https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 15:22:43 +0000 https://vulnerability.circl.lu/vuln/bdu:2026-13181 bdu:2026-13181 https://vulnerability.circl.lu/vuln/bdu:2026-13181 https://vulnerability.circl.lu/vuln/certfr-2026-avi-0708 certfr-2026-avi-0708 https://vulnerability.circl.lu/vuln/certfr-2026-avi-0708 https://vulnerability.circl.lu/vuln/fkie_cve-2026-11675 <p>Out of bounds read in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)</p> <p>Out of bounds read in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-11675 https://vulnerability.circl.lu/vuln/ghsa-vq94-cc3q-gvj8 <p>Out of bounds read in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)</p> <p>Out of bounds read in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)</p> https://vulnerability.circl.lu/vuln/ghsa-vq94-cc3q-gvj8 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11008-1 <p>chromedriver-149.0.7827.102-1.1 on GA media</p> <p>chromedriver-149.0.7827.102-1.1 on GA media</p> https://vulnerability.circl.lu/vuln/opensuse-su-2026:11008-1 https://vulnerability.circl.lu/vuln/rlsa-2026:69098 <p><strong>Affected:</strong> Rocky Linux:9: webkit2gtk3</p> <p>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.</p> <p>Security Fix(es):</p> <p>* chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154)</p> <p>* chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173)</p> <p>* chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161)</p> <p>* chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)</p> <p>* chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041)</p> <p>* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)</p> <p>* webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)</p> <p>* webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)</p> <p>* webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)</p> <p>* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787)</p> <p>* webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)</p> <p>* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)</p> <p>* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)</p> <p>* webkitgtk: use-after-free of JSCValue function parameters…</p> <p><strong>Affected:</strong> Rocky Linux:9: webkit2gtk3</p> <p>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.</p> <p>Security Fix(es):</p> <p>* chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154)</p> <p>* chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173)</p> <p>* chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161)</p> <p>* chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)</p> <p>* chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041)</p> <p>* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)</p> <p>* webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)</p> <p>* webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)</p> <p>* webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)</p> <p>* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787)</p> <p>* webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)</p> <p>* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)</p> <p>* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)</p> <p>* webkitgtk: use-after-free of JSCValue function parameters…</p> https://vulnerability.circl.lu/vuln/rlsa-2026:69098 https://vulnerability.circl.lu/vuln/wid-sec-w-2026-1819 <p>Ein Angreifer kann mehrere Schwachstellen in Google Chrome / Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder andere, nicht näher spezifizierte Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Google Chrome / Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder andere, nicht näher spezifizierte Angriffe durchzuführen.</p> https://vulnerability.circl.lu/vuln/wid-sec-w-2026-1819