Summary
Ein Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen, potenziell beliebigen Code auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen und zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.
Product
Chrome ist ein Internet-Browser von Google.
Vulnerabilities 52
-
Critical 9.6
Type confusion in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code …
-
Critical 9.6CVE-2026-118306 Public exploit
Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary cod…
-
Critical 9.6
Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code insid…
-
Critical 9.6
Incorrect reference resolution in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker le…
-
Critical 9.6
Use after free in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially …
-
Critical 9.6
Observable discrepancy in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially obtain…
-
Critical 9.6
Use after free in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside…
-
Critical 9.6
Use after free in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker who had compromi…
-
Critical 9.6
Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker who had compromised the…
-
Critical 9.6
Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data …
-
Critical 9.6
Use after free in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code i…
-
Critical 9.6
Use after free in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code i…
-
High 8.8
Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code insid…
-
High 8.8
Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code ins…
-
High 8.8
Use after free in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitr…
-
High 8.8
Out of bounds write in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary cod…
-
High 8.8
Incorrect reference resolution in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a local attacker lev…
-
High 8.8
Type confusion in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrar…
-
High 8.8
Use after free in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code insi…
-
High 8.8
Race condition in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary…
-
High 8.8
Incorrect authorization in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social en…
-
High 8.8
Out of bounds read in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory inside th…
-
High 8.8
Uninitialized resource in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to read mem…
-
High 8.8
Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker leveraging so…
-
High 8.8
Use after free in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code o…
-
High 8.8
Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary c…
-
High 8.8
Out of bounds write in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker who had comp…
-
High 8.8
Race condition in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arb…
-
High 8.8
Observable discrepancy in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-o…
-
High 8.8
Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code…
-
High 8.8
Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary…
-
High 8.8
Use after free in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engin…
-
High 8.8
Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code in…
-
High 8.8
Buffer overflow in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code i…
-
High 8.8
Out of bounds read in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker who had compromised…
-
High 8.8
Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute a…
-
High 8.8
Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbit…
-
High 8.8
Use after free in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineer…
-
High 8.8
Type confusion in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code …
-
High 8.8
Use after free in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outs…
-
High 8.8
Use after free in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code out…
-
High 8.8
Missing authorization in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin…
-
High 8.8
Uninitialized resource in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin…
-
High 8.8
Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrar…
-
High 8.8
Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary cod…
-
High 8.8
Use after free in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code …
-
High 8.8
Use after free in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside…
-
Medium 5.4
Buffer overflow in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code in…
-
Medium 5.4
Use after free in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code ins…
-
Medium 4.3
Buffer overflow in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code insid…
-
Medium 4.3
Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbit…
-
Medium 4.3
Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory outsid…
Revision history
-
#9
Neue Updates von Red Hat aufgenommen
-
#8
Neue Updates von Oracle Linux aufgenommen
-
#7
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#6
Neue Updates von Red Hat aufgenommen
-
#5
Neue Updates von Oracle Linux und Red Hat aufgenommen
-
#4
Neue Updates von Debian und openSUSE aufgenommen
-
#3
Neue Updates von Fedora aufgenommen
-
#2
Neue Updates von Debian aufgenommen
-
#1
Initiale Fassung
References
-
Google Chrome Stable Channel Update vom 2026-10-27
https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_0562499947.html
-
Debian Security Advisory DSA-6592 vom 2026-10-29
https://security-tracker.debian.org/tracker/DSA-6592-1
-
Fedora Security Advisory FEDORA-2026-5A48E58A5E vom 2026-10-30
https://bodhi.fedoraproject.org/updates/FEDORA-2026-5a48e58a5e
-
Fedora Security Advisory FEDORA-EPEL-2026-9A22F72D1B vom 2026-10-30
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-9a22f72d1b
-
Fedora Security Advisory FEDORA-EPEL-2026-DE6D210AF4 vom 2026-10-30
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-de6d210af4
-
Fedora Security Advisory FEDORA-2026-9418AF6472 vom 2026-10-30
https://bodhi.fedoraproject.org/updates/FEDORA-2026-9418af6472
-
Fedora Security Advisory FEDORA-2026-9D6FC6BE6C vom 2026-10-30
https://bodhi.fedoraproject.org/updates/FEDORA-2026-9d6fc6be6c
-
Fedora Security Advisory FEDORA-EPEL-2026-523EC537C6 vom 2026-10-30
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-523ec537c6
-
Debian Security Advisory DLA-4878 vom 2026-11-02
https://lists.debian.org/debian-lts-announce/2026/11/msg00002.html
-
openSUSE Security Update OPENSUSE-SU-2026:22202-1 vom 2026-10-31
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/X364GRR2M6EOGU23OETWSCMXOQ75ZTWZ/
-
openSUSE Security Update OPENSUSE-SU-2026:0362-1 vom 2026-10-30
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/57ATHC2X27EJ34PUALQCYQQ577D2MS7V/
-
Oracle Linux Security Advisory ELSA-2026-95194 vom 2026-11-04
https://linux.oracle.com/errata/ELSA-2026-95194.html
-
Red Hat Security Advisory RHSA-2026:95194 vom 2026-11-04
https://access.redhat.com/errata/RHSA-2026:95194
-
Rocky Linux Security Advisory RLSA-2026:95194 vom 2026-11-05
https://errata.build.resf.org/RLSA-2026:95194
-
Red Hat Security Advisory RHSA-2026:96080 vom 2026-11-09
https://access.redhat.com/errata/RHSA-2026:96080
-
Rocky Linux Security Advisory RLSA-2026:96080 vom 2026-11-10
https://errata.build.resf.org/RLSA-2026:96080
-
Oracle Linux Security Advisory ELSA-2026-96080 vom 2026-11-11
https://linux.oracle.com/errata/ELSA-2026-96080.html
-
Red Hat Security Advisory RHSA-2026:98455 vom 2026-11-11
https://access.redhat.com/errata/RHSA-2026:98455