<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 01 Oct 2026 11:40:56 +0000</lastBuildDate>
    <item>
      <title>certfr-2026-avi-1081 — De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un pro…</title>
      <link>https://vulnerability.circl.lu/vuln/certfr-2026-avi-1081</link>
      <description>certfr-2026-avi-1081</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/certfr-2026-avi-1081</guid>
    </item>
    <item>
      <title>fkie_cve-2026-79120</title>
      <link>https://vulnerability.circl.lu/vuln/fkie_cve-2026-79120</link>
      <description>&lt;p&gt;Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/fkie_cve-2026-79120</guid>
    </item>
    <item>
      <title>GHSA-crg8-rv25-8pw8</title>
      <link>https://vulnerability.circl.lu/vuln/ghsa-crg8-rv25-8pw8</link>
      <description>&lt;p&gt;Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ghsa-crg8-rv25-8pw8</guid>
    </item>
    <item>
      <title>openSUSE-SU-2026:11628-1 — chromedriver-152.0.7977.64-1.1 on GA media</title>
      <link>https://vulnerability.circl.lu/vuln/opensuse-su-2026:11628-1</link>
      <description>&lt;p&gt;chromedriver-152.0.7977.64-1.1 on GA media&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;chromedriver-152.0.7977.64-1.1 on GA media&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/opensuse-su-2026:11628-1</guid>
    </item>
    <item>
      <title>RHSA-2026:74084 — Red Hat Security Advisory: webkit2gtk3 security update</title>
      <link>https://vulnerability.circl.lu/vuln/rhsa-2026:74084</link>
      <description>&lt;p&gt;chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia chromium-browser: angle: Out of bounds memory access in ANGLE chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page chromium: skia: chromium: skia: Heap buffer overflow in Skia chromium: skia: chromium: skia: Heap buffer overflow in Skia chromium: skia: chromium: skia: Heap buffer overflow in Skia chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia chromium-browser: skia: chromium-browser: skia: Use after free in Skia chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability chromium-browser: angle: Use after free in ANGLE chromium-browser: angle: Heap buffer overflow in ANGLE chromium-browser: angle: Use after free in ANGLE chromium-browser: angle: Integer overflow in ANGLE chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia chromium-browser: angle: Heap buffer overflow in ANGLE chromium-browser: angle: Integer overflow in ANGLE chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia chromium-browser: angle: Inte…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia chromium-browser: angle: Out of bounds memory access in ANGLE chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page chromium: skia: chromium: skia: Heap buffer overflow in Skia chromium: skia: chromium: skia: Heap buffer overflow in Skia chromium: skia: chromium: skia: Heap buffer overflow in Skia chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia chromium-browser: skia: chromium-browser: skia: Use after free in Skia chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability chromium-browser: angle: Use after free in ANGLE chromium-browser: angle: Heap buffer overflow in ANGLE chromium-browser: angle: Use after free in ANGLE chromium-browser: angle: Integer overflow in ANGLE chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia chromium-browser: angle: Heap buffer overflow in ANGLE chromium-browser: angle: Integer overflow in ANGLE chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia chromium-browser: angle: Inte…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/rhsa-2026:74084</guid>
    </item>
    <item>
      <title>RLSA-2026:69098 — Important: webkit2gtk3 security update</title>
      <link>https://vulnerability.circl.lu/vuln/rlsa-2026:69098</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Rocky Linux:9: webkit2gtk3&lt;/p&gt;
&lt;p&gt;WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154)&lt;/p&gt;
&lt;p&gt;* chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173)&lt;/p&gt;
&lt;p&gt;* chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161)&lt;/p&gt;
&lt;p&gt;* chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)&lt;/p&gt;
&lt;p&gt;* chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)&lt;/p&gt;
&lt;p&gt;* webkitgtk: use-after-free of JSCValue function parameters…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Rocky Linux:9: webkit2gtk3&lt;/p&gt;
&lt;p&gt;WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154)&lt;/p&gt;
&lt;p&gt;* chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173)&lt;/p&gt;
&lt;p&gt;* chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161)&lt;/p&gt;
&lt;p&gt;* chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)&lt;/p&gt;
&lt;p&gt;* chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)&lt;/p&gt;
&lt;p&gt;* webkitgtk: use-after-free of JSCValue function parameters…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/rlsa-2026:69098</guid>
    </item>
  </channel>
</rss>
