<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 01 Oct 2026 07:08:40 +0000</lastBuildDate>
    <item>
      <title>bdu:2026-13651</title>
      <link>https://vulnerability.circl.lu/vuln/bdu:2026-13651</link>
      <description>bdu:2026-13651</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/bdu:2026-13651</guid>
    </item>
    <item>
      <title>certfr-2026-avi-0978 — De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un pro…</title>
      <link>https://vulnerability.circl.lu/vuln/certfr-2026-avi-0978</link>
      <description>certfr-2026-avi-0978</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/certfr-2026-avi-0978</guid>
    </item>
    <item>
      <title>fkie_cve-2026-19160</title>
      <link>https://vulnerability.circl.lu/vuln/fkie_cve-2026-19160</link>
      <description>&lt;p&gt;Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/fkie_cve-2026-19160</guid>
    </item>
    <item>
      <title>GHSA-rhp6-q4j8-v7v5</title>
      <link>https://vulnerability.circl.lu/vuln/ghsa-rhp6-q4j8-v7v5</link>
      <description>&lt;p&gt;Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ghsa-rhp6-q4j8-v7v5</guid>
    </item>
    <item>
      <title>openSUSE-SU-2026:11484-1 — chromedriver-151.0.7922.108-1.1 on GA media</title>
      <link>https://vulnerability.circl.lu/vuln/opensuse-su-2026:11484-1</link>
      <description>&lt;p&gt;chromedriver-151.0.7922.108-1.1 on GA media&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;chromedriver-151.0.7922.108-1.1 on GA media&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/opensuse-su-2026:11484-1</guid>
    </item>
    <item>
      <title>RHSA-2026:74084 — Red Hat Security Advisory: webkit2gtk3 security update</title>
      <link>https://vulnerability.circl.lu/vuln/rhsa-2026:74084</link>
      <description>&lt;p&gt;chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia chromium-browser: angle: Out of bounds memory access in ANGLE chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page chromium: skia: chromium: skia: Heap buffer overflow in Skia chromium: skia: chromium: skia: Heap buffer overflow in Skia chromium: skia: chromium: skia: Heap buffer overflow in Skia chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia chromium-browser: skia: chromium-browser: skia: Use after free in Skia chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability chromium-browser: angle: Use after free in ANGLE chromium-browser: angle: Heap buffer overflow in ANGLE chromium-browser: angle: Use after free in ANGLE chromium-browser: angle: Integer overflow in ANGLE chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia chromium-browser: angle: Heap buffer overflow in ANGLE chromium-browser: angle: Integer overflow in ANGLE chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia chromium-browser: angle: Inte…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia chromium-browser: angle: Out of bounds memory access in ANGLE chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page chromium: skia: chromium: skia: Heap buffer overflow in Skia chromium: skia: chromium: skia: Heap buffer overflow in Skia chromium: skia: chromium: skia: Heap buffer overflow in Skia chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia chromium-browser: skia: chromium-browser: skia: Use after free in Skia chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability chromium-browser: angle: Use after free in ANGLE chromium-browser: angle: Heap buffer overflow in ANGLE chromium-browser: angle: Use after free in ANGLE chromium-browser: angle: Integer overflow in ANGLE chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia chromium-browser: angle: Heap buffer overflow in ANGLE chromium-browser: angle: Integer overflow in ANGLE chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia chromium-browser: angle: Inte…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/rhsa-2026:74084</guid>
    </item>
    <item>
      <title>RLSA-2026:69098 — Important: webkit2gtk3 security update</title>
      <link>https://vulnerability.circl.lu/vuln/rlsa-2026:69098</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Rocky Linux:9: webkit2gtk3&lt;/p&gt;
&lt;p&gt;WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154)&lt;/p&gt;
&lt;p&gt;* chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173)&lt;/p&gt;
&lt;p&gt;* chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161)&lt;/p&gt;
&lt;p&gt;* chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)&lt;/p&gt;
&lt;p&gt;* chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)&lt;/p&gt;
&lt;p&gt;* webkitgtk: use-after-free of JSCValue function parameters…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Rocky Linux:9: webkit2gtk3&lt;/p&gt;
&lt;p&gt;WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154)&lt;/p&gt;
&lt;p&gt;* chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173)&lt;/p&gt;
&lt;p&gt;* chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161)&lt;/p&gt;
&lt;p&gt;* chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)&lt;/p&gt;
&lt;p&gt;* chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)&lt;/p&gt;
&lt;p&gt;* webkitgtk: use-after-free of JSCValue function parameters…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/rlsa-2026:69098</guid>
    </item>
  </channel>
</rss>
