Most recent entries from all

ALSA-2026:69098 — Important: webkit2gtk3 security update

2026-09-30T18:12:25.060227+00:00

Affected: AlmaLinux:9: webkit2gtk3, AlmaLinux:9: webkit2gtk3-devel, AlmaLinux:9: webkit2gtk3-jsc, AlmaLinux:9: webkit2gtk3-jsc-devel

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154) * chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173) * chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161) * chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176) * chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984) * webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804) * webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713) * webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787) * webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783) * webkitgtk: use-after-free of JSCValue f…

certfr-2026-avi-1081 — De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un pro…

2026-09-30T18:12:25.060394+00:00

certfr-2026-avi-1081

fkie_cve-2026-79020

2026-09-30T18:12:25.060459+00:00

Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. (Chromium security severity: Medium)

GHSA-pm4h-gc66-8wr7

2026-09-30T18:12:25.060503+00:00

openSUSE-SU-2026:11628-1 — chromedriver-152.0.7977.64-1.1 on GA media

2026-09-30T18:12:25.060529+00:00

chromedriver-152.0.7977.64-1.1 on GA media

RLSA-2026:69098 — Important: webkit2gtk3 security update

2026-09-30T18:12:25.060859+00:00

Affected: Rocky Linux:9: webkit2gtk3

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154)

* chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173)

* chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161)

* chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)

* chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041)

* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)

* webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)

* webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)

* webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)

* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787)

* webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)

* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)

* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)

* webkitgtk: use-after-free of JSCValue function parameters…