Search: 20.chromium

This security update for Chromium addresses numerous vulnerabilities across multiple components, including use-after-free, buffer overflows, race conditions, type confusion, incorrect authorization, and information leaks. The update fixes issues in components such as WebGL, PDFium, Skia, V8, Extensions, Core, ANGLE, and others. These vulnerabilities could potentially lead to memory corruption, privilege escalation, information disclosure, and other security impacts. The update is critical due to the wide range of severe issues addressed.

This security update for Chromium addresses numerous vulnerabilities across multiple components including V8, CrashReporting, Network, Compositing, WebGL, CacheStorage, DevTools, Skia, and others. The issues fixed include use-after-free, type confusion, out-of-bounds read and write, race conditions, improper input validation, incorrect authorization, information leaks, buffer overflows, and UI misrepresentation. The update spans several Chromium versions, notably 152.0.7977.64, 152.0.7977.75, and 152.0.7977.82, with fixes for a wide range of critical security flaws. The update also disables the EULA dialog to use preferences instead of a hardcoded return. These vulnerabilities collectively pose critical security risks if left unpatched.

This security update for Chromium addresses numerous vulnerabilities across multiple components including use-after-free, buffer overflow, race conditions, insufficient validation of untrusted input, type confusion, and cryptographic flaws. The update spans several Chromium versions from 151.0.7922.71 through 151.0.7922.173, fixing critical security issues that could lead to privilege escalation, information leaks, and memory corruption.

A memory corruption vulnerability exists in the V8 JavaScript engine used by Google Chrome versions prior to 156.0.8078.73. This flaw could allow a remote attacker to execute arbitrary code within the browser's sandbox by convincing a user to visit a specially crafted HTML page. The issue is classified with high severity by Chromium security.

A memory corruption vulnerability exists in the WebAudio component of Google Chrome versions prior to 156.0.8078.73. This flaw could allow a remote attacker to execute arbitrary code within the browser's sandbox by convincing a user to visit a specially crafted HTML page. The vulnerability is classified with high severity by Chromium security.

A use-after-free vulnerability exists in the Layout component of Google Chrome versions prior to 156.0.8078.73. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The vulnerability is classified as critical by Chromium security.

A use-after-free vulnerability exists in the Compositing component of Google Chrome versions prior to 156.0.8078.73. This flaw could allow a remote attacker to execute arbitrary code within the sandbox by delivering a specially crafted HTML page. The vulnerability is classified with high severity by Chromium security.

A memory corruption vulnerability in the Cache component of Google Chrome versions prior to 156.0.8078.73 could allow a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The issue is classified with high severity by the Chromium security team.

A memory corruption vulnerability exists in the Skia component of Google Chrome versions prior to 156.0.8078.73. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by delivering a specially crafted HTML page. The vulnerability is rated with high severity by Chromium security.

A use-after-free vulnerability exists in PDFium within Google Chrome versions prior to 156.0.8078.73. This flaw could allow a remote attacker to execute arbitrary code inside the sandbox by delivering a specially crafted HTML page. The vulnerability is classified with high severity by Chromium security.

A use-after-free vulnerability exists in the Turbolev component of Google Chrome versions prior to 156.0.8078.73. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The vulnerability is classified with high severity by Chromium security.

A use-after-free vulnerability in the Paint component of Google Chrome versions prior to 156.0.8078.73 allows a remote attacker to execute arbitrary code inside the sandbox by delivering a crafted HTML page. This vulnerability has been assigned CVE-2026-118353 and is rated with high severity by Chromium security.

A use-after-free vulnerability exists in the Animation component of Google Chrome versions prior to 156.0.8078.73. This flaw could allow a remote attacker to execute arbitrary code within the browser's sandbox by convincing a user to visit a specially crafted HTML page. The Chromium project has assigned this vulnerability a medium severity rating.

A memory corruption vulnerability exists in the Skia component of Google Chrome versions prior to 156.0.8078.73. This flaw could allow a remote attacker to execute arbitrary code outside the browser sandbox by convincing a user to visit a specially crafted HTML page. The issue is classified with high severity by Chromium security.

A use-after-free vulnerability exists in the Animation component of Google Chrome versions prior to 156.0.8078.73. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by tricking a user into visiting a specially crafted HTML page. The vulnerability is rated as high severity by Chromium security.

A use-after-free vulnerability exists in the WTF component of Google Chrome versions prior to 156.0.8078.73. This flaw allows a remote attacker to execute arbitrary code within the sandbox by crafting a malicious HTML page. The vulnerability is classified with high severity by Chromium security.

An improper input validation vulnerability in the Skia component of Google Chrome versions prior to 156.0.8078.73 could allow a remote attacker to execute arbitrary code within the browser's sandbox by delivering a crafted HTML page. The issue is classified with high severity by Chromium security.

A memory corruption vulnerability exists in the V8 JavaScript engine used by Google Chrome versions prior to 156.0.8078.73. This flaw could allow a remote attacker to execute arbitrary code within the browser's sandbox by delivering a specially crafted HTML page. The vulnerability is rated with high severity by Chromium security.

A use-after-free vulnerability exists in the Browser component of Google Chrome on Windows versions prior to 156.0.8078.73. This flaw allows a remote attacker to execute arbitrary code inside the sandbox by tricking a user into visiting a crafted HTML page. The vulnerability is rated with high severity by Chromium security.

A vulnerability in Google Chrome on Mac prior to version 156.0.8078.73 involves improper input validation in the Metrics component. This flaw could allow a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The issue is classified with high security severity by the Chromium project.