https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T13:21:42.789731+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bdu:2026-13181 bdu:2026-13181 2026-09-30T13:21:42.905497+00:00 bdu:2026-13181 https://vulnerability.circl.lu/vuln/certfr-2026-avi-0708 certfr-2026-avi-0708 — De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un pro… 2026-09-30T13:21:42.905594+00:00 certfr-2026-avi-0708 https://vulnerability.circl.lu/vuln/fkie_cve-2026-11675 fkie_cve-2026-11675 2026-09-30T13:21:42.905631+00:00

Out of bounds read in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

 https://vulnerability.circl.lu/vuln/ghsa-vq94-cc3q-gvj8 GHSA-vq94-cc3q-gvj8 2026-09-30T13:21:42.905692+00:00

Out of bounds read in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11008-1 openSUSE-SU-2026:11008-1 — chromedriver-149.0.7827.102-1.1 on GA media 2026-09-30T13:21:42.905721+00:00

chromedriver-149.0.7827.102-1.1 on GA media

 https://vulnerability.circl.lu/vuln/rlsa-2026:69098 RLSA-2026:69098 — Important: webkit2gtk3 security update 2026-09-30T13:21:42.905808+00:00

Affected: Rocky Linux:9: webkit2gtk3

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154)

* chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173)

* chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161)

* chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)

* chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041)

* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)

* webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)

* webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)

* webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)

* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787)

* webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)

* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)

* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)

* webkitgtk: use-after-free of JSCValue function parameters…

 https://vulnerability.circl.lu/vuln/wid-sec-w-2026-1819 WID-SEC-W-2026-1819 — Google Chrome / Microsoft Edge: Mehrere Schwachstellen 2026-09-30T13:21:42.905914+00:00

Ein Angreifer kann mehrere Schwachstellen in Google Chrome / Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder andere, nicht näher spezifizierte Angriffe durchzuführen.