Summary
Ein Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um beliebigen Programmcode auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren, einen Denial-of-Service-Zustand auszulösen oder Cross-Site-Scripting- und Spoofing-Angriffe durchzuführen.
Product
Chrome ist ein Internet-Browser von Google.
Vulnerabilities 32
-
Critical 9.6
Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code…
-
Critical 9.6
Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute ar…
-
Critical 9.6
Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering…
-
Critical 9.6
Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary cod…
-
Critical 9.6
Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering…
-
Critical 9.6
Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially…
-
High 8.8
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside…
-
High 8.8
Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code insid…
-
High 8.8
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside…
-
High 8.8
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside…
-
High 8.8
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside…
-
High 8.8
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside…
-
High 8.6
Improper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92 allowed a local attacker to…
-
High 8.3
Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the re…
-
High 8.3
Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromise…
-
High 7.5
Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who …
-
Medium 6.5
Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised…
-
Medium 6.5
Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the…
-
Medium 6.5
Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had comp…
-
Medium 6.1
Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin po…
-
Medium 5.4
UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI …
-
Medium 5.4
UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements…
-
Medium 4.7
Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read …
-
Medium 4.7
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read…
-
Medium 4.7
Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside th…
-
Medium 4.3
Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-orig…
-
Medium 4.3
Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to obtain…
-
Medium 4.3
UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoo…
-
Medium 4.3
Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin…
-
Low 3.4
Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had c…
-
Low 3.4
Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had…
-
Low 3.4
Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the…
Revision history
-
#9
Neue Updates von Oracle Linux aufgenommen
-
#8
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#7
Neue Updates von Red Hat aufgenommen
-
#6
Neue Updates von Red Hat aufgenommen
-
#5
Neue Updates von openSUSE aufgenommen
-
#4
Neue Updates von openSUSE aufgenommen
-
#3
Neue Updates von Debian und Fedora aufgenommen
-
#2
Neue Updates von Debian aufgenommen
-
#1
Initiale Fassung
References
-
Chrome Releases: Stable Channel Update for Desktop vom 2026-09-29
https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html
-
Debian Security Advisory DLA-4811 vom 2026-10-02
https://lists.debian.org/debian-lts-announce/2026/10/msg00003.html
-
Debian Security Advisory DSA-6535 vom 2026-10-02
https://security-tracker.debian.org/tracker/DSA-6535-1
-
Fedora Security Advisory FEDORA-2026-0DAEF29DC3 vom 2026-10-03
https://bodhi.fedoraproject.org/updates/FEDORA-2026-0daef29dc3
-
Fedora Security Advisory FEDORA-2026-35B989661C vom 2026-10-03
https://bodhi.fedoraproject.org/updates/FEDORA-2026-35b989661c
-
Fedora Security Advisory FEDORA-EPEL-2026-016A408698 vom 2026-10-03
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-016a408698
-
Fedora Security Advisory FEDORA-2026-CD4E714C4E vom 2026-10-03
https://bodhi.fedoraproject.org/updates/FEDORA-2026-cd4e714c4e
-
Fedora Security Advisory FEDORA-EPEL-2026-BF22FEE762 vom 2026-10-03
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-bf22fee762
-
Fedora Security Advisory FEDORA-EPEL-2026-C0BDA57B6D vom 2026-10-03
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-c0bda57b6d
-
Fedora Security Advisory FEDORA-EPEL-2026-D31D4891D1 vom 2026-10-03
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-d31d4891d1
-
openSUSE Security Update OPENSUSE-SU-2026:0344-1 vom 2026-10-05
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ODHTCMCUYHZ6Y7W6GSLFDGPVYHICBCLE/
-
openSUSE Security Update OPENSUSE-SU-2026:11956-1 vom 2026-10-07
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZKV4TORN3S355XS3HXQCUWHXDQ6FG5Z4/
-
Red Hat Security Advisory RHSA-2026:95194 vom 2026-11-04
https://access.redhat.com/errata/RHSA-2026:95194
-
Rocky Linux Security Advisory RLSA-2026:95194 vom 2026-11-05
https://errata.build.resf.org/RLSA-2026:95194
-
Red Hat Security Advisory RHSA-2026:96080 vom 2026-11-09
https://access.redhat.com/errata/RHSA-2026:96080
-
Rocky Linux Security Advisory RLSA-2026:96080 vom 2026-11-10
https://errata.build.resf.org/RLSA-2026:96080
-
Oracle Linux Security Advisory ELSA-2026-96080 vom 2026-11-11
https://linux.oracle.com/errata/ELSA-2026-96080.html