Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fd15551e by Moritz Muehlenhoff at 2026-07-02T12:54:40+02:00
more chromium issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -121,109 +121,168 @@ CVE-2026-14440 (Description: To issue and renew TLS
certificates on behalf o
CVE-2026-14439 (A path traversal vulnerability exists in the Git Service
component sha ...)
TODO: check
CVE-2026-14432 (Use after free in V8 in Google Chrome prior to 150.0.7871.46
allowed a ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14431 (Type Confusion in V8 in Google Chrome prior to 150.0.7871.46
allowed a ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14430 (Integer overflow in V8 in Google Chrome prior to 150.0.7871.46
allowed ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14429 (Insufficient validation of untrusted input in Skia in Google
Chrome pr ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
+ - libskia <unfixed>
CVE-2026-14428 (Insufficient validation of untrusted input in Dawn in Google
Chrome on ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14427 (Heap buffer overflow in Skia in Google Chrome prior to
150.0.7871.46 a ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
+ - libskia <unfixed>
CVE-2026-14426 (Use after free in V8 in Google Chrome prior to 150.0.7871.46
allowed a ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14425 (Use after free in ANGLE in Google Chrome prior to
150.0.7871.46 allowe ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14424 (Use after free in Dawn in Google Chrome on Mac prior to
150.0.7871.46 ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14423 (Type Confusion in Tint in Google Chrome prior to 150.0.7871.46
allowed ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14422 (Out of bounds read and write in Tint in Google Chrome prior to
150.0.7 ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14421 (Uninitialized Use in Dawn in Google Chrome on ChromeOS prior
to 150.0. ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14420 (Out of bounds read and write in Dawn in Google Chrome prior to
150.0.7 ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14419 (Use after free in Skia in Google Chrome prior to 150.0.7871.46
allowed ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
+ - libskia <unfixed>
CVE-2026-14418 (Uninitialized Use in ANGLE in Google Chrome prior to
150.0.7871.46 all ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14417 (Use after free in Dawn in Google Chrome prior to 150.0.7871.46
allowed ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14416 (Out of bounds read in Dawn in Google Chrome prior to
150.0.7871.46 all ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14415 (Inappropriate implementation in V8 in Google Chrome prior to
150.0.787 ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14414 (Insufficient validation of untrusted input in Skia in Google
Chrome pr ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
+ - libskia <unfixed>
CVE-2026-14413 (Uninitialized Use in ANGLE in Google Chrome prior to
150.0.7871.46 all ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14412 (Insufficient validation of untrusted input in ANGLE in Google
Chrome p ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14411 (Insufficient validation of untrusted input in ANGLE in Google
Chrome p ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14410 (Inappropriate implementation in Skia in Google Chrome prior to
150.0.7 ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
+ - libskia <unfixed>
CVE-2026-14409 (Inappropriate implementation in V8 in Google Chrome prior to
150.0.787 ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14408 (Uninitialized Use in Dawn in Google Chrome prior to
150.0.7871.46 allo ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14407 (Inappropriate implementation in V8 in Google Chrome prior to
150.0.787 ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14406 (Out of bounds read in V8 in Google Chrome prior to
150.0.7871.46 allow ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14405 (Uninitialized Use in V8 in Google Chrome prior to
150.0.7871.46 allowe ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14404 (Inappropriate implementation in PDFium in Google Chrome prior
to 150.0 ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14403 (Use after free in V8 in Google Chrome prior to 150.0.7871.46
allowed a ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14402 (Uninitialized Use in ANGLE in Google Chrome on Windows prior
to 150.0. ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14401 (Insufficient validation of untrusted input in ANGLE in Google
Chrome o ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14400 (Out of bounds write in ANGLE in Google Chrome prior to
150.0.7871.46 a ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14399 (Uninitialized Use in Dawn in Google Chrome prior to
150.0.7871.46 allo ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14398 (Use after free in ANGLE in Google Chrome prior to
150.0.7871.46 allowe ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14397 (Out of bounds write in ANGLE in Google Chrome on Mac prior to
150.0.78 ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14396 (Out of bounds read in ANGLE in Google Chrome prior to
150.0.7871.46 al ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14395 (Out of bounds write in V8 in Google Chrome prior to
150.0.7871.46 allo ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14394 (Use after free in V8 in Google Chrome prior to 150.0.7871.46
allowed a ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14393 (Use after free in V8 in Google Chrome prior to 150.0.7871.46
allowed a ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14392 (Out of bounds write in Tint in Google Chrome prior to
150.0.7871.46 al ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14391 (Integer overflow in ANGLE in Google Chrome on Windows prior to
150.0.7 ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14390 (Use after free in ANGLE in Google Chrome prior to
150.0.7871.46 allowe ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14389 (Integer overflow in Skia in Google Chrome prior to
150.0.7871.46 allow ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
+ - libskia <unfixed>
CVE-2026-14388 (Out of bounds read in ANGLE in Google Chrome prior to
150.0.7871.46 al ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14387 (Integer overflow in Skia in Google Chrome prior to
150.0.7871.46 allow ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
+ - libskia <unfixed>
CVE-2026-14386 (Out of bounds read in ANGLE in Google Chrome prior to
150.0.7871.46 al ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14385 (Heap buffer overflow in ANGLE in Google Chrome on Mac prior to
150.0.7 ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14384 (Out of bounds read in ANGLE in Google Chrome on Windows prior
to 150.0 ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14383 (Inappropriate implementation in V8 in Google Chrome prior to
150.0.787 ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14382 (Insufficient validation of untrusted input in ANGLE in Google
Chrome p ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14381 (Incorrect security UI in WebAppInstalls in Google Chrome prior
to 150. ...)
- TODO: check
+ - chromium <unfixed>
+ [bullseye] - chromium <end-of-life> (see #1061268)
CVE-2026-14363 (Improper neutralization of special elements used in an SQL
command ('S ...)
NOT-FOR-US: MediaWiki extensions/skins not packaged in Debian
CVE-2026-14340 (An incorrect authorization vulnerability was identified in
GitHub Ente ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fd15551ec5b1ce941c0788fc25758a3913ad159a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fd15551ec5b1ce941c0788fc25758a3913ad159a
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
