Threats Tagged 'cve-2026-10881'

A security update for webkit2gtk3 on Red Hat Enterprise Linux 9 addresses multiple vulnerabilities in the ANGLE component used by chromium-browser. These include out-of-bounds memory access, heap buffer overflows, use-after-free, integer overflows, type confusion, and insufficient validation of untrusted input. The update is rated as important by Red Hat Product Security and fixes numerous CVEs affecting ANGLE. The vulnerabilities could potentially lead to memory corruption and other security issues.

This security update for Chromium addresses multiple critical vulnerabilities including use-after-free bugs, heap buffer overflows, out-of-bounds reads and writes, insufficient validation of untrusted input, race conditions, and incorrect security UI. The vulnerabilities affect various Chromium components such as WebShare, Digital Credentials, WebView, WebRTC, GPU, Extensions, and Passwords. The update fixes issues in Chromium versions 149.0.7827.102, 149.0.7827.114, and 149.0.7827.155. These vulnerabilities could lead to memory corruption and potential security breaches if exploited.

Out of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)