Threat Intelligence Database

A security update for Chromium addresses multiple vulnerabilities including buffer overflows, use-after-free errors, out-of-bounds writes, missing or incorrect authorization, race conditions, information leaks, improper input validation, and UI misrepresentations across various components such as ANGLE, GPU, ServiceWorker, DevTools, V8, and others. These issues are fixed in Chromium version 154.0.8037.57. The update resolves a wide range of security flaws that could impact the browser's stability and security.

A security update for Chromium version 152.0.7977.64 addresses multiple critical vulnerabilities including use-after-free, buffer overflows, type confusion, race conditions, improper input validation, incorrect authorization, information leaks, and memory corruption across various components such as ANGLE, Aura, Chromecast, Views, V8, GPU, and others. These vulnerabilities could potentially allow attackers to cause memory corruption, unauthorized access, or information disclosure. The update was released on 2026-08-25 by the SUSE Product Security Team.

This security update for Chromium addresses multiple critical vulnerabilities including out-of-bounds writes, use-after-free errors, type confusion, insufficient validation of untrusted input, integer overflows, uninitialized use, stack buffer overflows, heap buffer overflows, and insufficient policy enforcement across various components such as Codecs, WebMCP, Blink, Input, WebAudio, ANGLE, Chromecast, Extensions, Skia, V8, GPU, CameraCapture, Network, Cast, Ozone, Aura, HTML-in-Canvas, Linux Toolkit Theming, Media, Core, UI, Views, Autofill, WebAppInstalls, Actor, Payments, WebRTC, DOM, Passwords, Forms, WebGL, Navigation, IndexedDB, InterestGroups, GetUserMedia, Browser, Bluetooth, Fullscreen, Dawn, WebUSB, Chromoting, and others. The update spans multiple Chromium versions from 150.0.7871.46 through 150.0.7871.186. These fixes collectively improve stability and security by mitigating critical memory safety and input validation issues.

This security update for Chromium addresses numerous vulnerabilities across multiple components, including use-after-free bugs, heap buffer overflows, out-of-bounds reads and writes, insufficient validation of untrusted input, inappropriate implementations, race conditions, and incorrect security UI. The update fixes issues in Chromium versions 149.0.7827.102, 149.0.7827.114, and 149.0.7827.155. These vulnerabilities affect various subsystems such as WebShare, Digital Credentials, WebView, WebRTC, GPU, Extensions, Passwords, and others. The update is critical due to the nature of the vulnerabilities, which could lead to memory corruption and potential security breaches if exploited.

A security update for Chromium addresses numerous critical vulnerabilities including out of bounds reads and writes, use after free, integer overflows, heap buffer overflows, uninitialized use, and insufficient validation of untrusted input across multiple components such as GPU, ANGLE, WebGL, Dawn, Skia, V8, Bluetooth, UI, and others. These vulnerabilities could potentially allow attackers to cause memory corruption or execute arbitrary code. The update fixes these issues in Chromium version 148.0.7778.215.

Multiple security vulnerabilities affecting Chromium have been addressed in a series of updates culminating in version 146.0.7680.177. These include use-after-free, heap buffer overflows, integer overflows, out-of-bounds reads and writes, insufficient policy enforcement, and incorrect security UI implementations across various components such as CSS, GPU, WebGL, V8, WebCodecs, Dawn, PDF, WebAudio, WebRTC, and others. The vulnerabilities are critical in nature and have been fixed in these Chromium releases.

This security update for Chromium addresses numerous vulnerabilities including multiple use-after-free bugs, heap buffer overflows, integer overflows, type confusion, insufficient validation of untrusted input, race conditions, and policy enforcement issues. The update spans several Chromium versions, notably 147.0.7727.137, 147.0.7727.116, 147.0.7727.101, and 147.0.7727.55. These vulnerabilities affect various components such as Canvas, iOS, Accessibility, GPU, ANGLE, Skia, Media, WebRTC, V8, PDFium, Blink, and others. The update fixes critical security issues that could lead to memory corruption, information leakage, or bypass of security policies.

Multiple security vulnerabilities affecting Chromium versions prior to 144.0.7559.132 have been fixed. These include heap buffer overflow, type confusion, race conditions, out-of-bounds memory access, use-after-free, and various inappropriate implementations and incorrect security UI issues. The update addresses remote code execution and memory corruption risks via crafted web content.

This security update for Chromium addresses multiple vulnerabilities across several versions, including integer overflows, heap buffer overflows, use-after-free issues, and inappropriate implementations in various components such as ANGLE, PowerVR, Skia, DevTools, WebAudio, CSS, WebAssembly, V8, WebCodecs, Media, PDFium, WebGPU, and others. The update includes fixes for Chromium versions 145.0.7632.45 through 145.0.7632.159. These vulnerabilities have been assigned CVE identifiers ranging from CVE-2026-2313 to CVE-2026-3545. The update also includes packaging and build improvements. No explicit patch links or vendor advisory details were provided in the input.

This security update for Chromium addresses multiple vulnerabilities across several versions, including issues such as use-after-free, out-of-bounds memory access, type confusion, and insufficient policy enforcement. The vulnerabilities affect components like WebView, WebGPU, V8 JavaScript engine, ANGLE, Password Manager, Toolbar, Google Updater, DevTools, Digital Credentials, Downloads, Loader, Media Stream, WebRTC, and Passwords. One of the issues fixed in version 143.0.7499.109 is known to have an exploit in the wild. The update includes fixes for CVE-2025-13630 and numerous other CVEs, improving overall security posture. No CVSS scores are provided for these vulnerabilities. The affected versions are not explicitly stated in the input data.