DEBIAN-CVE-2026-11183

Out of bounds read in GWP-ASan in Google Chrome prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

CVE-2026-11103

Inappropriate implementation in Installer in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: Medium...

CVE-2026-11035

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to perform privilege escalation via a crafted XML file. Chromium security severity: Medium...

CVE-2026-11297

Google Chrome on Android versions prior to 149.0.7827.53 is vulnerable to a security issue in Reader Mode caused by insufficient validation of untrusted input. A local attacker can exploit this flaw to bypass navigation restrictions using a malicious file. Exploitation details for this specific C...

CVE-2026-11281

An integer overflow vulnerability in the Chromoting component of Google Chrome on Windows (prior to version 149.0.7827.53 ) allows a local attacker to obtain potentially sensitive information from process memory. This is achievable by providing a crafted ETW event . The vulnerability is classifie...

CVE-2026-11281

Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted ETW event. Chromium security severity: Low...

CVE-2026-11281

Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted ETW event. Chromium security severity: Low...

CVE-2026-11278

An inappropriate implementation in CustomTabs within Google Chrome on Android prior to version 149.0.7827.53 allowed a local attacker to leak cross-origin data through a crafted HTML page. This vulnerability is categorized with a Chromium security severity of Low and is associated with CWE-346 (O...

CVE-2026-11278

Inappropriate implementation in CustomTabs in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-11276

The Cast component in Google Chrome (and potentially Microsoft Edge ) prior to version 149.0.7827.53 is vulnerable to an inappropriate implementation that allows an attacker on the local network segment to bypass discretionary access control via malicious network traffic. This flaw could allow at...

CVE-2026-11229

Google Chrome versions prior to 149.0.7827.53 are vulnerable to a privilege escalation flaw caused by an inappropriate implementation in the Enterprise component. A local attacker with physical access to the device can exploit this vulnerability to gain elevated privileges. For Debian systems, th...

CVE-2026-11229

Inappropriate implementation in Enterprise in Google Chrome prior to 149.0.7827.53 allowed a local attacker to perform privilege escalation via physical access to the device. Chromium security severity: Low...

CVE-2026-11229

Inappropriate implementation in Enterprise in Google Chrome prior to 149.0.7827.53 allowed a local attacker to perform privilege escalation via physical access to the device. Chromium security severity: Low...

CVE-2026-11183

Out of bounds read in GWP-ASan in Google Chrome prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

CVE-2026-11158

Google Chrome on Mac versions prior to 149.0.7827.53 is vulnerable to a sandbox escape due to insufficient validation of untrusted input within the Downloads component. A local attacker can exploit this by providing a crafted AppleScript command . While the Chromium security severity is rated as ...

CVE-2026-11158

Insufficient validation of untrusted input in Downloads in Google Chrome on Mac prior to 149.0.7827.53 allowed a local attacker to potentially perform a sandbox escape via a crafted AppleScript command. Chromium security severity: Medium...

CVE-2026-11148

Inappropriate implementation in Payments in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11148

Inappropriate implementation in Payments in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11103

Inappropriate implementation in Installer in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: Medium...

CVE-2026-11103

Inappropriate implementation in Installer in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: Medium...