Debian Chromium vulnerabilities

CVE-2024-5499 [HIGH] CVE-2024-5499: chromium - Out of bounds write in Streams API in Google Chrome prior to 125.0.6422.141 allo... Out of bounds write in Streams API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 125.0.6422.141-1~deb12u1) bullseye: open forky: resolved (fixed in 125.0.6422.141-1) sid: resolved (fixed in 125.0.6422.14

CVE-2026-4673 [HIGH] CVE-2026-4673: chromium - Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.165 allowe... Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 146.0.7680.164-1~deb12u1) bullseye: open forky: resolved (fixed in 146.0.7680.164-1) sid: resolved (fixed in 146.0.7680.164-1)

CVE-2026-2650 [HIGH] CVE-2026-2650: chromium - Heap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a... Heap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 145.0.7632.109-1~deb12u3) bullseye: open forky: resolved (fixed in 145.0.7632.109-1) sid: resolved (fixed in 145.0.7632.109-1) tr

CVE-2026-5275 [HIGH] CVE-2026-5275: chromium - Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 al... Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 146.0.7680.177-1~deb12u1) bullseye: open forky: resolved (fixed in 146.0.7680.177-1) sid: resolved (fixed in 146.0.7680.177-1) trixie: re

CVE-2026-4443 [HIGH] CVE-2026-4443: chromium - Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.153 allowe... Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 146.0.7680.153-1~deb12u1) bullseye: open forky: resolved (fixed in 146.0.7680.153-1) sid: resolved (fixed in 146.0.7680.153-

CVE-2026-5274 [HIGH] CVE-2026-5274: chromium - Integer overflow in Codecs in Google Chrome prior to 146.0.7680.178 allowed a re... Integer overflow in Codecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 146.0.7680.177-1~deb12u1) bullseye: open forky: resolved (fixed in 146.0.7680.177-1) sid: resolved (fixed in 146.0.7680.177-1) trixie: resolv

CVE-2026-5278 [HIGH] CVE-2026-5278: chromium - Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 a... Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 146.0.7680.177-1~deb12u1) bullseye: open forky: resolved (fixed in 146.0.7680.177-1) sid: resolved (fixed in 146.0.7680.177-1) trixie: r

CVE-2026-5868 [HIGH] CVE-2026-5868: chromium - Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 all... Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: open bullseye: open forky: open sid: resolved (fixed in 147.0.7727.55-1) trixie: open

CVE-2026-4440 [HIGH] CVE-2026-4440: chromium - Out of bounds read and write in WebGL in Google Chrome prior to 146.0.7680.153 a... Out of bounds read and write in WebGL in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Critical) Scope: local bookworm: resolved (fixed in 146.0.7680.153-1~deb12u1) bullseye: open forky: resolved (fixed in 146.0.7680.153-1) sid: resolved (fixed in 146.0.7680.153-1)

CVE-2026-5870 [HIGH] CVE-2026-5870: chromium - Integer overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remot... Integer overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: open bullseye: open forky: open sid: resolved (fixed in 147.0.7727.55-1) trixie: open

CVE-2025-12907 [HIGH] CVE-2025-12907: chromium - Insufficient validation of untrusted input in Devtools in Google Chrome prior to... Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to execute arbitrary code via user action in Devtools. (Chromium security severity: Low) Scope: local bookworm: resolved (fixed in 140.0.7339.80-1~deb12u1) bullseye: open forky: resolved (fixed in 140.0.7339.80-1) sid: resolved (fixed in 140.0.73

CVE-2021-21127 [HIGH] CVE-2021-21127: chromium - Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.432... Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted Chrome Extension. Scope: local bookworm: resolved (fixed in 88.0.4324.96-0.1) bullseye: resolved (fixed in 88.0.4324.96-0.1) forky: resolved (fixed in 88.0.4324.96-0.1) sid: resolved (fixed in 88.0.4324.96-0.

CVE-2021-21106 [CRITICAL] CVE-2021-21106: chromium - Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a rem... Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Scope: local bookworm: resolved (fixed in 87.0.4280.141-0.1) bullseye: resolved (fixed in 87.0.4280.141-0.1) forky: resolved (fixed in 87.0.4280.141-0.1) sid: resol

CVE-2021-21201 [CRITICAL] CVE-2021-21201: chromium - Use after free in permissions in Google Chrome prior to 90.0.4430.72 allowed a r... Use after free in permissions in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Scope: local bookworm: resolved (fixed in 90.0.4430.72-1) bullseye: resolved (fixed in 90.0.4430.72-1) forky: resolved (fixed in 90.0.4430.72-1) sid: resolved (fi

CVE-2025-4609 [CRITICAL] CVE-2025-4609: chromium - Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome ... Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 136.0.7103.113 allowed a remote attacker to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 136.0.7103.113-1~deb12u1) bullseye: open forky: resolved (fixed in 136.0.7103.113-1)

CVE-2026-3916 [CRITICAL] CVE-2026-3916: chromium - Out of bounds read in Web Speech in Google Chrome prior to 146.0.7680.71 allowed... Out of bounds read in Web Speech in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 146.0.7680.71-1~deb12u1) bullseye: open forky: resolved (fixed in 146.0.7680.71-1) sid: resolved (fixed in 146.0.7680.71-1)

CVE-2023-5996 [HIGH] CVE-2023-5996: chromium - Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a re... Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 119.0.6045.123-1~deb12u1) bullseye: resolved (fixed in 119.0.6045.123-1~deb11u1) forky: resolved (fixed in 119.0.6045.123-1) sid: reso

CVE-2023-4352 [HIGH] CVE-2023-4352: chromium - Type confusion in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote at... Type confusion in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 116.0.5845.96-1~deb12u1) bullseye: resolved (fixed in 116.0.5845.96-1~deb11u1) forky: resolved (fixed in 116.0.5845.96-1) sid: resolved (fixe

CVE-2023-5346 [HIGH] CVE-2023-5346: chromium - Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote a... Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 117.0.5938.149-1~deb12u1) bullseye: resolved (fixed in 117.0.5938.149-1~deb11u1) forky: resolved (fixed in 117.0.5938.149-1) sid: resolved (

CVE-2023-4354 [HIGH] CVE-2023-4354: chromium - Heap buffer overflow in Skia in Google Chrome prior to 116.0.5845.96 allowed a r... Heap buffer overflow in Skia in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 116.0.5845.96-1~deb12u1) bullseye: resolved (fixed in 116.0.5845.96-1~deb11u1) forky: resolv