CVE-2026-93377

Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-93383

Google Chrome versions prior to 153.0.8010.52 are vulnerable to an information leak in the Permissions component. This flaw allows a remote attacker to leak cross-origin data by interacting with a crafted HTML page. The vulnerability has been addressed in version 153.0.8010.52 (boo#1281123). Whil...

CVE-2026-93373

Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: High...

CVE-2026-93379

Google Chrome versions prior to 153.0.8010.52 are vulnerable to CVE-2026-93379 due to an incorrect authorization in ORB . This flaw allows a remote attacker to bypass site isolation by serving a crafted HTML page. Security advisories for openSUSE, Fedora, and Debian indicate that the update to ve...

CVE-2026-93379

Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-93387

Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-93373

Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: High...

CVE-2026-93381

Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...

CVE-2026-93379

Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-93387

Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-82481

Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...

CVE-2026-93373

Google Chrome versions prior to 153.0.8010.52 are vulnerable to a use after free issue in the Extensions component. A remote attacker can exploit this by using a crafted Chrome extension to execute arbitrary code outside the sandbox. Remediation includes updating to version 153.0.8010.52 or later...

CVE-2026-93387

A remote attacker can exploit improper state validation in the Skia component of Google Chrome (prior to version 153.0.8010.52) to obtain cross-origin data via a crafted HTML page. This vulnerability has been addressed in Chromium 153.0.8010.52 and corresponding distribution packages, such as 153...

CVE-2026-93381

A buffer overflow in the PDFium component of Google Chrome (specifically on Windows) allows a remote attacker to potentially execute arbitrary code inside the sandbox. The attack can be initiated by leveraging social engineering to trick a user into opening a crafted PDF file . This vulnerability...

CVE-2026-93382

A Use after free vulnerability exists in the PDFium component of Google Chrome (prior to version 153.0.8010.52). This flaw allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page . Impacted systems include Fedora 44 , openSUSE Backports SLE-15-SP...

CVE-2026-93382

Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-93374

A use after free vulnerability exists in Dawn within the Google Chrome browser on Android (prior to version 153.0.8010.52 ). A remote attacker could potentially execute arbitrary code outside the sandbox by serving a crafted HTML page to the victim. This issue has been addressed in the 153.0.8010...

vim: Vim: Arbitrary Code Execution via crafted directory names

A flaw was found in Vim, an open-source text editor. This vulnerability, located in the netrw plugin, involves a code injection issue when the editor processes directory paths. A malicious directory name, if crafted by an attacker, could bypass security measures and allow for the execution of...

DEBIAN-CVE-2026-90133

In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix indexroot heap OOB write in ntfsirtoib ntfsirtoib copies all entries from indexroot into a freshly allocated indexblocksize-byte buffer without verifying that the entries fit in the available space. The entries in...

CVE-2026-90133

In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix indexroot heap OOB write in ntfsirtoib ntfsirtoib copies all entries from indexroot into a freshly allocated indexblocksize-byte buffer without verifying that the entries fit in the available space. The entries in...