DEBIAN-CVE-2026-19176

Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-19160

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-17918

Use after free in Sync in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-17779

Inappropriate implementation in Site Isolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17836

Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17835

CVE-2026-17835: In Chrome for iOS, Google Chrome on iOS versions before 151.0.7922.72 are vulnerable to UI spoofing via a crafted HTML page. Affected: Chrome for iOS (iOS builds using Chromium). Root cause: Inappropriate implementation within Chrome for iOS leading to spoofed UI. Impact: potentia...

CVE-2026-17803

CVE-2026-17803 describes an insufficient validation of untrusted input in Chrome's Save to Drive component, enabling a sandbox escape when processing a crafted PDF. Affected software is Google Chrome/Chromium, with the vulnerability present in builds prior to 151.0.7922.72. Red Hat, Debian, OSV, ...

CVE-2026-17761

CVE-2026-17761 affects Chrome for iOS (Google Chrome on iOS) prior to 151.0.7922.72. Root cause: insufficient validation of untrusted input enabling UXSS via malicious network traffic. Impact: ability to inject arbitrary scripts/HTML. Status: fixed in Chrome 151.0.7922.72 (or later); remediation ...

CVE-2026-17729

Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17722

Object lifecycle issue in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

PT-2026-66037

Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

Mozilla Firefox和Mozilla Thunderbird 安全漏洞

Mozilla Firefox and Mozilla Thunderbird are both products of the American Mozilla Foundation. Mozilla Firefox is an open-source web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla Application Suite. This software supports IMAP and POP email...