https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:01:53.388086+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:74084 ALSA-2026:74084 — Critical: webkit2gtk3 security update 2026-10-02T13:01:53.477910+00:00

Affected: AlmaLinux:8: webkit2gtk3, AlmaLinux:8: webkit2gtk3-devel, AlmaLinux:8: webkit2gtk3-jsc, AlmaLinux:8: webkit2gtk3-jsc-devel

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2023-4860) * chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2024-7532) * chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page (CVE-2024-7966) * chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8193) * chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8198) * chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8636) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome (CVE-2024-9123) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2025-0436) * chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2025-0444) * chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability (CVE-2025-8901) * chromium-browser: angle: Use after free in ANGLE (CVE-2025-9478) * chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2025-10502) * chromium-browser: angle: Use after free in ANGLE (CVE-2026-0908) * chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-3536) * chromium-browser: skia: chromium-browser…

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0945 certfr-2026-avi-0945 — De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un pro… 2026-10-02T13:01:53.478137+00:00 certfr-2026-avi-0945 https://cve.radiocsirt.org/vuln/euvd-2026-342856 EUVD-2026-342856 2026-10-02T13:01:53.478159+00:00 EUVD-2026-342856 https://cve.radiocsirt.org/vuln/fkie_cve-2026-17668 fkie_cve-2026-17668 2026-10-02T13:01:53.478172+00:00

Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

 https://cve.radiocsirt.org/vuln/ghsa-jmrw-c58m-5h7j GHSA-jmrw-c58m-5h7j 2026-10-02T13:01:53.478194+00:00

Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11434-1 openSUSE-SU-2026:11434-1 — chromedriver-151.0.7922.71-1.1 on GA media 2026-10-02T13:01:53.478225+00:00

chromedriver-151.0.7922.71-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:74084 RHSA-2026:74084 — Red Hat Security Advisory: webkit2gtk3 security update 2026-10-02T13:01:53.478566+00:00

chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia chromium-browser: angle: Out of bounds memory access in ANGLE chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page chromium: skia: chromium: skia: Heap buffer overflow in Skia chromium: skia: chromium: skia: Heap buffer overflow in Skia chromium: skia: chromium: skia: Heap buffer overflow in Skia chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia chromium-browser: skia: chromium-browser: skia: Use after free in Skia chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability chromium-browser: angle: Use after free in ANGLE chromium-browser: angle: Heap buffer overflow in ANGLE chromium-browser: angle: Use after free in ANGLE chromium-browser: angle: Integer overflow in ANGLE chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia chromium-browser: angle: Heap buffer overflow in ANGLE chromium-browser: angle: Integer overflow in ANGLE chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia chromium-browser: angle: Inte…

 https://cve.radiocsirt.org/vuln/rlsa-2026:69098 RLSA-2026:69098 — Important: webkit2gtk3 security update 2026-10-02T13:01:53.479390+00:00

Affected: Rocky Linux:9: webkit2gtk3

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154)

* chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173)

* chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161)

* chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)

* chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041)

* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)

* webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)

* webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)

* webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)

* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787)

* webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)

* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)

* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)

* webkitgtk: use-after-free of JSCValue function parameters…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2579 WID-SEC-W-2026-2579 — Google Chrome/Microsoft Edge: Mehrere Schwachstellen 2026-10-02T13:01:53.479523+00:00

Ein Angreifer kann mehrere Schwachstellen in Google Chrome/Microsoft Edge ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder einen Denial-of-Service-Zustand herbeizuführen.