chromium -- security fixes

Chrome Releases reports: This update includes 74 security fixes: 516501794 Critical CVE-2026-11628: Use after free in Ozone. 516674532 Critical CVE-2026-11629: Use after free in Ozone. 516677924 Critical CVE-2026-11630: Use after free in File Input. 516691130 Critical CVE-2026-11631: Use after fr...

CVE-2025-53844

creationtimestamp| type| source ---|---|--- 2026-05-14 00:08:08+00:00| seen| https://ccb.belgium.be/advisories/warning-multiple-critical-high-and-medium-vulnerabilities-fortinet-fortisandbox-fortios 2026-05-17 22:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mm3epeyxsy2u...

Fedora 43 : chromium (2026-af3f470d38)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-af3f470d38 advisory. The updates include fixes for: Critical CVE-2026-7363: Use after free in Canvas Critical CVE-2026-7361: Use after free in iOS Critical CVE-2026-7344...

Fedora 44 : chromium (2026-f5ed344d5c)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f5ed344d5c advisory. The updates include fixes for: Critical CVE-2026-7363: Use after free in Canvas Critical CVE-2026-7361: Use after free in iOS Critical CVE-2026-7344...

Fedora 43 : chromium (2026-952f3c3d9e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-952f3c3d9e advisory. Update to 147.0.7727.55 Critical CVE-2026-5858: Heap buffer overflow in WebML Critical CVE-2026-5859: Integer overflow in WebML High CVE-2026-5860:...

PT-2026-4707

Name of the Vulnerable Software and Affected Versions ManagedServices affected versions not specified Description An issue exists in the setPackageOrComponentEnabled function of ManagedServices.java related to improper input validation. This can result in a notification policy desync, potentially...

PT-2026-4701

Name of the Vulnerable Software and Affected Versions versions prior to 2026-0021 Description A cross-user permission bypass exists due to a confused deputy condition in the hasInteractAcrossUsersFullPermission function within the AppInfoBase.java file. This could allow for local escalation of...

PT-2026-4693

Name of the Vulnerable Software and Affected Versions CompanionDeviceManagerService.java affected versions not specified Description A logic error in the onStart function of CompanionDeviceManagerService.java may allow for a confused deputy condition. This could result in local escalation of...

PT-2026-4698

Name of the Vulnerable Software and Affected Versions versions prior to the fixed version affected versions not specified Description A logic error in the code within BiometricService.java’s onChange function may allow enabling fingerprint unlock. This could result in local privilege escalation...

PT-2026-4689

In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

PT-2026-4715

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description An integer overflow exists in multiple functions within ubsan throwing runtime.cpp. This flaw allows a remote attacker to cause a system crash, resulting in a denial of service without...

PT-2026-4709

In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-4714

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description An integer overflow exists in multiple functions within ubsan throwing runtime.cpp. This issue can result in a persistent denial of service and may allow a local attacker to achieve escalatio...

PT-2026-4711

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description An integer overflow exists in multiple functions of ubsan throwing runtime.cpp. This issue allows a remote attacker to cause a crash, resulting in a denial of service without requiring...

PT-2026-4688

Name of the Vulnerable Software and Affected Versions versions prior to 2025-48645 Description An issue exists in the loadDescription function of DeviceAdminInfo.java related to improper input validation. This could allow for a persistent package, potentially leading to local escalation of...

PT-2026-4690

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A permissions bypass in the Framework component allows for the resetting of user-selected permission selections in multiple locations. This flaw enables a local escalation of privilege withou...

PT-2026-4684

Name of the Vulnerable Software and Affected Versions ComputerEngine affected versions not specified Description A logic error in several functions within ComputerEngine.java allows access to URIs across different users. This flaw enables local escalation of privilege without requiring additional...

PT-2026-4696

In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-4687

Name of the Vulnerable Software and Affected Versions versions prior to 2025 affected versions not specified Description A persistent denial of service may occur due to improper input validation. This can result in a local denial of service without requiring additional execution privileges or use...

PT-2026-4710

Name of the Vulnerable Software and Affected Versions GrapheneOS versions prior to 2026030200 Description An integer overflow in multiple functions within ubsan throwing runtime.cpp can lead to a persistent denial of service. This issue allows for remote denial of service without requiring...