{"uuid": "43b2d96c-0fc3-4346-98d3-f10ee4d678cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103628", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117374808023587810", "content": "Google Chrome published an empty blog post as a security advisory on Thursday afternoon. They filled it out in the past day, but don't make it easy to grasp the severity of their bugs.\nFor example, \"Critical CVE-2026-103628: Out of bounds write in WebGL.\" is actually a CVSSv3.1: 9.6 critical because it allows a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. You'd have to chase down those details yourself on cve.org or elsewhere. \nhttps://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html\n#google #chrome #CVE", "creation_timestamp": "2026-10-03T09:04:29.299523Z"}