
https://bugzilla.redhat.com/show_bug.cgi?id=2562464	external
https://bugzilla.redhat.com/show_bug.cgi?id=2562477	external
https://bugzilla.redhat.com/show_bug.cgi?id=2562479	external
https://bugzilla.redhat.com/show_bug.cgi?id=2562486	external
https://bugzilla.redhat.com/show_bug.cgi?id=2562496	external
https://bugzilla.redhat.com/show_bug.cgi?id=2563744	external
https://bugzilla.redhat.com/show_bug.cgi?id=2563759	external
https://issues.redhat.com/browse/RHEL-271317	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2023-4860	self
https://bugzilla.redhat.com/show_bug.cgi?id=2298302	external
https://www.cve.org/CVERecord?id=CVE-2023-4860	external
https://nvd.nist.gov/vuln/detail/CVE-2023-4860	external
https://chromereleases.googleblog.com/2023/07/sta…	external
https://issues.chromium.org/issues/40064341	external
https://access.redhat.com/security/cve/CVE-2024-7966	self
https://bugzilla.redhat.com/show_bug.cgi?id=2307088	external
https://www.cve.org/CVERecord?id=CVE-2024-7966	external
https://nvd.nist.gov/vuln/detail/CVE-2024-7966	external
https://chromereleases.googleblog.com/2024/08/sta…	external
https://issues.chromium.org/issues/355465305	external
https://access.redhat.com/security/cve/CVE-2024-8193	self
https://bugzilla.redhat.com/show_bug.cgi?id=2308415	external
https://www.cve.org/CVERecord?id=CVE-2024-8193	external
https://nvd.nist.gov/vuln/detail/CVE-2024-8193	external
https://chromereleases.googleblog.com/2024/08/sta…	external
https://issues.chromium.org/issues/360265320	external
https://access.redhat.com/security/cve/CVE-2024-8198	self
https://bugzilla.redhat.com/show_bug.cgi?id=2308417	external
https://www.cve.org/CVERecord?id=CVE-2024-8198	external
https://nvd.nist.gov/vuln/detail/CVE-2024-8198	external
https://issues.chromium.org/issues/360758697	external
https://access.redhat.com/security/cve/CVE-2024-8636	self
https://bugzilla.redhat.com/show_bug.cgi?id=2311665	external
https://www.cve.org/CVERecord?id=CVE-2024-8636	external
https://nvd.nist.gov/vuln/detail/CVE-2024-8636	external
https://chromereleases.googleblog.com/2024/09/sta…	external
https://issues.chromium.org/issues/361461526	external
https://access.redhat.com/security/cve/CVE-2024-9123	self
https://bugzilla.redhat.com/show_bug.cgi?id=2314571	external
https://www.cve.org/CVERecord?id=CVE-2024-9123	external
https://nvd.nist.gov/vuln/detail/CVE-2024-9123	external
https://chromereleases.googleblog.com/2024/09/sta…	external
https://issues.chromium.org/issues/365884464	external
https://access.redhat.com/security/cve/CVE-2025-0436	self
https://bugzilla.redhat.com/show_bug.cgi?id=2338161	external
https://www.cve.org/CVERecord?id=CVE-2025-0436	external
https://nvd.nist.gov/vuln/detail/CVE-2025-0436	external
https://chromereleases.googleblog.com/2025/01/sta…	external
https://issues.chromium.org/issues/382786791	external
https://access.redhat.com/security/cve/CVE-2025-0444	self
https://bugzilla.redhat.com/show_bug.cgi?id=2343797	external
https://www.cve.org/CVERecord?id=CVE-2025-0444	external
https://nvd.nist.gov/vuln/detail/CVE-2025-0444	external
https://chromereleases.googleblog.com/2025/02/sta…	external
https://issues.chromium.org/issues/390889644	external
https://access.redhat.com/security/cve/CVE-2026-3538	self
https://bugzilla.redhat.com/show_bug.cgi?id=2444617	external
https://www.cve.org/CVERecord?id=CVE-2026-3538	external
https://nvd.nist.gov/vuln/detail/CVE-2026-3538	external
https://chromereleases.googleblog.com/2026/03/sta…	external
https://issues.chromium.org/issues/484983991	external
https://access.redhat.com/security/cve/CVE-2026-3931	self
https://bugzilla.redhat.com/show_bug.cgi?id=2446868	external
https://www.cve.org/CVERecord?id=CVE-2026-3931	external
https://nvd.nist.gov/vuln/detail/CVE-2026-3931	external
https://chromereleases.googleblog.com/2026/03/sta…	external
https://issues.chromium.org/issues/417599694	external
https://access.redhat.com/security/cve/CVE-2026-4460	self
https://bugzilla.redhat.com/show_bug.cgi?id=2449412	external
https://www.cve.org/CVERecord?id=CVE-2026-4460	external
https://nvd.nist.gov/vuln/detail/CVE-2026-4460	external
https://chromereleases.googleblog.com/2026/03/sta…	external
https://issues.chromium.org/issues/490254124	external
https://access.redhat.com/security/cve/CVE-2026-5870	self
https://bugzilla.redhat.com/show_bug.cgi?id=2456802	external
https://www.cve.org/CVERecord?id=CVE-2026-5870	external
https://nvd.nist.gov/vuln/detail/CVE-2026-5870	external
https://chromereleases.googleblog.com/2026/04/sta…	external
https://issues.chromium.org/issues/495534710	external
https://access.redhat.com/security/cve/CVE-2026-6298	self
https://bugzilla.redhat.com/show_bug.cgi?id=2458798	external
https://www.cve.org/CVERecord?id=CVE-2026-6298	external
https://nvd.nist.gov/vuln/detail/CVE-2026-6298	external
https://chromereleases.googleblog.com/2026/04/sta…	external
https://issues.chromium.org/issues/495700484	external
https://access.redhat.com/security/cve/CVE-2026-6364	self
https://bugzilla.redhat.com/show_bug.cgi?id=2458786	external
https://www.cve.org/CVERecord?id=CVE-2026-6364	external
https://nvd.nist.gov/vuln/detail/CVE-2026-6364	external
https://issues.chromium.org/issues/502103414	external
https://access.redhat.com/security/cve/CVE-2026-7353	self
https://bugzilla.redhat.com/show_bug.cgi?id=2463657	external
https://www.cve.org/CVERecord?id=CVE-2026-7353	external
https://nvd.nist.gov/vuln/detail/CVE-2026-7353	external
https://chromereleases.googleblog.com/2026/04/sta…	external
https://issues.chromium.org/issues/498809718	external
https://access.redhat.com/security/cve/CVE-2026-7920	self
https://bugzilla.redhat.com/show_bug.cgi?id=2467385	external
https://www.cve.org/CVERecord?id=CVE-2026-7920	external
https://nvd.nist.gov/vuln/detail/CVE-2026-7920	external
https://chromereleases.googleblog.com/2026/05/sta…	external
https://issues.chromium.org/issues/498989348	external
https://access.redhat.com/security/cve/CVE-2026-7923	self
https://bugzilla.redhat.com/show_bug.cgi?id=2467351	external
https://www.cve.org/CVERecord?id=CVE-2026-7923	external
https://nvd.nist.gov/vuln/detail/CVE-2026-7923	external
https://issues.chromium.org/issues/500080194	external
https://access.redhat.com/security/cve/CVE-2026-7949	self
https://bugzilla.redhat.com/show_bug.cgi?id=2467316	external
https://www.cve.org/CVERecord?id=CVE-2026-7949	external
https://nvd.nist.gov/vuln/detail/CVE-2026-7949	external
https://issues.chromium.org/issues/496206134	external
https://access.redhat.com/security/cve/CVE-2026-8510	self
https://bugzilla.redhat.com/show_bug.cgi?id=2477624	external
https://www.cve.org/CVERecord?id=CVE-2026-8510	external
https://nvd.nist.gov/vuln/detail/CVE-2026-8510	external
https://chromereleases.googleblog.com/2026/05/sta…	external
https://issues.chromium.org/issues/502636904	external
https://access.redhat.com/security/cve/CVE-2026-8579	self
https://bugzilla.redhat.com/show_bug.cgi?id=2477666	external
https://www.cve.org/CVERecord?id=CVE-2026-8579	external
https://nvd.nist.gov/vuln/detail/CVE-2026-8579	external
https://issues.chromium.org/issues/496526419	external
https://access.redhat.com/security/cve/CVE-2026-9892	self
https://bugzilla.redhat.com/show_bug.cgi?id=2483103	external
https://www.cve.org/CVERecord?id=CVE-2026-9892	external
https://nvd.nist.gov/vuln/detail/CVE-2026-9892	external
https://chromereleases.googleblog.com/2026/05/sta…	external
https://issues.chromium.org/issues/513948178	external
https://access.redhat.com/security/cve/CVE-2026-9893	self
https://bugzilla.redhat.com/show_bug.cgi?id=2483045	external
https://www.cve.org/CVERecord?id=CVE-2026-9893	external
https://nvd.nist.gov/vuln/detail/CVE-2026-9893	external
https://issues.chromium.org/issues/513972075	external
https://access.redhat.com/security/cve/CVE-2026-9909	self
https://bugzilla.redhat.com/show_bug.cgi?id=2483023	external
https://www.cve.org/CVERecord?id=CVE-2026-9909	external
https://nvd.nist.gov/vuln/detail/CVE-2026-9909	external
https://issues.chromium.org/issues/499152771	external
https://access.redhat.com/security/cve/CVE-2026-9923	self
https://bugzilla.redhat.com/show_bug.cgi?id=2482973	external
https://www.cve.org/CVERecord?id=CVE-2026-9923	external
https://nvd.nist.gov/vuln/detail/CVE-2026-9923	external
https://issues.chromium.org/issues/500393328	external
https://access.redhat.com/security/cve/CVE-2026-9981	self
https://bugzilla.redhat.com/show_bug.cgi?id=2483056	external
https://www.cve.org/CVERecord?id=CVE-2026-9981	external
https://nvd.nist.gov/vuln/detail/CVE-2026-9981	external
https://issues.chromium.org/issues/512995705	external
https://access.redhat.com/security/cve/CVE-2026-9983	self
https://bugzilla.redhat.com/show_bug.cgi?id=2483108	external
https://www.cve.org/CVERecord?id=CVE-2026-9983	external
https://nvd.nist.gov/vuln/detail/CVE-2026-9983	external
https://issues.chromium.org/issues/513001309	external
https://access.redhat.com/security/cve/CVE-2026-9998	self
https://bugzilla.redhat.com/show_bug.cgi?id=2483062	external
https://www.cve.org/CVERecord?id=CVE-2026-9998	external
https://nvd.nist.gov/vuln/detail/CVE-2026-9998	external
https://issues.chromium.org/issues/513337118	external
https://access.redhat.com/security/cve/CVE-2026-10009	self
https://bugzilla.redhat.com/show_bug.cgi?id=2483114	external
https://www.cve.org/CVERecord?id=CVE-2026-10009	external
https://nvd.nist.gov/vuln/detail/CVE-2026-10009	external
https://issues.chromium.org/issues/513973560	external
https://access.redhat.com/security/cve/CVE-2026-10011	self
https://bugzilla.redhat.com/show_bug.cgi?id=2483070	external
https://www.cve.org/CVERecord?id=CVE-2026-10011	external
https://nvd.nist.gov/vuln/detail/CVE-2026-10011	external
https://issues.chromium.org/issues/514017326	external
https://access.redhat.com/security/cve/CVE-2026-10012	self
https://bugzilla.redhat.com/show_bug.cgi?id=2483035	external
https://www.cve.org/CVERecord?id=CVE-2026-10012	external
https://nvd.nist.gov/vuln/detail/CVE-2026-10012	external
https://issues.chromium.org/issues/514063977	external
https://access.redhat.com/security/cve/CVE-2026-10020	self
https://bugzilla.redhat.com/show_bug.cgi?id=2482975	external
https://www.cve.org/CVERecord?id=CVE-2026-10020	external
https://nvd.nist.gov/vuln/detail/CVE-2026-10020	external
https://issues.chromium.org/issues/496565479	external
https://access.redhat.com/security/cve/CVE-2026-10925	self
https://bugzilla.redhat.com/show_bug.cgi?id=2485289	external
https://www.cve.org/CVERecord?id=CVE-2026-10925	external
https://nvd.nist.gov/vuln/detail/CVE-2026-10925	external
https://chromereleases.googleblog.com/2026/06/sta…	external
https://issues.chromium.org/issues/500071763	external
https://access.redhat.com/security/cve/CVE-2026-10941	self
https://bugzilla.redhat.com/show_bug.cgi?id=2485352	external
https://www.cve.org/CVERecord?id=CVE-2026-10941	external
https://nvd.nist.gov/vuln/detail/CVE-2026-10941	external
https://issues.chromium.org/issues/503958940	external
https://access.redhat.com/security/cve/CVE-2026-10977	self
https://bugzilla.redhat.com/show_bug.cgi?id=2485236	external
https://www.cve.org/CVERecord?id=CVE-2026-10977	external
https://nvd.nist.gov/vuln/detail/CVE-2026-10977	external
https://issues.chromium.org/issues/513340227	external
https://access.redhat.com/security/cve/CVE-2026-10985	self
https://bugzilla.redhat.com/show_bug.cgi?id=2484949	external
https://www.cve.org/CVERecord?id=CVE-2026-10985	external
https://nvd.nist.gov/vuln/detail/CVE-2026-10985	external
https://issues.chromium.org/issues/514082801	external
https://access.redhat.com/security/cve/CVE-2026-10993	self
https://bugzilla.redhat.com/show_bug.cgi?id=2484981	external
https://www.cve.org/CVERecord?id=CVE-2026-10993	external
https://nvd.nist.gov/vuln/detail/CVE-2026-10993	external
https://issues.chromium.org/issues/504160794	external
https://access.redhat.com/security/cve/CVE-2026-11024	self
https://bugzilla.redhat.com/show_bug.cgi?id=2484992	external
https://www.cve.org/CVERecord?id=CVE-2026-11024	external
https://nvd.nist.gov/vuln/detail/CVE-2026-11024	external
https://issues.chromium.org/issues/497591594	external
https://access.redhat.com/security/cve/CVE-2026-11039	self
https://bugzilla.redhat.com/show_bug.cgi?id=2485071	external
https://www.cve.org/CVERecord?id=CVE-2026-11039	external
https://nvd.nist.gov/vuln/detail/CVE-2026-11039	external
https://issues.chromium.org/issues/498204112	external
https://access.redhat.com/security/cve/CVE-2026-11057	self
https://bugzilla.redhat.com/show_bug.cgi?id=2485036	external
https://www.cve.org/CVERecord?id=CVE-2026-11057	external
https://nvd.nist.gov/vuln/detail/CVE-2026-11057	external
https://issues.chromium.org/issues/498951946	external
https://access.redhat.com/security/cve/CVE-2026-11099	self
https://bugzilla.redhat.com/show_bug.cgi?id=2485638	external
https://www.cve.org/CVERecord?id=CVE-2026-11099	external
https://nvd.nist.gov/vuln/detail/CVE-2026-11099	external
https://access.redhat.com/security/cve/CVE-2026-11121	self
https://bugzilla.redhat.com/show_bug.cgi?id=2485015	external
https://www.cve.org/CVERecord?id=CVE-2026-11121	external
https://nvd.nist.gov/vuln/detail/CVE-2026-11121	external
https://issues.chromium.org/issues/501483855	external
https://access.redhat.com/security/cve/CVE-2026-11124	self
https://bugzilla.redhat.com/show_bug.cgi?id=2485043	external
https://www.cve.org/CVERecord?id=CVE-2026-11124	external
https://nvd.nist.gov/vuln/detail/CVE-2026-11124	external
https://issues.chromium.org/issues/501511299	external
https://access.redhat.com/security/cve/CVE-2026-11159	self
https://bugzilla.redhat.com/show_bug.cgi?id=2485081	external
https://www.cve.org/CVERecord?id=CVE-2026-11159	external
https://nvd.nist.gov/vuln/detail/CVE-2026-11159	external
https://issues.chromium.org/issues/501861921	external
https://access.redhat.com/security/cve/CVE-2026-11663	self
https://bugzilla.redhat.com/show_bug.cgi?id=2486642	external
https://www.cve.org/CVERecord?id=CVE-2026-11663	external
https://nvd.nist.gov/vuln/detail/CVE-2026-11663	external
https://chromereleases.googleblog.com/2026/06/sta…	external
https://issues.chromium.org/issues/513820666	external
https://access.redhat.com/security/cve/CVE-2026-11675	self
https://bugzilla.redhat.com/show_bug.cgi?id=2486644	external
https://www.cve.org/CVERecord?id=CVE-2026-11675	external
https://nvd.nist.gov/vuln/detail/CVE-2026-11675	external
https://issues.chromium.org/issues/516915337	external
https://access.redhat.com/security/cve/CVE-2026-13781	self
https://bugzilla.redhat.com/show_bug.cgi?id=2495660	external
https://www.cve.org/CVERecord?id=CVE-2026-13781	external
https://nvd.nist.gov/vuln/detail/CVE-2026-13781	external
https://chromereleases.googleblog.com/2026/06/sta…	external
https://issues.chromium.org/issues/516457532	external
https://access.redhat.com/security/cve/CVE-2026-13820	self
https://bugzilla.redhat.com/show_bug.cgi?id=2495595	external
https://www.cve.org/CVERecord?id=CVE-2026-13820	external
https://nvd.nist.gov/vuln/detail/CVE-2026-13820	external
https://issues.chromium.org/issues/512986879	external
https://access.redhat.com/security/cve/CVE-2026-13841	self
https://bugzilla.redhat.com/show_bug.cgi?id=2495548	external
https://www.cve.org/CVERecord?id=CVE-2026-13841	external
https://nvd.nist.gov/vuln/detail/CVE-2026-13841	external
https://issues.chromium.org/issues/515467789	external
https://access.redhat.com/security/cve/CVE-2026-13885	self
https://bugzilla.redhat.com/show_bug.cgi?id=2495605	external
https://www.cve.org/CVERecord?id=CVE-2026-13885	external
https://nvd.nist.gov/vuln/detail/CVE-2026-13885	external
https://issues.chromium.org/issues/500474409	external
https://access.redhat.com/security/cve/CVE-2026-13971	self
https://bugzilla.redhat.com/show_bug.cgi?id=2495557	external
https://www.cve.org/CVERecord?id=CVE-2026-13971	external
https://nvd.nist.gov/vuln/detail/CVE-2026-13971	external
https://issues.chromium.org/issues/513780208	external
https://access.redhat.com/security/cve/CVE-2026-14387	self
https://bugzilla.redhat.com/show_bug.cgi?id=2496275	external
https://www.cve.org/CVERecord?id=CVE-2026-14387	external
https://nvd.nist.gov/vuln/detail/CVE-2026-14387	external
https://issues.chromium.org/issues/500305404	external
https://access.redhat.com/security/cve/CVE-2026-14389	self
https://bugzilla.redhat.com/show_bug.cgi?id=2496264	external
https://www.cve.org/CVERecord?id=CVE-2026-14389	external
https://nvd.nist.gov/vuln/detail/CVE-2026-14389	external
https://issues.chromium.org/issues/500505046	external
https://access.redhat.com/security/cve/CVE-2026-14410	self
https://bugzilla.redhat.com/show_bug.cgi?id=2496282	external
https://www.cve.org/CVERecord?id=CVE-2026-14410	external
https://nvd.nist.gov/vuln/detail/CVE-2026-14410	external
https://issues.chromium.org/issues/513836996	external
https://access.redhat.com/security/cve/CVE-2026-14414	self
https://bugzilla.redhat.com/show_bug.cgi?id=2496263	external
https://www.cve.org/CVERecord?id=CVE-2026-14414	external
https://nvd.nist.gov/vuln/detail/CVE-2026-14414	external
https://issues.chromium.org/issues/513948227	external
https://access.redhat.com/security/cve/CVE-2026-14419	self
https://bugzilla.redhat.com/show_bug.cgi?id=2496283	external
https://www.cve.org/CVERecord?id=CVE-2026-14419	external
https://nvd.nist.gov/vuln/detail/CVE-2026-14419	external
https://issues.chromium.org/issues/516981393	external
https://access.redhat.com/security/cve/CVE-2026-14427	self
https://bugzilla.redhat.com/show_bug.cgi?id=2496308	external
https://www.cve.org/CVERecord?id=CVE-2026-14427	external
https://nvd.nist.gov/vuln/detail/CVE-2026-14427	external
https://issues.chromium.org/issues/520113415	external
https://access.redhat.com/security/cve/CVE-2026-14429	self
https://bugzilla.redhat.com/show_bug.cgi?id=2496304	external
https://www.cve.org/CVERecord?id=CVE-2026-14429	external
https://nvd.nist.gov/vuln/detail/CVE-2026-14429	external
https://issues.chromium.org/issues/520571816	external
https://access.redhat.com/security/cve/CVE-2026-15766	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500647	external
https://www.cve.org/CVERecord?id=CVE-2026-15766	external
https://nvd.nist.gov/vuln/detail/CVE-2026-15766	external
https://chromereleases.googleblog.com/2026/07/sta…	external
https://issues.chromium.org/issues/514010477	external
https://access.redhat.com/security/cve/CVE-2026-15774	self
https://bugzilla.redhat.com/show_bug.cgi?id=2500689	external
https://www.cve.org/CVERecord?id=CVE-2026-15774	external
https://nvd.nist.gov/vuln/detail/CVE-2026-15774	external
https://issues.chromium.org/issues/530646115	external
https://access.redhat.com/security/cve/CVE-2026-16417	self
https://bugzilla.redhat.com/show_bug.cgi?id=2505966	external
https://www.cve.org/CVERecord?id=CVE-2026-16417	external
https://nvd.nist.gov/vuln/detail/CVE-2026-16417	external
https://chromereleases.googleblog.com/2026/07/sta…	external
https://issues.chromium.org/issues/521491024	external
https://access.redhat.com/security/cve/CVE-2026-17653	self
https://bugzilla.redhat.com/show_bug.cgi?id=2508987	external
https://www.cve.org/CVERecord?id=CVE-2026-17653	external
https://nvd.nist.gov/vuln/detail/CVE-2026-17653	external
https://chromereleases.googleblog.com/2026/07/sta…	external
https://issues.chromium.org/issues/520514458	external
https://access.redhat.com/security/cve/CVE-2026-17702	self
https://bugzilla.redhat.com/show_bug.cgi?id=2508687	external
https://www.cve.org/CVERecord?id=CVE-2026-17702	external
https://nvd.nist.gov/vuln/detail/CVE-2026-17702	external
https://issues.chromium.org/issues/517973093	external
https://access.redhat.com/security/cve/CVE-2026-17712	self
https://bugzilla.redhat.com/show_bug.cgi?id=2508941	external
https://www.cve.org/CVERecord?id=CVE-2026-17712	external
https://nvd.nist.gov/vuln/detail/CVE-2026-17712	external
https://issues.chromium.org/issues/520535595	external
https://access.redhat.com/security/cve/CVE-2026-17745	self
https://bugzilla.redhat.com/show_bug.cgi?id=2508884	external
https://www.cve.org/CVERecord?id=CVE-2026-17745	external
https://nvd.nist.gov/vuln/detail/CVE-2026-17745	external
https://issues.chromium.org/issues/500172224	external
https://access.redhat.com/security/cve/CVE-2026-17757	self
https://bugzilla.redhat.com/show_bug.cgi?id=2508726	external
https://www.cve.org/CVERecord?id=CVE-2026-17757	external
https://nvd.nist.gov/vuln/detail/CVE-2026-17757	external
https://issues.chromium.org/issues/502351526	external
https://access.redhat.com/security/cve/CVE-2026-17771	self
https://bugzilla.redhat.com/show_bug.cgi?id=2508949	external
https://www.cve.org/CVERecord?id=CVE-2026-17771	external
https://nvd.nist.gov/vuln/detail/CVE-2026-17771	external
https://issues.chromium.org/issues/513160525	external
https://access.redhat.com/security/cve/CVE-2026-17914	self
https://bugzilla.redhat.com/show_bug.cgi?id=2508773	external
https://www.cve.org/CVERecord?id=CVE-2026-17914	external
https://nvd.nist.gov/vuln/detail/CVE-2026-17914	external
https://issues.chromium.org/issues/506377118	external
https://access.redhat.com/security/cve/CVE-2026-17992	self
https://bugzilla.redhat.com/show_bug.cgi?id=2508809	external
https://www.cve.org/CVERecord?id=CVE-2026-17992	external
https://nvd.nist.gov/vuln/detail/CVE-2026-17992	external
https://issues.chromium.org/issues/520506316	external
https://access.redhat.com/security/cve/CVE-2026-19160	self
https://bugzilla.redhat.com/show_bug.cgi?id=2512341	external
https://www.cve.org/CVERecord?id=CVE-2026-19160	external
https://nvd.nist.gov/vuln/detail/CVE-2026-19160	external
https://chromereleases.googleblog.com/2026/08/sta…	external
https://issues.chromium.org/issues/536068737	external
https://access.redhat.com/security/cve/CVE-2026-65333	self
https://bugzilla.redhat.com/show_bug.cgi?id=2524577	external
https://www.cve.org/CVERecord?id=CVE-2026-65333	external
https://nvd.nist.gov/vuln/detail/CVE-2026-65333	external
https://support.apple.com/en-us/148281	external
https://support.apple.com/en-us/148282	external
https://support.apple.com/en-us/148286	external
https://support.apple.com/en-us/148287	external
https://access.redhat.com/security/cve/CVE-2026-78914	self
https://bugzilla.redhat.com/show_bug.cgi?id=2523904	external
https://www.cve.org/CVERecord?id=CVE-2026-78914	external
https://nvd.nist.gov/vuln/detail/CVE-2026-78914	external
https://chromereleases.googleblog.com/2026/08/sta…	external
https://issues.chromium.org/issues/536166543	external
https://access.redhat.com/security/cve/CVE-2026-78958	self
https://bugzilla.redhat.com/show_bug.cgi?id=2523958	external
https://www.cve.org/CVERecord?id=CVE-2026-78958	external
https://nvd.nist.gov/vuln/detail/CVE-2026-78958	external
https://issues.chromium.org/issues/497205529	external
https://access.redhat.com/security/cve/CVE-2026-79112	self
https://bugzilla.redhat.com/show_bug.cgi?id=2523847	external
https://www.cve.org/CVERecord?id=CVE-2026-79112	external
https://nvd.nist.gov/vuln/detail/CVE-2026-79112	external
https://issues.chromium.org/issues/524864599	external
https://access.redhat.com/security/cve/CVE-2026-79144	self
https://bugzilla.redhat.com/show_bug.cgi?id=2524104	external
https://www.cve.org/CVERecord?id=CVE-2026-79144	external
https://nvd.nist.gov/vuln/detail/CVE-2026-79144	external
https://issues.chromium.org/issues/501759192	external
https://access.redhat.com/security/cve/CVE-2026-79147	self
https://bugzilla.redhat.com/show_bug.cgi?id=2523912	external
https://www.cve.org/CVERecord?id=CVE-2026-79147	external
https://nvd.nist.gov/vuln/detail/CVE-2026-79147	external
https://issues.chromium.org/issues/513969378	external
https://access.redhat.com/security/cve/CVE-2026-84359	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527168	external
https://www.cve.org/CVERecord?id=CVE-2026-84359	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84359	external
https://chromereleases.googleblog.com/2026/09/sta…	external
https://issues.chromium.org/issues/514078656	external
https://access.redhat.com/security/cve/CVE-2026-91733	self
https://bugzilla.redhat.com/show_bug.cgi?id=2534705	external
https://www.cve.org/CVERecord?id=CVE-2026-91733	external
https://nvd.nist.gov/vuln/detail/CVE-2026-91733	external
https://chromereleases.googleblog.com/2026/09/sta…	external
https://issues.chromium.org/issues/540021213	external
https://access.redhat.com/security/cve/CVE-2026-91740	self
https://bugzilla.redhat.com/show_bug.cgi?id=2534759	external
https://www.cve.org/CVERecord?id=CVE-2026-91740	external
https://nvd.nist.gov/vuln/detail/CVE-2026-91740	external
https://issues.chromium.org/issues/553122373	external
https://access.redhat.com/security/cve/CVE-2026-102325	self
https://bugzilla.redhat.com/show_bug.cgi?id=2543588	external
https://www.cve.org/CVERecord?id=CVE-2026-102325	external
https://nvd.nist.gov/vuln/detail/CVE-2026-102325	external
https://chromereleases.googleblog.com/2026/09/sta…	external
https://issues.chromium.org/issues/561994362	external
https://access.redhat.com/security/cve/CVE-2026-103629	self
https://bugzilla.redhat.com/show_bug.cgi?id=2545277	external
https://www.cve.org/CVERecord?id=CVE-2026-103629	external
https://nvd.nist.gov/vuln/detail/CVE-2026-103629	external
https://chromereleases.googleblog.com/2026/10/sta…	external
https://issues.chromium.org/issues/562038679	external
https://access.redhat.com/security/cve/CVE-2026-106379	self
https://bugzilla.redhat.com/show_bug.cgi?id=2546915	external
https://www.cve.org/CVERecord?id=CVE-2026-106379	external
https://nvd.nist.gov/vuln/detail/CVE-2026-106379	external
https://chromereleases.googleblog.com/2026/10/sta…	external
https://issues.chromium.org/issues/561987051	external
https://access.redhat.com/security/cve/CVE-2026-106399	self
https://bugzilla.redhat.com/show_bug.cgi?id=2547009	external
https://www.cve.org/CVERecord?id=CVE-2026-106399	external
https://nvd.nist.gov/vuln/detail/CVE-2026-106399	external
https://issues.chromium.org/issues/530237174	external
https://access.redhat.com/security/cve/CVE-2026-113106	self
https://bugzilla.redhat.com/show_bug.cgi?id=2556522	external
https://www.cve.org/CVERecord?id=CVE-2026-113106	external
https://nvd.nist.gov/vuln/detail/CVE-2026-113106	external
https://chromereleases.googleblog.com/2026/10/sta…	external
https://issues.chromium.org/issues/553126587	external
https://access.redhat.com/security/cve/CVE-2026-118319	self
https://bugzilla.redhat.com/show_bug.cgi?id=2562496	external
https://www.cve.org/CVERecord?id=CVE-2026-118319	external
https://nvd.nist.gov/vuln/detail/CVE-2026-118319	external
https://chromereleases.googleblog.com/2026/10/sta…	external
https://issues.chromium.org/issues/576194994	external
https://access.redhat.com/security/cve/CVE-2026-118340	self
https://bugzilla.redhat.com/show_bug.cgi?id=2562479	external
https://www.cve.org/CVERecord?id=CVE-2026-118340	external
https://nvd.nist.gov/vuln/detail/CVE-2026-118340	external
https://issues.chromium.org/issues/568936530	external
https://access.redhat.com/security/cve/CVE-2026-118348	self
https://bugzilla.redhat.com/show_bug.cgi?id=2562464	external
https://www.cve.org/CVERecord?id=CVE-2026-118348	external
https://nvd.nist.gov/vuln/detail/CVE-2026-118348	external
https://issues.chromium.org/issues/574776938	external
https://access.redhat.com/security/cve/CVE-2026-118351	self
https://bugzilla.redhat.com/show_bug.cgi?id=2562477	external
https://www.cve.org/CVERecord?id=CVE-2026-118351	external
https://nvd.nist.gov/vuln/detail/CVE-2026-118351	external
https://issues.chromium.org/issues/570825067	external
https://access.redhat.com/security/cve/CVE-2026-118354	self
https://bugzilla.redhat.com/show_bug.cgi?id=2562486	external
https://www.cve.org/CVERecord?id=CVE-2026-118354	external
https://nvd.nist.gov/vuln/detail/CVE-2026-118354	external
https://issues.chromium.org/issues/568936430	external
https://access.redhat.com/security/cve/CVE-2026-119261	self
https://bugzilla.redhat.com/show_bug.cgi?id=2563759	external
https://www.cve.org/CVERecord?id=CVE-2026-119261	external
https://nvd.nist.gov/vuln/detail/CVE-2026-119261	external
https://chromereleases.googleblog.com/2026/10/sta…	external
https://issues.chromium.org/issues/574213633	external
https://access.redhat.com/security/cve/CVE-2026-119271	self
https://bugzilla.redhat.com/show_bug.cgi?id=2563744	external
https://www.cve.org/CVERecord?id=CVE-2026-119271	external
https://nvd.nist.gov/vuln/detail/CVE-2026-119271	external
https://issues.chromium.org/issues/577403270	external

JSON

To clipboard

Loading 1.4 MB of JSON…

CVE-2023-4860 (GCVE-0-2023-4860)

Vulnerability from cvelistv5 – Published: 2024-07-16 22:30 – Updated: 2024-08-02 07:38

Summary

Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Severity

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-07-17 14:27 UTC

CWE

Inappropriate implementation
CWE-303 - Incorrect Implementation of Authentication Algorithm

Assigner

Chrome CNA under the Google root

CNA scorecard E 43/100 over 3519 records in the last 180 days details

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2023/07/sta…
https://issues.chromium.org/issues/40064341

Impacted products

2 products

Vendor	Product	Version
Google	Chrome	Affected: 115.0.5790.98 , < 115.0.5790.98 (custom)
google	chrome	Affected: 0 , < 115.0.5790.98 (custom) cpe:2.3:a:google:chrome::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "chrome",
            "vendor": "google",
            "versions": [
              {
                "lessThan": "115.0.5790.98",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.6,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-4860",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-17T14:27:02.416641Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-303",
                "description": "CWE-303 Incorrect Implementation of Authentication Algorithm",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-17T14:27:06.616Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:38:00.739Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-desktop.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://issues.chromium.org/issues/40064341"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "115.0.5790.98",
              "status": "affected",
              "version": "115.0.5790.98",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Inappropriate implementation",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-07-16T22:30:26.329Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-desktop.html"
        },
        {
          "url": "https://issues.chromium.org/issues/40064341"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2023-4860",
    "datePublished": "2024-07-16T22:30:26.329Z",
    "dateReserved": "2023-09-08T20:51:17.934Z",
    "dateUpdated": "2024-08-02T07:38:00.739Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-7966 (GCVE-0-2024-7966)

Vulnerability from cvelistv5 – Published: 2024-08-21 20:20 – Updated: 2024-08-27 13:05

Summary

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-27 03:55 UTC

CWE

Out of bounds memory access
CWE-125 - Out-of-bounds Read

Assigner

Chrome CNA under the Google root

CNA scorecard E 43/100 over 3519 records in the last 180 days details

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2024/08/sta…
https://issues.chromium.org/issues/355465305

Impacted products

2 products

Vendor	Product	Version
Google	Chrome	Affected: 128.0.6613.84 , < 128.0.6613.84 (custom)
google	chrome	Affected: 0 , < 128.0.6613.84 (custom) cpe:2.3:a:google:chrome::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "chrome",
            "vendor": "google",
            "versions": [
              {
                "lessThan": "128.0.6613.84",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-7966",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-27T03:55:23.388470Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-27T13:05:22.672Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "128.0.6613.84",
              "status": "affected",
              "version": "128.0.6613.84",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Out of bounds memory access",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-21T20:20:23.694Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html"
        },
        {
          "url": "https://issues.chromium.org/issues/355465305"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2024-7966",
    "datePublished": "2024-08-21T20:20:23.694Z",
    "dateReserved": "2024-08-19T19:17:19.488Z",
    "dateUpdated": "2024-08-27T13:05:22.672Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-8193 (GCVE-0-2024-8193)

Vulnerability from cvelistv5 – Published: 2024-08-28 22:44 – Updated: 2024-09-05 03:55

Summary

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-04 00:00 UTC

CWE

CWE-122 - Heap buffer overflow
CWE-122 - Heap-based Buffer Overflow

Assigner

Chrome CNA under the Google root

CNA scorecard E 43/100 over 3519 records in the last 180 days details

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2024/08/sta…
https://issues.chromium.org/issues/360265320

Impacted products

2 products

Vendor	Product	Version
Google	Chrome	Affected: 128.0.6613.113 , < 128.0.6613.113 (custom)
google	chrome	Affected: 0 , < 128.0.6613.113 (custom) cpe:2.3:a:google:chrome::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "chrome",
            "vendor": "google",
            "versions": [
              {
                "lessThan": "128.0.6613.113",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-8193",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-04T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-122",
                "description": "CWE-122 Heap-based Buffer Overflow",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-05T03:55:48.729Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "128.0.6613.113",
              "status": "affected",
              "version": "128.0.6613.113",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "Heap buffer overflow",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-28T22:44:43.033Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_28.html"
        },
        {
          "url": "https://issues.chromium.org/issues/360265320"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2024-8193",
    "datePublished": "2024-08-28T22:44:43.033Z",
    "dateReserved": "2024-08-26T21:38:41.777Z",
    "dateUpdated": "2024-09-05T03:55:48.729Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-8198 (GCVE-0-2024-8198)

Vulnerability from cvelistv5 – Published: 2024-08-28 22:44 – Updated: 2024-10-15 13:41

Summary

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-05 03:55 UTC

CWE

CWE-122 - Heap buffer overflow
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Assigner

Chrome CNA under the Google root

CNA scorecard E 43/100 over 3519 records in the last 180 days details

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2024/08/sta…
https://issues.chromium.org/issues/360758697

Impacted products

2 products

Vendor	Product	Version
Google	Chrome	Affected: 128.0.6613.113 , < 128.0.6613.113 (custom)
google	chrome	Affected: 0 , < 128.0.6613.113 (custom) cpe:2.3:a:google:chrome::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "chrome",
            "vendor": "google",
            "versions": [
              {
                "lessThan": "128.0.6613.113",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-8198",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-05T03:55:51.451800Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-15T13:41:35.205Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "128.0.6613.113",
              "status": "affected",
              "version": "128.0.6613.113",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "Heap buffer overflow",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-28T22:44:44.115Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_28.html"
        },
        {
          "url": "https://issues.chromium.org/issues/360758697"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2024-8198",
    "datePublished": "2024-08-28T22:44:44.115Z",
    "dateReserved": "2024-08-27T02:43:56.265Z",
    "dateUpdated": "2024-10-15T13:41:35.205Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-8636 (GCVE-0-2024-8636)

Vulnerability from cvelistv5 – Published: 2024-09-11 13:47 – Updated: 2024-09-13 13:28

Summary

Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-13 03:55 UTC

CWE

CWE-122 - Heap buffer overflow
CWE-416 - Use After Free

Assigner

Chrome CNA under the Google root

CNA scorecard E 43/100 over 3519 records in the last 180 days details

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2024/09/sta…
https://issues.chromium.org/issues/361461526

Impacted products

2 products

Vendor	Product	Version
Google	Chrome	Affected: 128.0.6613.137 , < 128.0.6613.137 (custom)
google	chrome	Affected: 0 , < 128.0.6613.137 (custom) cpe:2.3:a:google:chrome::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "chrome",
            "vendor": "google",
            "versions": [
              {
                "lessThan": "128.0.6613.137",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-8636",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-13T03:55:16.558955Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-13T13:28:35.767Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "128.0.6613.137",
              "status": "affected",
              "version": "128.0.6613.137",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "Heap buffer overflow",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-11T13:47:54.631Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_10.html"
        },
        {
          "url": "https://issues.chromium.org/issues/361461526"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2024-8636",
    "datePublished": "2024-09-11T13:47:54.631Z",
    "dateReserved": "2024-09-09T22:19:42.613Z",
    "dateUpdated": "2024-09-13T13:28:35.767Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-9123 (GCVE-0-2024-9123)

Vulnerability from cvelistv5 – Published: 2024-09-24 18:44 – Updated: 2025-11-20 18:47

Summary

Integer overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-26 03:55 UTC

CWE

CWE-472 - Integer overflow
CWE-190 - Integer Overflow or Wraparound

Assigner

Chrome CNA under the Google root

CNA scorecard E 43/100 over 3519 records in the last 180 days details

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2024/09/sta…
https://issues.chromium.org/issues/365884464

Impacted products

2 products

Vendor	Product	Version
Google	Chrome	Affected: 129.0.6668.70 , < 129.0.6668.70 (custom)
google	chrome	Affected: 0 , < 129.0.6668.70 (custom) cpe:2.3:a:google:chrome::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "chrome",
            "vendor": "google",
            "versions": [
              {
                "lessThan": "129.0.6668.70",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-9123",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-26T03:55:49.588715Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-190",
                "description": "CWE-190 Integer Overflow or Wraparound",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-11-20T18:47:30.230Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "129.0.6668.70",
              "status": "affected",
              "version": "129.0.6668.70",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-472",
              "description": "Integer overflow",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-24T18:44:38.706Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_24.html"
        },
        {
          "url": "https://issues.chromium.org/issues/365884464"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2024-9123",
    "datePublished": "2024-09-24T18:44:38.706Z",
    "dateReserved": "2024-09-23T20:06:25.115Z",
    "dateUpdated": "2025-11-20T18:47:30.230Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-0436 (GCVE-0-2025-0436)

Vulnerability from cvelistv5 – Published: 2025-01-15 10:58 – Updated: 2025-03-18 20:08

Summary

Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-01-15 14:49 UTC

CWE

CWE-472 - Integer overflow
CWE-472 - External Control of Assumed-Immutable Web Parameter

Assigner

Chrome CNA under the Google root

CNA scorecard E 43/100 over 3519 records in the last 180 days details

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2025/01/sta…
https://issues.chromium.org/issues/382786791

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 132.0.6834.83 , < 132.0.6834.83 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-0436",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-15T14:49:46.759539Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-472",
                "description": "CWE-472 External Control of Assumed-Immutable Web Parameter",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-18T20:08:32.291Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "132.0.6834.83",
              "status": "affected",
              "version": "132.0.6834.83",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-472",
              "description": "Integer overflow",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-01-15T10:58:52.562Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html"
        },
        {
          "url": "https://issues.chromium.org/issues/382786791"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2025-0436",
    "datePublished": "2025-01-15T10:58:52.562Z",
    "dateReserved": "2025-01-13T22:09:20.004Z",
    "dateUpdated": "2025-03-18T20:08:32.291Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-0444 (GCVE-0-2025-0444)

Vulnerability from cvelistv5 – Published: 2025-02-04 18:53 – Updated: 2025-02-07 21:25

Summary

Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Severity

6.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-02-07 21:24 UTC

CWE

CWE-416 - Use after free

Assigner

Chrome CNA under the Google root

CNA scorecard E 43/100 over 3519 records in the last 180 days details

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2025/02/sta…
https://issues.chromium.org/issues/390889644

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 133.0.6943.53 , < 133.0.6943.53 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 6.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-0444",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-07T21:24:20.277202Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-07T21:25:12.144Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "133.0.6943.53",
              "status": "affected",
              "version": "133.0.6943.53",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use after free",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-02-04T18:53:06.437Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop.html"
        },
        {
          "url": "https://issues.chromium.org/issues/390889644"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2025-0444",
    "datePublished": "2025-02-04T18:53:06.437Z",
    "dateReserved": "2025-01-13T22:09:21.207Z",
    "dateUpdated": "2025-02-07T21:25:12.144Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2026-10009 (GCVE-0-2026-10009)

Vulnerability from cvelistv5 – Published: 2026-05-28 22:25 – Updated: 2026-05-30 03:55

Summary

Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-29 00:00 UTC

CWE

CWE-472 - Integer overflow

Assigner

Chrome CNA under the Google root

CNA scorecard E 43/100 over 3519 records in the last 180 days details

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/05/sta…
https://issues.chromium.org/issues/513973560

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 148.0.7778.216 , < 148.0.7778.216 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-10009",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-29T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-30T03:55:55.520Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "148.0.7778.216",
              "status": "affected",
              "version": "148.0.7778.216",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-472",
              "description": "Integer overflow",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-28T22:25:53.717Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
        },
        {
          "url": "https://issues.chromium.org/issues/513973560"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-10009",
    "datePublished": "2026-05-28T22:25:53.717Z",
    "dateReserved": "2026-05-28T17:25:13.386Z",
    "dateUpdated": "2026-05-30T03:55:55.520Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-10011 (GCVE-0-2026-10011)

Vulnerability from cvelistv5 – Published: 2026-05-28 22:25 – Updated: 2026-05-29 16:40

Summary

Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

Severity

3.1 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-29 16:40 UTC

CWE

Inappropriate implementation
CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Assigner

Chrome CNA under the Google root

CNA scorecard E 43/100 over 3519 records in the last 180 days details

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/05/sta…
https://issues.chromium.org/issues/514017326

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 148.0.7778.216 , < 148.0.7778.216 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 3.1,
              "baseSeverity": "LOW",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-10011",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-29T16:40:32.351063Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-29T16:40:56.861Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "148.0.7778.216",
              "status": "affected",
              "version": "148.0.7778.216",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Inappropriate implementation",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-28T22:25:54.357Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html"
        },
        {
          "url": "https://issues.chromium.org/issues/514017326"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-10011",
    "datePublished": "2026-05-28T22:25:54.357Z",
    "dateReserved": "2026-05-28T17:25:13.831Z",
    "dateUpdated": "2026-05-29T16:40:56.861Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:98455

CVE-2023-4860 (GCVE-0-2023-4860)

CVE-2024-7966 (GCVE-0-2024-7966)

CVE-2024-8193 (GCVE-0-2024-8193)

CVE-2024-8198 (GCVE-0-2024-8198)

CVE-2024-8636 (GCVE-0-2024-8636)

CVE-2024-9123 (GCVE-0-2024-9123)

CVE-2025-0436 (GCVE-0-2025-0436)

CVE-2025-0444 (GCVE-0-2025-0444)

CVE-2026-10009 (GCVE-0-2026-10009)

CVE-2026-10011 (GCVE-0-2026-10011)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour