DEBIAN-CVE-2026-78944

Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-79017

Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-79017

Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-79148

An off-by-one error in the DevTools component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker, leveraging social engineering and a crafted Chrome extension, to read memory inside the sandbox . Chromium rated this Low severity, while the CNA-assigned CVSS 3.1 score is 9.1...

CVE-2026-78960

Information leak in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-78960

CVE-2026-78960 is an information leak in the Extensions component of Google Chrome prior to 152.0.7977.65 . A remote attacker leveraging social engineering can obtain cross-origin data by installing a specially crafted Chrome extension. The vulnerability requires user interaction (installing the ...

CVE-2026-78944

A use after free vulnerability in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker, leveraging social engineering, to execute arbitrary code inside the sandbox via a crafted Chrome extension. The vulnerability is classified by Chromium as Medium severity but carries a CV...

CVE-2026-79176

Google Chrome prior to 152.0.7977.65 is affected by a UI misrepresentation in the Extensions feature. A remote attacker can leverage social engineering to trick a user into installing a specially crafted Chrome extension , allowing them to obtain sensitive information from the user's browser. The...

PT-2026-81726

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An off-by-one error in DevTools allows a remote attacker to potentially read memory inside the sandbox. This issue can be exploited through social engineering using a crafted Chrome...

PT-2026-81615

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A race condition in Extensions allows a remote attacker to bypass system access restrictions by using a crafted Chrome extension. A race condition occurs when the timing or order of...

PT-2026-81716

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in Extensions allows a remote attacker to bypass system access restrictions through the use of a crafted Chrome extension, typically leveraging social engineerin...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in DevTools in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementations in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing through a crafted Chrome Extension. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Before version 100.0.4896.88, using free storage in Google Chrome allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape through a crafted Chrome Extension...

Astra Linux – Vulnerability in Chromium

Using use after free in ServiceWorker in Google Chrome before version 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code through a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The use of “after free” in Cast in Google Chrome before version 99.0.4844.51 allowed attackers to convince users to install a malicious extension and induce specific user interactions, thereby potentially exploiting heap corruption through a crafted Chrome Extension...

Astra Linux – Vulnerability in Chromium

Inappropriate implementations in inputs before version 96.0.4664.45 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions through a crafted Google Chrome extension...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in the V8 API of Google Chrome prior to version 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption through a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Using “after free” in DevTools in Google Chrome before version 130.0.6723.58 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted Chrome Extension. Chromium security severity: Medium...