DEBIAN-CVE-2026-17978

Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17978

Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17978

A side-channel information leakage exists in the WebCodecs component of Google Chrome prior to version 151.0.7922.72 . A remote attacker can exploit this by using a crafted HTML page to obtain potentially sensitive information from process memory. The vulnerability has been addressed in the updat...

CVE-2026-17978

Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17978

Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17978

Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17978

Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-50904

Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

Linux Distros Unpatched Vulnerability : CVE-2026-17978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from...

CVE-2026-17978: Improper Protection of Physical Side Channels

Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

PT-2026-66297

Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Before version 148.0.7778.96, using WebCodecs in Google Chrome allowed a remote attacker to perform an out-of-bounds memory read through a crafted video file. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in WebCodecs in Google Chrome prior to version 148.0.7778.216 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...

ROS-20260721-73-0036

The vulnerability of the WebCodecs interface in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260720-73-0067

The vulnerability of the WebCodecs component in the Google Chrome web browser relates to reading data beyond the permitted range of memory. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information through a specially created HTML page...

MiracleLinux 9 : thunderbird-140.11.0-1.el9_8.ML.1 (AXSA:2026-1278:16)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1278:16 advisory. firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component CVE-2026-8388 firefox: Other issue in the JavaScript Engine component...

ROS-20260716-73-0049

The vulnerability of Google Chrome’s WebCodecs component relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

ROS-20260716-73-0033

The vulnerability of Google Chrome’s WebCodecs interface is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created HTML page...

ROS-20260715-73-0028

The vulnerability of Google Chrome’s WebCodecs interface is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information by sending a specially crafted HTML page...

WebCodecs API DoS

The vulnerability in the WebCodecs API interface of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the use of uninitialized variables. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...