Summary
Ein Angreifer kann mehrere Schwachstellen in Google Chrome / Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, erweiterte Berechtigungen zu erlangen, Daten zu manipulieren oder offenzulegen oder Denial-of-Service-Zustände herbeizuführen.
Product
Chrome ist ein Internet-Browser von Google.
Edge ist ein Interne-Browser von Microsoft.
Vulnerabilities 42
-
Critical 9.6
Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary…
-
Critical 9.6
Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outs…
-
Critical 9.6
Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outs…
-
Critical 9.6
Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code insi…
-
Critical 9.6
Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging socia…
-
Critical 9.6
Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially exe…
-
Critical 9.6
Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbi…
-
High 8.8
Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary …
-
High 8.8
Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbit…
-
High 8.8
Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary …
-
High 8.8
Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute ar…
-
High 8.8
Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitr…
-
High 8.8
Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary co…
-
High 8.8
Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code insid…
-
High 8.8CVE-2026-91737 Public exploit
Use after free in PDF in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code insid…
-
High 8.8
Type confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary c…
-
High 8.8
Use after free in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside…
-
High 8.3
Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compro…
-
High 8.3
Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the rende…
-
High 8.3
Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised…
-
High 8.3
Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised …
-
High 8.3
Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the render…
-
High 8.3
Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compro…
-
High 8.1
Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker…
-
High 7.4
Incorrect authorization in Core in Google Chrome on on Windows prior to 153.0.8010.47 allowed a local attacker to execu…
-
Medium 5.3
Observable discrepancy in Fonts in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social eng…
-
Medium 5.3
Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive infor…
-
Medium 5.3
Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who h…
-
Medium 5.1
Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obta…
-
Medium 4.8
Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging…
-
Medium 4.7
Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outsid…
-
Medium 4.7
Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read mem…
-
Medium 4.3
Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via…
-
Medium 4.3
Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin…
-
Medium 4.3
Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origi…
-
Medium 4.2
Missing authorization in Browser in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised …
-
Medium 4.2
Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements…
-
Medium 4.2
Missing authorization in Transactions Platform in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who ha…
-
Low 3.1
Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the ren…
-
Low 3.1
Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromise…
-
Low 3.1
Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromi…
-
Low 3.1
Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the render…
Revision history
-
#16
Neue Updates von Red Hat aufgenommen
-
#15
Neue Updates von Oracle Linux und Red Hat aufgenommen
-
#14
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#13
Neue Updates von Red Hat aufgenommen
-
#12
Neue Updates von Red Hat aufgenommen
-
#11
Neue Updates von Oracle Linux aufgenommen
-
#10
Neue Updates von Oracle Linux aufgenommen
-
#9
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#8
Neue Updates von Oracle Linux aufgenommen
-
#7
Neue Updates von Red Hat aufgenommen
-
#6
Neue Updates von IGEL aufgenommen
-
#5
Neue Updates von openSUSE aufgenommen
-
#4
Neue Updates von Fedora aufgenommen
-
#3
Neue Updates von Debian aufgenommen
-
#2
Edge Update aufgenommen
-
#1
Initiale Fassung
References
-
Google Chrome Stable Channel Update vom 2026-09-15
http://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html
-
Release notes for Microsoft Edge Security Updates vom 2026-09-17
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#september-17-2026
-
Debian Security Advisory DSA-6506 vom 2026-09-18
https://security-tracker.debian.org/tracker/DSA-6506-1
-
Debian Security Advisory DLA-4790 vom 2026-09-21
https://lists.debian.org/debian-lts-announce/2026/09/msg00025.html
-
Fedora Security Advisory FEDORA-2026-6EDC80DB3F vom 2026-09-22
https://bodhi.fedoraproject.org/updates/FEDORA-2026-6edc80db3f
-
Fedora Security Advisory FEDORA-EPEL-2026-EF33948ACE vom 2026-09-22
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-ef33948ace
-
Fedora Security Advisory FEDORA-EPEL-2026-DB43927AA0 vom 2026-09-22
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-db43927aa0
-
Fedora Security Advisory FEDORA-EPEL-2026-D8FDA74079 vom 2026-09-22
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-d8fda74079
-
Fedora Security Advisory FEDORA-EPEL-2026-3C8FF9535A vom 2026-09-22
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-3c8ff9535a
-
Fedora Security Advisory FEDORA-2026-F910229C11 vom 2026-09-22
https://bodhi.fedoraproject.org/updates/FEDORA-2026-f910229c11
-
Fedora Security Advisory FEDORA-2026-DD12C89E57 vom 2026-09-22
https://bodhi.fedoraproject.org/updates/FEDORA-2026-dd12c89e57
-
openSUSE Security Update OPENSUSE-SU-2026:21913-1 vom 2026-09-24
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HL7DH3ELLGWW3BQKZGCKCHV34WOK6GU4/
-
IGEL Security Notice ISN-2026-39 vom 2026-09-28
https://kb.igel.com/en/security-safety/current/isn-2026-39-critical-chromium-vulnerabilities
-
Red Hat Security Advisory RHSA-2026:84583 vom 2026-10-19
https://access.redhat.com/errata/RHSA-2026:84583
-
Oracle Linux Security Advisory ELSA-2026-84583 vom 2026-10-19
http://linux.oracle.com/errata/ELSA-2026-84583.html
-
Rocky Linux Security Advisory RLSA-2026:84584 vom 2026-10-20
https://errata.build.resf.org/RLSA-2026:84584
-
Oracle Linux Security Advisory ELSA-2026-84584 vom 2026-10-21
http://linux.oracle.com/errata/ELSA-2026-84584.html
-
Oracle Linux Security Advisory ELSA-2026-95194 vom 2026-11-04
https://linux.oracle.com/errata/ELSA-2026-95194.html
-
Rocky Linux Security Advisory RLSA-2026:95194 vom 2026-11-05
https://errata.build.resf.org/RLSA-2026:95194
-
Red Hat Security Advisory RHSA-2026:95520 vom 2026-11-05
https://access.redhat.com/errata/RHSA-2026:95520
-
Red Hat Security Advisory RHSA-2026:95589 vom 2026-11-05
https://access.redhat.com/errata/RHSA-2026:95589
-
Red Hat Security Advisory RHSA-2026:95590 vom 2026-11-05
https://access.redhat.com/errata/RHSA-2026:95590
-
Red Hat Security Advisory RHSA-2026:95516 vom 2026-11-05
https://access.redhat.com/errata/RHSA-2026:95516
-
Red Hat Security Advisory RHSA-2026:96080 vom 2026-11-09
https://access.redhat.com/errata/RHSA-2026:96080
-
Rocky Linux Security Advisory RLSA-2026:96080 vom 2026-11-10
https://errata.build.resf.org/RLSA-2026:96080
-
Oracle Linux Security Advisory ELSA-2026-96080 vom 2026-11-11
https://linux.oracle.com/errata/ELSA-2026-96080.html
-
Red Hat Security Advisory RHSA-2026:98781 vom 2026-11-11
https://access.redhat.com/errata/RHSA-2026:98781
-
Red Hat Security Advisory RHSA-2026:98455 vom 2026-11-11
https://access.redhat.com/errata/RHSA-2026:98455