The vulnerability of the WebRTC component in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the WebRTC component in Google Chrome browser is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Security update for google-guest-agent (important)

openSUSE security update: security update for google-guest-agent ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21476-1 Rating: important References: bsc1266603 bsc1272118 Cross-References: CVE-2026-39821 CVE-2026-56852 CVSS scores: CVE-2026-39821...

The vulnerability of Google Chrome, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Google Chrome browser’s Navigation function allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser’s Navigation function is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Aura component in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Aura component in Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of Google Chrome’s user interface allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s user interface relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Mojo browser library in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the Mojo library in Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the WebAudio component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the WebAudio component in the Google Chrome browser is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

PT-2026-66872

Name of the Vulnerable Software and Affected Versions gemini-bridge versions 1.0.0 through 1.3.0 Description The consult gemini with files function in inline mode allows an arbitrary local file read. When the mode is set to "inline", the server reads any file path provided in the files argument...

UBUNTU-CVE-2026-68499

re2 provides Node.js bindings for Google's RE2 regular expression engine. Prior to 1.25.2, re2's String.prototype.match implementation with a global RE2 pattern that can match the empty string fails to advance its native matching cursor in lib/match.cc, causing an infinite loop and unbounded nati...

CVE-2026-67550

CVE-2026-67550 affects re2 Node.js bindings for Google's RE2 engine. Before version 1.25.2, lastIndex is validated against the subject’s UTF-8 byte length but used as a UTF-16 code-unit offset in exec/test/match/replace/split, enabling an attacker-influenced lastIndex on a non-ASCII subject to tr...

Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266603. CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of input...

SUSE-SU-2026:3432-1 Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266603. - CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of...

SUSE CVE-2026-17820

Insufficient policy enforcement in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-17823

Insufficient policy enforcement in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-17829

Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-17832

Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-17843

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-17844

Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origin data via malicious network traffic. Chromium security severity: Medium...

SUSE CVE-2026-17847

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...