[Git][security-tracker-team/security-tracker][master] Add new chromium issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cacee0f3 by Salvatore Bonaccorso at 2026-10-03T13:37:44+02:00
Add new chromium issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -893,27 +893,27 @@ CVE-2026-103762 (SiYuan before v3.8.5 contains a missing authorization vulnerabi
 CVE-2026-103648 (Path traversal in image-downloader 4.3.0 allows an attacker who can co ...)
 	NOT-FOR-US: image-downloader
 CVE-2026-103631 (Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allo ...)
-	TODO: check
+	- chromium <unfixed>
 CVE-2026-103630 (Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowe ...)
-	TODO: check
+	- chromium <unfixed>
 CVE-2026-103629 (Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allow ...)
-	TODO: check
+	- chromium <unfixed>
 CVE-2026-103628 (Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 a ...)
-	TODO: check
+	- chromium <unfixed>
 CVE-2026-103627 (Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowe ...)
-	TODO: check
+	- chromium <unfixed>
 CVE-2026-103626 (Incorrect authorization in FileSystem in Google Chrome on on Windows p ...)
-	TODO: check
+	- chromium <unfixed>
 CVE-2026-103625 (Type confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a ...)
-	TODO: check
+	- chromium <unfixed>
 CVE-2026-103624 (Use after free in Contextual Tasks in Google Chrome on on Windows prio ...)
-	TODO: check
+	- chromium <unfixed>
 CVE-2026-103623 (Use after free in MediaStream in Google Chrome prior to 154.0.8037.97  ...)
-	TODO: check
+	- chromium <unfixed>
 CVE-2026-103622 (Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed  ...)
-	TODO: check
+	- chromium <unfixed>
 CVE-2026-103621 (Integer overflow in Compositing in Google Chrome prior to 154.0.8037.9 ...)
-	TODO: check
+	- chromium <unfixed>
 CVE-2026-103604 (Inefficient algorithmic complexity in X.509 distinguished name string  ...)
 	NOT-FOR-US: Bouncycastle components not packaged in Debian
 CVE-2026-103603 (Memory allocation with excessive size value in the HSS/LMS signature c ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cacee0f3bb8e22c916fdc4512ee65f79092d582f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cacee0f3bb8e22c916fdc4512ee65f79092d582f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261003/08ab4ad4/attachment.htm>