https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 15:23:19 +0000 https://vulnerability.circl.lu/vuln/alsa-2026:69098 <p><strong>Affected:</strong> AlmaLinux:9: webkit2gtk3, AlmaLinux:9: webkit2gtk3-devel, AlmaLinux:9: webkit2gtk3-jsc, AlmaLinux:9: webkit2gtk3-jsc-devel</p> <p>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.</p> <p>Security Fix(es):</p> <p>* chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154) * chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173) * chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161) * chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176) * chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984) * webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804) * webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713) * webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787) * webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783) * webkitgtk: use-after-free of JSCValue f…</p> <p><strong>Affected:</strong> AlmaLinux:9: webkit2gtk3, AlmaLinux:9: webkit2gtk3-devel, AlmaLinux:9: webkit2gtk3-jsc, AlmaLinux:9: webkit2gtk3-jsc-devel</p> <p>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.</p> <p>Security Fix(es):</p> <p>* chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154) * chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173) * chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161) * chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176) * chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984) * webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804) * webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713) * webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787) * webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783) * webkitgtk: use-after-free of JSCValue f…</p> https://vulnerability.circl.lu/vuln/alsa-2026:69098 https://vulnerability.circl.lu/vuln/bdu:2026-13643 bdu:2026-13643 https://vulnerability.circl.lu/vuln/bdu:2026-13643 https://vulnerability.circl.lu/vuln/certfr-2026-avi-0978 certfr-2026-avi-0978 https://vulnerability.circl.lu/vuln/certfr-2026-avi-0978 https://vulnerability.circl.lu/vuln/fkie_cve-2026-19154 <p>Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)</p> <p>Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-19154 https://vulnerability.circl.lu/vuln/ghsa-rhrm-pw3p-v8j2 <p>Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)</p> <p>Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)</p> https://vulnerability.circl.lu/vuln/ghsa-rhrm-pw3p-v8j2 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11484-1 <p>chromedriver-151.0.7922.108-1.1 on GA media</p> <p>chromedriver-151.0.7922.108-1.1 on GA media</p> https://vulnerability.circl.lu/vuln/opensuse-su-2026:11484-1 https://vulnerability.circl.lu/vuln/rlsa-2026:69098 <p><strong>Affected:</strong> Rocky Linux:9: webkit2gtk3</p> <p>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.</p> <p>Security Fix(es):</p> <p>* chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154)</p> <p>* chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173)</p> <p>* chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161)</p> <p>* chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)</p> <p>* chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041)</p> <p>* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)</p> <p>* webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)</p> <p>* webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)</p> <p>* webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)</p> <p>* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787)</p> <p>* webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)</p> <p>* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)</p> <p>* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)</p> <p>* webkitgtk: use-after-free of JSCValue function parameters…</p> <p><strong>Affected:</strong> Rocky Linux:9: webkit2gtk3</p> <p>WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.</p> <p>Security Fix(es):</p> <p>* chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154)</p> <p>* chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173)</p> <p>* chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161)</p> <p>* chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)</p> <p>* chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041)</p> <p>* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)</p> <p>* webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)</p> <p>* webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)</p> <p>* webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)</p> <p>* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787)</p> <p>* webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)</p> <p>* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)</p> <p>* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)</p> <p>* webkitgtk: use-after-free of JSCValue function parameters…</p> https://vulnerability.circl.lu/vuln/rlsa-2026:69098