https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:08:04.465762+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:74084 ALSA-2026:74084 — Critical: webkit2gtk3 security update 2026-10-02T19:08:04.593259+00:00

Affected: AlmaLinux:8: webkit2gtk3, AlmaLinux:8: webkit2gtk3-devel, AlmaLinux:8: webkit2gtk3-jsc, AlmaLinux:8: webkit2gtk3-jsc-devel

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia (CVE-2023-4860) * chromium-browser: angle: Out of bounds memory access in ANGLE (CVE-2024-7532) * chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page (CVE-2024-7966) * chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8193) * chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8198) * chromium: skia: chromium: skia: Heap buffer overflow in Skia (CVE-2024-8636) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome (CVE-2024-9123) * chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia (CVE-2025-0436) * chromium-browser: skia: chromium-browser: skia: Use after free in Skia (CVE-2025-0444) * chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability (CVE-2025-8901) * chromium-browser: angle: Use after free in ANGLE (CVE-2025-9478) * chromium-browser: angle: Heap buffer overflow in ANGLE (CVE-2025-10502) * chromium-browser: angle: Use after free in ANGLE (CVE-2026-0908) * chromium-browser: angle: Integer overflow in ANGLE (CVE-2026-3536) * chromium-browser: skia: chromium-browser…

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0574 certfr-2026-avi-0574 — De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un pro… 2026-10-02T19:08:04.593438+00:00 certfr-2026-avi-0574 https://cve.radiocsirt.org/vuln/cnvd-2026-22169 cnvd-2026-22169 2026-10-02T19:08:04.593461+00:00 cnvd-2026-22169 https://cve.radiocsirt.org/vuln/euvd-2026-318671 EUVD-2026-318671 2026-10-02T19:08:04.593474+00:00 EUVD-2026-318671 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8567 fkie_cve-2026-8567 2026-10-02T19:08:04.593485+00:00

Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Medium)

 https://cve.radiocsirt.org/vuln/ghsa-j5qm-c5w8-5g85 GHSA-j5qm-c5w8-5g85 2026-10-02T19:08:04.593507+00:00

Integer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Medium)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10786-1 openSUSE-SU-2026:10786-1 — chromedriver-148.0.7778.167-2.1 on GA media 2026-10-02T19:08:04.593522+00:00

chromedriver-148.0.7778.167-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:74084 RHSA-2026:74084 — Red Hat Security Advisory: webkit2gtk3 security update 2026-10-02T19:08:04.593601+00:00

chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia chromium-browser: angle: Out of bounds memory access in ANGLE chromium-browser: skia: chromium-browser: skia: Out of bounds memory access in Skia in Google Chrome allows a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page chromium: skia: chromium: skia: Heap buffer overflow in Skia chromium: skia: chromium: skia: Heap buffer overflow in Skia chromium: skia: chromium: skia: Heap buffer overflow in Skia chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia in Google Chrome chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia chromium-browser: skia: chromium-browser: skia: Use after free in Skia chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability chromium-browser: angle: Use after free in ANGLE chromium-browser: angle: Heap buffer overflow in ANGLE chromium-browser: angle: Use after free in ANGLE chromium-browser: angle: Integer overflow in ANGLE chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia chromium-browser: skia: chromium-browser: skia: Heap buffer overflow in Skia chromium-browser: angle: Heap buffer overflow in ANGLE chromium-browser: angle: Integer overflow in ANGLE chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia chromium-browser: angle: Inte…

 https://cve.radiocsirt.org/vuln/rlsa-2026:69098 RLSA-2026:69098 — Important: webkit2gtk3 security update 2026-10-02T19:08:04.594064+00:00

Affected: Rocky Linux:9: webkit2gtk3

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page (CVE-2026-19154)

* chromium-browser: skia: Skia: Sandbox escape via out-of-bounds write in Chromium (CVE-2026-19173)

* chromium-browser: Skia in Google Chrome: Cross-origin data leakage via uninitialized use (CVE-2026-19161)

* chromium-browser: Skia: Arbitrary code execution via crafted HTML page (CVE-2026-19176)

* chromium-browser: Chromium: Information leak allows web origin policy bypass (CVE-2026-76041)

* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-28984)

* webkitgtk: Visiting a website may lead to an app denial-of-service (CVE-2026-43804)

* webkitgtk: Websites may know if the user has visited a given link (CVE-2026-64713)

* webkitgtk: Maliciously crafted web content may violate iframe sandboxing policy (CVE-2026-64728)

* webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination (CVE-2026-64787)

* webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing (CVE-2026-64730)

* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64757)

* webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (CVE-2026-64783)

* webkitgtk: use-after-free of JSCValue function parameters…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1542 WID-SEC-W-2026-1542 — Google Chrome und Microsoft Edge: Mehrere Schwachstellen 2026-10-02T19:08:04.594118+00:00

Ein Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Sicherheitsvorkehrungen zu umgehen, und um einen nicht näher spezifizierten Angriff durchzuführen.