Summary
Ein Angreifer kann mehrere Schwachstellen in Google Chrome/Microsoft Edge ausnutzen, um potenziell beliebigen Code auszuführen, Sicherheitsmechanismen zu umgehen, Daten offenzulegen und zu manipulieren sowie einen Denial-of-Service-Zustand zu verursachen.
Product
Chrome ist ein Internet-Browser von Google.
Edge ist ein Internet-Browser von Microsoft.
Vulnerabilities 30
-
Critical 9.6
Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandb…
-
High 8.8
Use after free in Views in Google Chrome on Mac prior to 147.0.7727.138 allowed a remote attacker to potentially exploi…
-
High 8.8
Use after free in media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code in…
-
High 8.8
Use after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code i…
-
High 8.8
Type Confusion in V8 in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code insid…
-
High 8.8
Heap buffer overflow in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploi…
-
High 8.8
Use after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code i…
-
High 8.8
Use after free in WebView in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker to execute arbi…
-
High 8.8
Use after free in Accessibility in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had c…
-
High 8.8
Use after free in Codecs in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code i…
-
High 8.8
Out of bounds read and write in Angle in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially…
-
High 8.8
Use after free in Media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code in…
-
High 8.8
Use after free in Navigation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary co…
-
High 8.8
Use after free in Animation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary cod…
-
High 8.8
Use after free in ANGLE in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the rend…
-
High 8.8
Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap co…
-
High 8.8
Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remote attacker to execu…
-
High 8.3
Insufficient validation of untrusted input in Feedback in Google Chrome prior to 147.0.7727.138 allowed a remote attack…
-
High 8.3
Use after free in WebMIDI in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the re…
-
High 8.3
Use after free in Media in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker who had compromis…
-
High 8.3
Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the…
-
High 8.1
Inappropriate implementation in Tint in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to perform out …
-
High 8.1
Use after free in Chromoting in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary co…
-
High 7.5
Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local network segment to pot…
-
High 7.5
Use after free in Views in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had compromis…
-
High 7.5
Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local network segment to exe…
-
High 7.5
Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the render…
-
Medium 4.3
Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker to perform an o…
-
Low 3.1
Race in MHTML in Google Chrome prior to 147.0.7727.138 allowed an attacker who convinced a user to install a malicious …
-
Low 3.1
Insufficient validation of untrusted input. in Compositing in Google Chrome prior to 147.0.7727.138 allowed a remote at…
Revision history
-
#5
Neue Updates von openSUSE aufgenommen
-
#4
Neue Updates von IGEL aufgenommen
-
#3
Neue Updates von openSUSE, Fedora und Debian aufgenommen, Microsoft Edge Aufgenommen
-
#2
Neue Updates von Fedora aufgenommen
-
#1
Initiale Fassung
References
-
Stable Channel Update for Desktop vom 2026-04-28
https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html
-
Fedora Security Advisory FEDORA-2026-36FB406407 vom 2026-04-30
https://bodhi.fedoraproject.org/updates/FEDORA-2026-36fb406407
-
Fedora Security Advisory FEDORA-2026-F5ED344D5C vom 2026-04-30
https://bodhi.fedoraproject.org/updates/FEDORA-2026-f5ed344d5c
-
Fedora Security Advisory FEDORA-2026-AF3F470D38 vom 2026-04-30
https://bodhi.fedoraproject.org/updates/FEDORA-2026-af3f470d38
-
openSUSE Security Update OPENSUSE-SU-2026:0161-1 vom 2026-05-01
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2Y4NWXB2GWQV7C77QK4NIOHVSKM5KJB4/
-
Fedora Security Advisory FEDORA-EPEL-2026-1A398E4F20 vom 2026-04-30
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-1a398e4f20
-
Debian Security Advisory DSA-6239 vom 2026-05-04
https://lists.debian.org/debian-security-announce/2026/msg00149.html
-
Fedora Security Advisory FEDORA-EPEL-2026-C2B734F274 vom 2026-04-30
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-c2b734f274
-
Fedora Security Advisory FEDORA-EPEL-2026-EAA2514539 vom 2026-04-30
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-eaa2514539
-
Fedora Security Advisory FEDORA-EPEL-2026-70912890F2 vom 2026-04-30
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-70912890f2
-
Release notes for Microsoft Edge Security Updates vom 2026-05-03
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#april-30-2026
-
IGEL Security Notice ISN-2026-17 vom 2026-05-04
https://kb.igel.com/en/security-safety/current/isn-2026-17-critical-chromium-vulnerability
-
openSUSE Security Update OPENSUSE-SU-2026:10689-1 vom 2026-05-07
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MKTLX2VVGFYDTE63CKYOYACEUYQIBKLG/