DEBIAN-CVE-2026-84335

Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84335

Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-84351

Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-84350

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Low...

CVE-2026-84324

Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

CVE-2026-84335

An incorrect authorization flaw was found in the TabStrip component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522302504 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

CVE-2026-84347

An use after free flaw was found in the WebRTC component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501679156...

CVE-2026-84334

An incorrect authorization flaw was found in the Chromoting component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517798926 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Produ...

CVE-2026-84326

An uninitialized resource flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=547936520 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Securi...

Debian dsa-6481 : firefox-esr - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6481 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6481-1 [email protected] https://www.debian.org/securit...

The vulnerability of the Media component in Google Chrome and Microsoft Edge web browsers allows a hacker to execute arbitrary code.

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code within the sandbox by using a specially created HTML page...

The vulnerability of the Web Authentication component in Google Chrome and Microsoft Edge web browsers allows a hacker to bypass the sandboxing protection mechanism.

The vulnerability of the Web Authentication component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to bypass the sandbox protection mechanism through a specially created HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-84349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-84121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefo...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge web browsers allows a hacker to execute arbitrary code within the sandbox.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge browsers relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code within the browser’s sandbox environment, through the use ...

The vulnerability of the Navigation component in Google Chrome and Microsoft Edge web browsers allows attackers to bypass the sandboxing protection mechanisms.

The vulnerability of the Navigation component in Google Chrome and Microsoft Edge relates to a flaw in data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass the sandbox protection mechanism by using a specially created HTML page...

The vulnerability of the Payments component in Google Chrome and Microsoft Edge web browsers allows a hacker to bypass the sandboxing protection mechanism.

The vulnerability of the Payments component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a malicious actor to bypass the sandboxing mechanism by using a specially created HTML page...

The vulnerability of the Media component in Google Chrome and Microsoft Edge web browsers allows a hacker to bypass security measures.

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a malicious actor to escape from the sandbox environment by using a specially created HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-84354

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-84119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15,...