CVE-2026-95288

An ui misrepresentation flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/533102653...

CVE-2026-102305

An ui misrepresentation flaw was found in the SignIn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=533021953 https://code.google.com/p/chromium/issues/detail?id=102305...

PT-2026-104387

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.97 Description An information leak exists in the Scalable Vector Graphics SVG component, which allows a remote attacker to obtain sensitive information by inducing a user to visit a specially crafted...

AlmaLinux 9.2 [TuxCare] Security Update: libxslt / libxslt-devel (ALMALINUX9.2:CLSA-2026:1776764746)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1776764746 advisory. - Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a...

chromium-browser: angle: ANGLE: Arbitrary code execution via type confusion in crafted HTML page

A flaw was found in ANGLE. A type confusion vulnerability in ANGLE, a graphics abstraction layer used in Google Chrome, allows a remote attacker to exploit the flaw. By crafting a malicious HTML page, the attacker can trigger this vulnerability. This could potentially lead to the execution of...

chromium-browser: skia: chromium-browser: skia: Arbitrary code execution via crafted HTML page

A flaw was found in Skia, a 2D graphics library. A remote attacker, who has already compromised the renderer process, could exploit a use-after-free vulnerability by providing a specially crafted HTML page. This could lead to the execution of arbitrary code within the sandbox environment,...

chromium-browser: angle: ANGLE: Information disclosure via uninitialized resource

A flaw was found in ANGLE, a component used by Google Chrome. A remote attacker could exploit an uninitialized resource vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to obtain sensitive cross-origin data, leading to information disclosure...

chromium-browser: angle: ANGLE: Arbitrary code execution in Google Chrome via crafted HTML page

A flaw was found in ANGLE, a graphics abstraction layer used in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code within the sandbox...

chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized resource in Skia

A flaw was found in Skia, a 2D graphics library used in Chromium. A remote attacker could exploit an uninitialized resource vulnerability by tricking a user into opening a specially crafted HTML page. This could potentially allow the attacker to read sensitive memory within the browser's sandbox,...

chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia

An inappropriate implementation flaw was found in Skia in Google Chrome. This issue may allow a remote attacker to compromise the renderer process to perform a sandbox escape via a crafted HTML page...

chromium-browser: angle: Out of bounds memory access in ANGLE

Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page

Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

chromium: skia: chromium: skia: Heap buffer overflow in Skia

Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

chromium: skia: chromium: skia: Heap buffer overflow in Skia

Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia

A flaw was found in the Skia component of Google Chrome. This issue may allow a remote attacker to exploit heap corruption via a crafted HTML page...

chromium-browser: skia: chromium-browser: skia: Use after free in Skia

Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability

A flaw was found in chromium-browser. An out-of-bounds write vulnerability exists within the ANGLE graphics component, allowing a remote attacker to trigger out-of-bounds memory access by providing a specially crafted HTML page. This allows an attacker to potentially manipulate memory contents. T...

chromium-browser: angle: ANGLE: Remote code execution via crafted HTML page

A flaw was found in ANGLE, a component used in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security...

chromium-browser: skia: chromium-browser: skia: Information leak via crafted HTML page in Google Chrome

A flaw was found in Skia, a 2D graphics library used in Google Chrome. A remote attacker, after compromising the renderer process, could exploit this vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially lead to the disclosure of sensitive informatio...

SUSE CVE-2026-102305

UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...