Summary
Ein Angreifer kann mehrere Schwachstellen in Google Chrome / Microsoft Edge ausnutzen, um möglicherweise beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren, Spoofing-Angriffe durchzuführen oder Denial-of-Service-Zustände herbeizuführen.
Product
Chrome ist ein Internet-Browser von Google.
Edge ist ein Internet-Browser von Microsoft.
Vulnerabilities 108
-
Critical 9.6
Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitr…
-
Critical 9.6
Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arb…
-
Critical 9.6
Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially …
-
Critical 9.6
Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arb…
-
Critical 9.6
Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outsi…
-
Critical 9.6
Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code …
-
Critical 9.6
Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social en…
-
Critical 9.6
Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute a…
-
Critical 9.6
Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbit…
-
Critical 9.6
Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitr…
-
Critical 9.6
Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potenti…
-
Critical 9.6
Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute a…
-
Critical 9.6
Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary …
-
Critical 9.6
Use after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker to execute arbitr…
-
Critical 9.6
Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially…
-
Critical 9.6
Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arb…
-
Critical 9.6
Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engi…
-
Critical 9.6
Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potential…
-
High 8.8
Use after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code …
-
High 8.8
Type confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code …
-
High 8.8
Out of bounds write in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code i…
-
High 8.8
Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside…
-
High 8.8
Use after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code in…
-
High 8.8
Use after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code …
-
High 8.8
Use after free in Actor in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code ins…
-
High 8.8
Use after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code …
-
High 8.8
Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging soc…
-
High 8.8
Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute ar…
-
High 8.8
Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially ex…
-
High 8.8
Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineer…
-
High 8.8
Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to…
-
High 8.4
Missing authorization in WakeLock in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised…
-
High 8.4
Missing authorization in WebView in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who ha…
-
High 8.4
Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social eng…
-
High 8.3
Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromi…
-
High 8.3
Improper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromis…
-
High 8.3
Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the re…
-
High 8.3
Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had comp…
-
High 8.3
Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had …
-
High 8.3
Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the rendere…
-
High 8.3
Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromi…
-
High 8.3
Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the r…
-
High 8.3
Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the rende…
-
High 8.3
Use after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the re…
-
High 8.3
Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who h…
-
High 8.3
Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the …
-
High 8.3
Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had comprom…
-
High 8.1
Missing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromis…
-
High 8.1
Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised th…
-
High 8.1
Use after free in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code o…
-
High 8.0
Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineer…
-
High 8.0
Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker levera…
-
High 7.8
Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbit…
-
High 7.8
Use after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrar…
-
High 7.5
Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside…
-
Medium 6.5
Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypa…
-
Medium 6.5
Missing authorization in Contextual Tasks in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass w…
-
Medium 6.5
Incomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social eng…
-
Medium 6.5
Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to leak sensitive info…
-
Medium 6.5
Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker leveraging soc…
-
Medium 6.5
Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass syst…
-
Medium 6.5
Information leak in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging …
-
Medium 6.5
Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised …
-
Medium 6.5
Incorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web orig…
-
Medium 6.5
Improper input validation in Auth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised…
-
Medium 6.5
Inappropriate implementation in PlatformIntegration in Google Chrome on on Windows prior to 154.0.8037.57 allowed a rem…
-
Medium 6.3
Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had comprom…
-
Medium 5.4
UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoo…
-
Medium 5.4
Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromis…
-
Medium 5.4
UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI …
-
Medium 5.4
Missing authorization in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the …
-
Medium 5.4
UI misrepresentation in SecurityIndicators in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker …
-
Medium 5.4
UI misrepresentation in Browser in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social eng…
-
Medium 5.4
UI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging soc…
-
Medium 5.4
UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI …
-
Medium 5.4
Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromis…
-
Medium 5.4
UI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spo…
-
Medium 5.4
UI misrepresentation in Chromium in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker leveraging…
-
Medium 5.4
UI misrepresentation in Messages in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker levera…
-
Medium 5.4
Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social…
-
Medium 5.4
UI misrepresentation in FileSystem in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social …
-
Medium 5.4
Improper input validation in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI el…
-
Medium 5.4
Inappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system …
-
Medium 5.4
Missing authorization in Views in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker who had comp…
-
Medium 5.3
Race condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineeri…
-
Medium 5.3
Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised …
-
Medium 5.3
Race condition in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentiall…
-
Medium 4.8
Incorrect authorization in Safebrowsing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass sys…
-
Medium 4.8
Missing authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social e…
-
Medium 4.8
UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social …
-
Medium 4.8
UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elemen…
-
Medium 4.7
Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to read memory outside …
-
Medium 4.7
Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker t…
-
Medium 4.6
Information leak in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a local attacker to leak sensitive…
-
Medium 4.4
Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to byp…
-
Medium 4.3
Incorrect authorization in Scroll in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social e…
-
Medium 4.3
Missing authorization in Core in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker leveraging so…
-
Medium 4.3
Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveragin…
-
Medium 4.3
Missing authorization in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin poli…
-
Medium 4.3
Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social enginee…
-
Medium 4.3
Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social…
-
Low 3.4
Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the r…
-
Low 3.4
Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the…
-
Low 3.4
Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had c…
-
Low 3.1
Information leak in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the…
-
Low 3.1
Incorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging so…
-
Low 2.9
Incorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to ob…
-
Low 2.9
Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially r…
Revision history
-
#9
Neue Updates von Oracle Linux aufgenommen
-
#8
Neue Updates von Red Hat aufgenommen
-
#7
Neue Updates von IGEL aufgenommen
-
#6
Neue Updates von openSUSE aufgenommen
-
#5
Neue Updates von openSUSE aufgenommen
-
#4
Referenz(en) aufgenommen: EUVD-2026-89218, EUVD-2026-89216, EUVD-2026-89215, EUVD-2026-89214, EUVD-2026-89213, EUVD-2026-89212, EUVD-2026-89211, EUVD-2026-89170, EUVD-2026-89168, EUVD-2026-89165, EUVD-2026-89166, EUVD-2026-89164, EUVD-2026-89163, EUVD-2026-89162, EUVD-2026-89160, EUVD-2026-89161, EUVD-2026-89159, EUVD-2026-89154, EUVD-2026-89156, EUVD-2026-89153, EUVD-2026-89152, EUVD-2026-89151, EUVD-2026-89149, EUVD-2026-89148, EUVD-2026-89147, EUVD-2026-89146, EUVD-2026-89144, EUVD-2026-89143, EUVD-2026-89142, EUVD-2026-89141, EUVD-2026-89140, EUVD-2026-89139, EUVD-2026-89138, EUVD-2026-89137, EUVD-2026-89136, EUVD-2026-89134, EUVD-2026-89133, EUVD-2026-89132, EUVD-2026-89131, EUVD-2026-89129, EUVD-2026-89126, EUVD-2026-89125, EUVD-2026-89124, EUVD-2026-89123, EUVD-2026-89263, EUVD-2026-89119, EUVD-2026-89118, EUVD-2026-89117, EUVD-2026-89116, EUVD-2026-89262, EUVD-2026-89261, EUVD-2026-89260, EUVD-2026-89259, EUVD-2026-89257, EUVD-2026-89256, EUVD-2026-89255, EUVD-2026-89254, EUVD-2026-89253, EUVD-2026-89252, EUVD-2026-89251, EUVD-2026-89248, EUVD-2026-89247, EUVD-2026-89244, EUVD-2026-89243, EUVD-2026-89242, EUVD-2026-89241, EUVD-2026-89240, EUVD-2026-89239, EUVD-2026-89238, EUVD-2026-89237, EUVD-2026-89234, EUVD-2026-89232, EUVD-2026-89230, EUVD-2026-89229, EUVD-2026-89228, EUVD-2026-89226, EUVD-2026-89225, EUVD-2026-89223, EUVD-2026-89222, EUVD-2026-89221, EUVD-2026-89236, EUVD-2026-89235, EUVD-2026-89231, EUVD-2026-89227, EUVD-2026-89224, EUVD-2026-89250, EUVD-2026-89246, EUVD-2026-89158, EUVD-2026-89157, EUVD-2026-89233, EUVD-2026-89169, EUVD-2026-89150, EUVD-2026-89128, EUVD-2026-89127, EUVD-2026-89122, EUVD-2026-89249, EUVD-2026-89130, EUVD-2026-89120, EUVD-2026-89217, EUVD-2026-89245, EUVD-2026-89155, EUVD-2026-89167, EUVD-2026-89220, EUVD-2026-89219, EUVD-2026-89135, EUVD-2026-89258, EUVD-2026-89145, EUVD-2026-89121
-
#3
Neue Updates von Debian aufgenommen
-
#2
Edge Update aufgenommen
-
#1
Initiale Fassung
References
-
Google Chrome Stable Channel Update vom 2026-09-22
https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html
-
Release notes for Microsoft Edge Security Updates vom 2026-09-24
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#september-24-2026
-
Fedora Security Advisory FEDORA-2026-1E015B5959 vom 2026-09-25
https://bodhi.fedoraproject.org/updates/FEDORA-2026-1e015b5959
-
Fedora Security Advisory FEDORA-2026-735231F9E0 vom 2026-09-25
https://bodhi.fedoraproject.org/updates/FEDORA-2026-735231f9e0
-
Fedora Security Advisory FEDORA-2026-8729B61CD3 vom 2026-09-25
https://bodhi.fedoraproject.org/updates/FEDORA-2026-8729b61cd3
-
Fedora Security Advisory FEDORA-EPEL-2026-0004B04067 vom 2026-09-25
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-0004b04067
-
Fedora Security Advisory FEDORA-EPEL-2026-130A6951ED vom 2026-09-25
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-130a6951ed
-
Fedora Security Advisory FEDORA-EPEL-2026-355D0A235D vom 2026-09-25
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-355d0a235d
-
Debian Security Advisory DSA-6513 vom 2026-09-28
https://security-tracker.debian.org/tracker/DSA-6513-1
-
Fedora Security Advisory FEDORA-EPEL-2026-C4D340D432 vom 2026-09-28
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-c4d340d432
-
openSUSE Security Update OPENSUSE-SU-2026:11888-1 vom 2026-09-30
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6YAAAYPEEDCVBMJNQGAR7X3F7IZGJL7K/
-
openSUSE Security Update OPENSUSE-SU-2026:0343-1 vom 2026-10-01
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D22AO23TNBK3ODOQMNRG6QKYVU2OEBQI/
-
openSUSE Security Update OPENSUSE-SU-2026:21987-1 vom 2026-10-01
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FGC3M4PSOPTQTRA4RQCAMIRDUFK7QHY3/
-
IGEL Security Notice ISN-2026-41 vom 2026-10-05
https://kb.igel.com/en/security-safety/current/isn-2026-41-critical-chromium-vulnerabilities
-
Red Hat Security Advisory RHSA-2026:91636 vom 2026-10-28
https://access.redhat.com/errata/RHSA-2026:91636
-
Red Hat Security Advisory RHSA-2026:91580 vom 2026-10-28
https://access.redhat.com/errata/RHSA-2026:91580
-
Oracle Linux Security Advisory ELSA-2026-91636 vom 2026-10-30
http://linux.oracle.com/errata/ELSA-2026-91636.html
-
Oracle Linux Security Advisory ELSA-2026-91580 vom 2026-10-30
http://linux.oracle.com/errata/ELSA-2026-91580.html
-
Rocky Linux Security Advisory RLSA-2026:91580 vom 2026-10-30
https://errata.build.resf.org/RLSA-2026:91580