Debian Chromium vulnerabilities

CVE-2026-3061 [CRITICAL] CVE-2026-3061: chromium - Out of bounds read in Media in Google Chrome prior to 145.0.7632.116 allowed a r... Out of bounds read in Media in Google Chrome prior to 145.0.7632.116 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 145.0.7632.116-1~deb12u1) bullseye: open forky: resolved (fixed in 145.0.7632.116-1) sid: resolved (fixed in 145.0.7632.116-1) t

CVE-2026-2649 [HIGH] CVE-2026-2649: chromium - Integer overflow in V8 in Google Chrome prior to 145.0.7632.109 allowed a remote... Integer overflow in V8 in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 145.0.7632.109-1~deb12u3) bullseye: open forky: resolved (fixed in 145.0.7632.109-1) sid: resolved (fixed in 145.0.7632.109-1) trixie: res

CVE-2026-1861 [HIGH] CVE-2026-1861: chromium - Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed ... Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 144.0.7559.109-2~deb12u1) bullseye: open forky: resolved (fixed in 144.0.7559.109-2) sid: resolved (fixed in 144.0.7559.109-2) tri

CVE-2026-4674 [HIGH] CVE-2026-4674: chromium - Out of bounds read in CSS in Google Chrome prior to 146.0.7680.165 allowed a rem... Out of bounds read in CSS in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 146.0.7680.164-1~deb12u1) bullseye: open forky: resolved (fixed in 146.0.7680.164-1) sid: resolved (fixed in 146.0.7680.164-1) trixie:

CVE-2026-3913 [HIGH] CVE-2026-3913: chromium - Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a ... Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) Scope: local bookworm: resolved (fixed in 146.0.7680.71-1~deb12u1) bullseye: open forky: resolved (fixed in 146.0.7680.71-1) sid: resolved (fixed in 146.0.7680.71-1) trix

CVE-2026-0899 [HIGH] CVE-2026-0899: chromium - Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowe... Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 144.0.7559.59-1~deb12u1) bullseye: open forky: resolved (fixed in 144.0.7559.59-1) sid: resolved (fixed in 144.0.7559.59-1) tr

CVE-2026-4457 [HIGH] CVE-2026-4457: chromium - Type Confusion in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote a... Type Confusion in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 146.0.7680.153-1~deb12u1) bullseye: open forky: resolved (fixed in 146.0.7680.153-1) sid: resolved (fixed in 146.0.7680.153-1) trixie: resol

CVE-2026-3917 [HIGH] CVE-2026-3917: chromium - Use after free in Agents in Google Chrome prior to 146.0.7680.71 allowed a remot... Use after free in Agents in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 146.0.7680.71-1~deb12u1) bullseye: open forky: resolved (fixed in 146.0.7680.71-1) sid: resolved (fixed in 146.0.7680.71-1) trixie: resol

CVE-2026-3542 [HIGH] CVE-2026-3542: chromium - Inappropriate implementation in WebAssembly in Google Chrome prior to 145.0.7632... Inappropriate implementation in WebAssembly in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 145.0.7632.159-1~deb12u1) bullseye: open forky: resolved (fixed in 145.0.7632.159-1) sid: resolved (fixed in 145.0.76

CVE-2026-3918 [HIGH] CVE-2026-3918: chromium - Use after free in WebMCP in Google Chrome prior to 146.0.7680.71 allowed a remot... Use after free in WebMCP in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 146.0.7680.71-1~deb12u1) bullseye: open forky: resolved (fixed in 146.0.7680.71-1) sid: resolved (fixed in 146.0.7680.71-1) trixie: resol

CVE-2025-11460 [HIGH] CVE-2025-11460: chromium - Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remo... Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to execute arbitrary code via a crafted video file. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 141.0.7390.65-1~deb12u1) bullseye: open forky: resolved (fixed in 141.0.7390.65-1) sid: resolved (fixed in 141.0.7390.65-1) trixie: resolved (fixe

CVE-2021-21125 [HIGH] CVE-2021-21125: chromium - Insufficient policy enforcement in File System API in Google Chrome on Windows p... Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. Scope: local bookworm: resolved (fixed in 88.0.4324.96-0.1) bullseye: resolved (fixed in 88.0.4324.96-0.1) forky: resolved (fixed in 88.0.4324.96-0.1) sid: resolved (fixed in 88.0.4

CVE-2026-3921 [HIGH] CVE-2026-3921: chromium - Use after free in TextEncoding in Google Chrome prior to 146.0.7680.71 allowed a... Use after free in TextEncoding in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 146.0.7680.71-1~deb12u1) bullseye: open forky: resolved (fixed in 146.0.7680.71-1) sid: resolved (fixed in 146.0.7680.71-1) trixie:

CVE-2026-3540 [HIGH] CVE-2026-3540: chromium - Inappropriate implementation in WebAudio in Google Chrome prior to 145.0.7632.15... Inappropriate implementation in WebAudio in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 145.0.7632.159-1~deb12u1) bullseye: open forky: resolved (fixed in 145.0.7632.159-1) sid: resolved (fixed in 145.0.7632.

CVE-2026-4444 [HIGH] CVE-2026-4444: chromium - Stack buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed... Stack buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 146.0.7680.153-1~deb12u1) bullseye: open forky: resolved (fixed in 146.0.7680.153-1) sid: resolved (fixed in 146.0.7680.153-1) t

CVE-2026-4446 [HIGH] CVE-2026-4446: chromium - Use after free in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remo... Use after free in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 146.0.7680.153-1~deb12u1) bullseye: open forky: resolved (fixed in 146.0.7680.153-1) sid: resolved (fixed in 146.0.7680.153-1) trixie: r

CVE-2026-3931 [HIGH] CVE-2026-3931: chromium - Heap buffer overflow in Skia in Google Chrome prior to 146.0.7680.71 allowed a r... Heap buffer overflow in Skia in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) Scope: local bookworm: resolved (fixed in 146.0.7680.71-1~deb12u1) bullseye: open forky: resolved (fixed in 146.0.7680.71-1) sid: resolved (fixed in 146.0.7680.71-1) trixie:

CVE-2026-3923 [HIGH] CVE-2026-3923: chromium - Use after free in WebMIDI in Google Chrome prior to 146.0.7680.71 allowed a remo... Use after free in WebMIDI in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 146.0.7680.71-1~deb12u1) bullseye: open forky: resolved (fixed in 146.0.7680.71-1) sid: resolved (fixed in 146.0.7680.71-1) trixie: reso

CVE-2026-3922 [HIGH] CVE-2026-3922: chromium - Use after free in MediaStream in Google Chrome prior to 146.0.7680.71 allowed a ... Use after free in MediaStream in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 146.0.7680.71-1~deb12u1) bullseye: open forky: resolved (fixed in 146.0.7680.71-1) sid: resolved (fixed in 146.0.7680.71-1) trixie:

CVE-2026-4454 [HIGH] CVE-2026-4454: chromium - Use after free in Network in Google Chrome prior to 146.0.7680.153 allowed a rem... Use after free in Network in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Scope: local bookworm: resolved (fixed in 146.0.7680.153-1~deb12u1) bullseye: open forky: resolved (fixed in 146.0.7680.153-1) sid: resolved (fixed in 146.0.7680.153-1) trixie: