[Git][security-tracker-team/security-tracker][master] Track fixed version for chromium issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Oct 28 15:41:23 GMT 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
33a0fc31 by Salvatore Bonaccorso at 2026-10-28T16:40:57+01:00
Track fixed version for chromium issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -121,119 +121,119 @@ CVE-2026-118370 (libexpat through 2.9.0 contains a signed integer overflow vulne
 	- expat <unfixed> (bug #1152337)
 	NOTE: https://github.com/libexpat/libexpat/pull/1450
 CVE-2026-118359 (Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowe ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118358 (Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73  ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118357 (Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 a ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118356 (Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed  ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118355 (Improper input validation in Command in Google Chrome prior to 156.0.8 ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118354 (Improper input validation in Skia in Google Chrome prior to 156.0.8078 ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 	- libskia <unfixed> (unimportant)
 	NOTE: skia not covered by security support
 CVE-2026-118353 (Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowe ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118352 (Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 all ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118351 (Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allo ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 	- libskia <unfixed> (unimportant)
 	NOTE: skia not covered by security support
 CVE-2026-118350 (Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 all ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118349 (Memory corruption in Payments in Google Chrome prior to 156.0.8078.73  ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118348 (Improper input validation in Skia in Google Chrome prior to 156.0.8078 ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 	- libskia <unfixed> (unimportant)
 	NOTE: skia not covered by security support
 CVE-2026-118347 (Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 a ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118346 (Use after free in Compositing in Google Chrome prior to 156.0.8078.73  ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118345 (Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allow ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118344 (Use after free in Layout in Google Chrome prior to 156.0.8078.73 allow ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118343 (Improper input validation in ReadingList in Google Chrome prior to 156 ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118342 (Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118341 (Use after free in Modularization in Google Chrome prior to 156.0.8078. ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118340 (Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allo ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 	- libskia <unfixed> (unimportant)
 	NOTE: skia not covered by security support
 CVE-2026-118339 (Use after free in Animation in Google Chrome prior to 156.0.8078.73 al ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118338 (Use after free in Animation in Google Chrome prior to 156.0.8078.73 al ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118337 (Improper access control in Forms in Google Chrome prior to 156.0.8078. ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118336 (Improper input validation in Headless in Google Chrome prior to 156.0. ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118335 (Improper input validation in Metrics in Google Chrome on on Mac prior  ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118334 (Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118333 (Missing authorization in Video in Google Chrome prior to 156.0.8078.73 ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118332 (Improper input validation in Compositing in Google Chrome prior to 156 ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118331 (Improper input validation in FileAPI in Google Chrome prior to 156.0.8 ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118330 (Use after free in Browser in Google Chrome on on Windows prior to 156. ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118329 (Improper input validation in ANGLE in Google Chrome on on Mac prior to ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118328 (Improper input validation in WebRTC in Google Chrome prior to 156.0.80 ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118327 (Memory corruption in Media in Google Chrome prior to 156.0.8078.73 all ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118322 (Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.73 all ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118321 (Improper input validation in Core in Google Chrome on on Android prior ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118320 (Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowe ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118319 (Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allo ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 	- libskia <unfixed> (unimportant)
 	NOTE: skia not covered by security support
 CVE-2026-118318 (Improper access control in V8 in Google Chrome prior to 156.0.8078.73  ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118317 (Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allo ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118316 (Improper input validation in V8 in Google Chrome prior to 156.0.8078.7 ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118315 (Improper input validation in SVG in Google Chrome prior to 156.0.8078. ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118314 (Improper input validation in UI in Google Chrome on on Android prior t ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118313 (Use after free in Video in Google Chrome prior to 156.0.8078.73 allowe ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118312 (Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 all ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118311 (Memory corruption in Media in Google Chrome prior to 156.0.8078.73 all ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118310 (Improper input validation in Views in Google Chrome on on Windows prio ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118309 (Improper input validation in UI in Google Chrome on on Android prior t ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118308 (Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed  ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118307 (Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowe ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118306 (Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.7 ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118305 (Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73  ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118304 (Improper input validation in SVG in Google Chrome prior to 156.0.8078. ...)
-	- chromium <unfixed>
+	- chromium 156.0.8078.73-1
 CVE-2026-118276 (A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This ...)
 	NOT-FOR-US: a2ui-project a2ui
 CVE-2026-118275 (A vulnerability was found in a2ui-project a2ui up to 0.10.6. This affe ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/33a0fc310724010d69ea1fab1dcf890be3e70794

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/33a0fc310724010d69ea1fab1dcf890be3e70794
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261028/980af98d/attachment.htm>

More information about the debian-security-tracker-commits mailing list