Linux Distros Unpatched Vulnerability : CVE-2026-87657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbo...

Google Chrome < 153.0.8010.36 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 153.0.8010.36. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop0808145027 advisory. - Incorrect authorization in Extensions in Google Chrome prior to...

Linux Distros Unpatched Vulnerability : CVE-2026-87489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-87536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-87491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

CVE-2026-87491: Out-of-bounds Write

Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87489: Improper Restriction of Operations within the Bounds of a Memory Buffer

Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-87536: Use After Free

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome < 153.0.8010.36 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 153.0.8010.36. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop0808145027 advisory. - Incorrect authorization in Extensions in Google Chrome prior to...

CVE-2026-87612: Access of Resource Using Incompatible Type

Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chromium V8 Out of Bounds Write Vulnerability

Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft...

Chromium: CVE-2026-84326 Uninitialized resource in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Stable Channel Update for ChromeOS / ChromeOS Flex

The Stable channel is being updated to OS version 16765.41.0 Browser version 152.0.7977.113 for most ChromeOS devices. If you find new issues, please let us know one of the following ways: 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community 2. Beta Specific:...

Fedora 43 : chromium (2026-c3be138e4c)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c3be138e4c advisory. Update to 152.0.7977.82 CVE-2026-85046: Type confusion in V8 CVE-2026-85052: Out of bounds read in CrashReporting CVE-2026-85043: Incomplete cleanup...

PT-2026-88757

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in V8 allows a remote attacker who has compromised the renderer process to read memory inside the sandbox by using a crafted HTML page. Use after free is a memory...

PT-2026-88712

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A type confusion issue exists in V8, the open-source JavaScript and WebAssembly engine. This allows a remote attacker to execute arbitrary code within the sandbox by inducing the user t...

PT-2026-88725

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in V8 allows a remote attacker to execute arbitrary code inside the sandbox. This is achieved by leveraging social engineering and a crafted Chrome extension. Use...

PT-2026-88589

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Memory corruption in V8, the open-source JavaScript and WebAssembly engine, allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted Chrome...

PT-2026-88701

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A race condition in V8, the open-source JavaScript and WebAssembly engine, allows a remote attacker to execute arbitrary code within the sandbox by inducing the victim to open a special...

PT-2026-88636

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in V8 allows a remote attacker to execute arbitrary code inside the sandbox by using a crafted HTML page. Use after free is a memory corruption flaw that occurs...