Summary
Ein Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, sensible Informationen offenzulegen, Spoofing-Angriffe durchzuführen, Daten zu manipulieren oder Denial-of-Service-Zustände zu verursachen.
Product
Chrome ist ein Internet-Browser von Google.
Vulnerabilities 26
-
Critical 9.8
Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging …
-
Critical 9.6
Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbit…
-
Critical 9.6
Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbi…
-
Critical 9.6
Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker lev…
-
Critical 9.6
Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging soci…
-
Critical 9.0
Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code out…
-
High 8.8
Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary cod…
-
High 8.8
Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code in…
-
High 8.8
Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineer…
-
High 8.3
Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromis…
-
High 8.3
Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the ren…
-
High 8.3
Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromi…
-
High 8.1
Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to…
-
Medium 6.5
Incorrect authorization in Autofill in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker lev…
-
Medium 6.5
Incorrect authorization in SiteSettings in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to bypass sys…
-
Medium 6.5
Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak …
-
Medium 6.5
Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging socia…
-
Medium 5.4
UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to s…
-
Medium 5.3
Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromis…
-
Medium 5.3
Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker w…
-
Medium 4.3
UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address b…
-
Medium 4.2
Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had co…
-
Low 3.1
Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromis…
-
Low 3.1
Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised …
-
Low 3.1
Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had comprom…
-
Low 3.1
Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the rend…
Revision history
-
#10
Neue Updates von Oracle Linux aufgenommen
-
#9
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#8
Neue Updates von Red Hat aufgenommen
-
#7
Neue Updates von Microsoft aufgenommen
-
#6
Neue Updates von IGEL aufgenommen
-
#5
Neue Updates von openSUSE aufgenommen
-
#4
Neue Updates von openSUSE aufgenommen
-
#3
Neue Updates von openSUSE aufgenommen
-
#2
Neue Updates von Fedora und Debian aufgenommen
-
#1
Initiale Fassung
References
-
Google Chrome Stable Channel Update vom 2026-09-01
http://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop.html
-
Fedora Security Advisory FEDORA-2026-865FDC3E81 vom 2026-09-04
https://bodhi.fedoraproject.org/updates/FEDORA-2026-865fdc3e81
-
Fedora Security Advisory FEDORA-2026-D805461E31 vom 2026-09-04
https://bodhi.fedoraproject.org/updates/FEDORA-2026-d805461e31
-
Fedora Security Advisory FEDORA-EPEL-2026-8B1140C82B vom 2026-09-04
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-8b1140c82b
-
Fedora Security Advisory FEDORA-2026-EE60D45695 vom 2026-09-04
https://bodhi.fedoraproject.org/updates/FEDORA-2026-ee60d45695
-
Fedora Security Advisory FEDORA-EPEL-2026-75F4754AD0 vom 2026-09-04
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-75f4754ad0
-
Fedora Security Advisory FEDORA-EPEL-2026-D2AB47EA82 vom 2026-09-04
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-d2ab47ea82
-
Fedora Security Advisory FEDORA-EPEL-2026-8B6C578BD3 vom 2026-09-04
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-8b6c578bd3
-
Debian Security Advisory DSA-6482 vom 2026-09-03
https://security-tracker.debian.org/tracker/DSA-6482-1
-
Debian Security Advisory DLA-4771 vom 2026-09-04
https://lists.debian.org/debian-lts-announce/2026/09/msg00006.html
-
openSUSE Security Update OPENSUSE-SU-2026:21799-1 vom 2026-09-08
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UQP5HVLY4PUUFGBVLCQPQA74U4O25ZFV/
-
Release notes for Microsoft Edge Security Updates vom 2026-09-08
https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security
-
openSUSE Security Update OPENSUSE-SU-2026:11714-1 vom 2026-09-10
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TUQTYVRXSBRZZZL3SBT3CQ4RG5YYT4N/
-
openSUSE Security Update OPENSUSE-SU-2026:0319-1 vom 2026-09-11
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4KJJLBGXPX5JW6ZS3CYGOYSZRBVGDAGO/
-
IGEL Security Notice ISN-2026-36 vom 2026-09-14
https://kb.igel.com/en/security-safety/current/isn-2026-36-chromium-issue-exploited-in-the-wild
-
Release notes for Microsoft Edge Security Updates vom 2026-09-20
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#september-18-2026
-
Red Hat Security Advisory RHSA-2026:96080 vom 2026-11-09
https://access.redhat.com/errata/RHSA-2026:96080
-
Rocky Linux Security Advisory RLSA-2026:96080 vom 2026-11-10
https://errata.build.resf.org/RLSA-2026:96080
-
Oracle Linux Security Advisory ELSA-2026-96080 vom 2026-11-11
https://linux.oracle.com/errata/ELSA-2026-96080.html