CVE-2026-3909 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-3909 vulnerabilities

Vulnerabilities for packages: chromium...

March Linux Patch Wednesday

MarchLinux Patch Wednesday. In March, Linux vendors began addressing 575 vulnerabilities, which is 57 fewer than in February. Of these, 93 are in the Linux Kernel ⬇️ a significant decrease - there were 305 in February. There are two vulnerabilities with signs of in-the-wild exploitation: 🔻 RCE -...

Fedora: Security Advisory (FEDORA-2026-7ffd130a98)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : chromium (2026-7ffd130a98)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7ffd130a98 advisory. Update to 146.0.7680.80 CVE-2026-3909: Out of bounds write in Ski Tenable has extracted the preceding description block directly from the Fedora...

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:20372-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20372-1 advisory. Changes in chromium: - Chromium 146.0.7680.80: CVE-2026-3909: Out of bounds write in Skia boo1259659 - Chromium 146.0.7680.75 released 2026-03-1...

Fedora 44 : chromium (2026-b7d2936de3)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b7d2936de3 advisory. Update to 146.0.7680.80 CVE-2026-3909: Out of bounds write in Ski Tenable has extracted the preceding description block directly from the Fedora...

Fedora: Security Advisory (FEDORA-2026-44c7458a92)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dsa-6165 : chromium - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6165 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6165-1 [email protected]...

Google Chrome < 146.0.7680.80 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 146.0.7680.80. It is, therefore, affected by a vulnerability as referenced in the 202603stable-channel-update-for-desktop13 advisory. - Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remot...

Google Chrome < 146.0.7680.80 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 146.0.7680.80. It is, therefore, affected by a vulnerability as referenced in the 202603stable-channel-update-for-desktop13 advisory. - Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote...

Minor update(8) for Vivaldi Android Browser 7.8

Head to the Google Play Store and download the browser. Alternatively, you can download Vivaldi from Uptodown, the Android app store. Your rating for our browser matters. ⭐️ ⭐️ ⭐️ ⭐️ ⭐️ Enjoy! Changelog The following is a list of changes since the seventh 7.8 minor update: Upgraded to...

Linux Distros Unpatched Vulnerability : CVE-2026-3909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page...

CVE-2026-3909

creationtimestamp| type| source ---|---|--- 2026-03-12 23:01:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgvixkqqrb2o 2026-03-13 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0286/ 2026-03-13 01:52:18+00:00| seen|...

CVE-2026-3909

Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

EUVD-2026-3909

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes PartyMaker partymaker allows PHP Local File Inclusion.This issue affects PartyMaker: from n/a through = 1.1.15...

MiracleLinux 8 : thunderbird-128.11.0-1.el8_10.ML.1 (AXSA:2025-10026:12)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-10026:12 advisory. thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link CVE-2025-3909 thunderbird: Sender Spoofing via Malformed From Header...

RockyLinux 9 : thunderbird (RLSA-2025:8203)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:8203 advisory. thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link CVE-2025-3909 thunderbird: Sender Spoofing via Malformed From Header in...

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

Linux Distros Unpatched Vulnerability : CVE-2016-3909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SoftMPEG4 component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0...