<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-01T23:32:58.812512+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/alsa-2026:74084</id>
    <title>ALSA-2026:74084 — Critical: webkit2gtk3 security update</title>
    <updated>2026-10-01T23:32:59.008614+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> AlmaLinux:8: webkit2gtk3, AlmaLinux:8: webkit2gtk3-devel, AlmaLinux:8: webkit2gtk3-jsc, AlmaLinux:8: webkit2gtk3-jsc-devel</p>
<p>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.</p>
<p>Security Fix(es):</p>
<p>* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2023-4860)
  * chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2024-7532)
  * chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page (CVE-2024-7966)
  * chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8193)
  * chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8198)
  * chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8636)
  * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome (CVE-2024-9123)
  * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2025-0436)
  * chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2025-0444)
  * chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability (CVE-2025-8901)
  * chromium-browser: angle: Use after free in ANGLE (CVE-2025-9478)
  * chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2025-10502)
  * chromium-browser: angle: Use after free in ANGLE (CVE-2026-0908)
  * chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-3536)
  * chromium-browser: skia: chromium-browser…</p></div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/alsa-2026:74084"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/certfr-2026-avi-1081</id>
    <title>certfr-2026-avi-1081 — De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un pro…</title>
    <updated>2026-10-01T23:32:59.009190+00:00</updated>
    <content>certfr-2026-avi-1081</content>
    <link href="https://vulnerability.circl.lu/vuln/certfr-2026-avi-1081"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/fkie_cve-2026-79118</id>
    <title>fkie_cve-2026-79118</title>
    <updated>2026-10-01T23:32:59.009245+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)</p>
      </div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/fkie_cve-2026-79118"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/ghsa-33pg-v3w2-93gm</id>
    <title>GHSA-33pg-v3w2-93gm</title>
    <updated>2026-10-01T23:32:59.009303+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)</p>
      </div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/ghsa-33pg-v3w2-93gm"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/opensuse-su-2026:11628-1</id>
    <title>openSUSE-SU-2026:11628-1 — chromedriver-152.0.7977.64-1.1 on GA media</title>
    <updated>2026-10-01T23:32:59.009334+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>chromedriver-152.0.7977.64-1.1 on GA media</p>
      </div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/opensuse-su-2026:11628-1"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/rhsa-2026:74084</id>
    <title>RHSA-2026:74084 — Red Hat Security Advisory: webkit2gtk3 security update</title>
    <updated>2026-10-01T23:32:59.009967+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia chromium-browser: angle: Out of bounds memory access in ANGLE chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page chromium: skia: chromium: skia: Heap buffer overflow in Skia chromium: skia: chromium: skia: Heap buffer overflow in Skia chromium: skia: chromium: skia: Heap buffer overflow in Skia chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia chromium-browser: skia: chromium-browser: skia: Use after free in Skia chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability chromium-browser: angle: Use after free in ANGLE chromium-browser: angle: Heap buffer overflow in ANGLE chromium-browser: angle: Use after free in ANGLE chromium-browser: angle: Integer overflow in ANGLE chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia chromium-browser: angle: Heap buffer overflow in ANGLE chromium-browser: angle: Integer overflow in ANGLE chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia chromium-browser: angle: Inte…</p>
      </div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/rhsa-2026:74084"/>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/vuln/rlsa-2026:69098</id>
    <title>RLSA-2026:69098 — Important: webkit2gtk3 security update</title>
    <updated>2026-10-01T23:32:59.011668+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Rocky Linux:9: webkit2gtk3</p>
<p>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.</p>
<p>Security Fix(es):</p>
<p>* chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154)</p>
<p>* chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173)</p>
<p>* chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161)</p>
<p>* chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)</p>
<p>* chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041)</p>
<p>* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)</p>
<p>* webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)</p>
<p>* webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)</p>
<p>* webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)</p>
<p>* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787)</p>
<p>* webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)</p>
<p>* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)</p>
<p>* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)</p>
<p>* webkitgtk: use-after-free of JSCValue function parameters…</p></div>
    </content>
    <link href="https://vulnerability.circl.lu/vuln/rlsa-2026:69098"/>
  </entry>
</feed>
