https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:21:18.026473+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:69098 ALSA-2026:69098 — Important: webkit2gtk3 security update 2026-10-03T15:21:18.138765+00:00

Affected: AlmaLinux:9: webkit2gtk3, AlmaLinux:9: webkit2gtk3-devel, AlmaLinux:9: webkit2gtk3-jsc, AlmaLinux:9: webkit2gtk3-jsc-devel

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154) * chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173) * chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161) * chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176) * chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984) * webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804) * webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713) * webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787) * webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757) * webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783) * webkitgtk: use-after-free of JSCValue f…

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1105 certfr-2026-avi-1105 — De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un pro… 2026-10-03T15:21:18.138939+00:00 certfr-2026-avi-1105 https://cve.radiocsirt.org/vuln/euvd-2026-362862 EUVD-2026-362862 2026-10-03T15:21:18.138970+00:00 EUVD-2026-362862 https://cve.radiocsirt.org/vuln/fkie_cve-2026-84359 fkie_cve-2026-84359 2026-10-03T15:21:18.138992+00:00

Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

 https://cve.radiocsirt.org/vuln/ghsa-5hrf-vhf5-vjmc GHSA-5hrf-vhf5-vjmc 2026-10-03T15:21:18.139027+00:00

Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-84359 msrc_CVE-2026-84359 — Chromium: CVE-2026-84359 Information leak in Skia 2026-10-03T15:21:18.139054+00:00 msrc_CVE-2026-84359 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11714-1 openSUSE-SU-2026:11714-1 — chromedriver-152.0.7977.82-1.1 on GA media 2026-10-03T15:21:18.139080+00:00

chromedriver-152.0.7977.82-1.1 on GA media

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3133 WID-SEC-W-2026-3133 — Google Chrome und Microsoft Edge: Mehrere Schwachstellen 2026-10-03T15:21:18.139132+00:00

Ein Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, sensible Informationen offenzulegen, Spoofing-Angriffe durchzuführen, Daten zu manipulieren oder Denial-of-Service-Zustände zu verursachen.