Summary
Ein Angreifer kann mehrere Schwachstellen in Google Chrome / Microsoft Edge ausnutzen, um potenziell beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Server-Side Request Forgery (SSRF) durchzuführen, sensible Informationen offenzulegen, Daten zu manipulieren, Denial-of-Service-Zustände zu verursachen oder Spoofing-Angriffe zu starten.
Product
Chrome ist ein Internet-Browser von Google.
Edge ist ein Internet-Browser von Microsoft.
Vulnerabilities 16
-
Critical 9.6
Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arb…
-
Critical 9.6
Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary cod…
-
Critical 9.6
Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially e…
-
High 8.8
Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to…
-
High 8.8
Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging so…
-
High 8.8
Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code in…
-
High 8.1
Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacke…
-
Medium 6.5
Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive informa…
-
Medium 6.3
Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social e…
-
Medium 5.4
UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging soc…
-
Medium 4.3
Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolati…
-
Medium 4.3
Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin …
-
Medium 4.3
Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-ori…
-
Low 3.7
Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker …
-
Low 3.1
Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised …
-
Low 3.1
Race condition in FileSystem in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the …
Revision history
-
#8
Neue Updates von Oracle Linux aufgenommen
-
#7
Neue Updates von Red Hat aufgenommen
-
#6
Neue Updates von Red Hat und Oracle Linux aufgenommen
-
#5
Neue Updates von IGEL aufgenommen
-
#4
Neue Updates von openSUSE aufgenommen
-
#3
Neue Updates von Microsoft, Fedora und openSUSE aufgenommen
-
#2
Neue Updates von Debian aufgenommen
-
#1
Initiale Fassung
References
-
Google Chrome Stable Channel Update vom 2026-09-17
http://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0194356994.html
-
Debian Security Advisory DLA-4790 vom 2026-09-21
https://lists.debian.org/debian-lts-announce/2026/09/msg00025.html
-
Debian Security Advisory DSA-6508 vom 2026-09-20
https://security-tracker.debian.org/tracker/DSA-6508-1
-
Fedora Security Advisory FEDORA-EPEL-2026-DB43927AA0 vom 2026-09-22
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-db43927aa0
-
Fedora Security Advisory FEDORA-2026-6EDC80DB3F vom 2026-09-22
https://bodhi.fedoraproject.org/updates/FEDORA-2026-6edc80db3f
-
Fedora Security Advisory FEDORA-2026-DD12C89E57 vom 2026-09-22
https://bodhi.fedoraproject.org/updates/FEDORA-2026-dd12c89e57
-
Fedora Security Advisory FEDORA-EPEL-2026-EF33948ACE vom 2026-09-22
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-ef33948ace
-
Fedora Security Advisory FEDORA-2026-F910229C11 vom 2026-09-22
https://bodhi.fedoraproject.org/updates/FEDORA-2026-f910229c11
-
Fedora Security Advisory FEDORA-EPEL-2026-D8FDA74079 vom 2026-09-22
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-d8fda74079
-
openSUSE Security Update OPENSUSE-SU-2026:0342-1 vom 2026-09-21
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NRNPK2PSADEIPB3TBJSOHABUG2XADSHD/
-
Fedora Security Advisory FEDORA-EPEL-2026-3C8FF9535A vom 2026-09-22
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-3c8ff9535a
-
Release notes for Microsoft Edge Security Updates vom 2026-09-21
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#september-21-2026
-
openSUSE Security Update OPENSUSE-SU-2026:21921-1 vom 2026-09-24
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SYLHDFETON5PATUGVBRZWG2RNSGHB726/
-
IGEL Security Notice ISN-2026-39 vom 2026-09-28
https://kb.igel.com/en/security-safety/current/isn-2026-39-critical-chromium-vulnerabilities
-
Red Hat Security Advisory RHSA-2026:95194 vom 2026-11-04
https://access.redhat.com/errata/RHSA-2026:95194
-
Oracle Linux Security Advisory ELSA-2026-95194 vom 2026-11-04
https://linux.oracle.com/errata/ELSA-2026-95194.html
-
Rocky Linux Security Advisory RLSA-2026:95194 vom 2026-11-05
https://errata.build.resf.org/RLSA-2026:95194
-
Red Hat Security Advisory RHSA-2026:96080 vom 2026-11-09
https://access.redhat.com/errata/RHSA-2026:96080
-
Oracle Linux Security Advisory ELSA-2026-96080 vom 2026-11-11
https://linux.oracle.com/errata/ELSA-2026-96080.html