Fedora Packages

chromium-common-155.0.8059.84-1.fc45 in Fedora 45

↵ Return to the main page of chromium-common
View build
Search for updates

Package Info (Data from x86_64 build)
🠗 Changelog
🠗 Dependencies
🠗 Provides
🠗 Files

Changelog

Date Author Change
2026-10-16 Than Ngo <than at redhat dot com> - 155.0.8059.84-1 - Update to 155.0.8059.84, includes 10 security fixes * CVE-2026-110913: Memory corruption in DOM * CVE-2026-110914: Memory corruption in Workers * CVE-2026-110915: Use after free in Compositing * CVE-2026-110916: Improper input validation in Desktop * CVE-2026-110917: Memory corruption in SVG * CVE-2026-110918: Memory corruption in Core * CVE-2026-110919: Use after free in V8 * CVE-2026-110920: Memory corruption in V8 * CVE-2026-110921: Use after free in V8 * CVE-2026-110922: Use after free in Prerender
2026-10-14 Than Ngo <than at redhat dot com> - 155.0.8059.79-1 - Update to 155.0.8059.39, includes 37 security fixes * CVE-2026-110136: Use after free in PDF * CVE-2026-110137: Use after free in WebRTC * CVE-2026-110138: Use after free in ShapeDetection * CVE-2026-110139: Use after free in Media * CVE-2026-110140: Type confusion in V8 * CVE-2026-110141: Observable discrepancy in Media * CVE-2026-110142: Use after free in FileSystem * CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk * CVE-2026-110144: Incorrect authorization in Mojo * CVE-2026-110145: Use after free in Passwords * CVE-2026-110146: Information leak in Passwords * CVE-2026-110147: Use after free in PDF * CVE-2026-110148: Use after free in SVG * CVE-2026-110149: Use after free in Browser * CVE-2026-110150: Privilege elevation in Installer * CVE-2026-110151: Use after free in Media * CVE-2026-110152: Buffer overflow in ANGLE * CVE-2026-110153: Use after free in Media * CVE-2026-110154: Use after free in Canvas * CVE-2026-110155: Buffer overflow in PDFium * CVE-2026-110156: Incorrect reference resolution in Extensions * CVE-2026-110157: Use after free in SVG * CVE-2026-110158: Use after free in Passwords * CVE-2026-110159: Incorrect authorization in Updater * CVE-2026-110160: Missing authorization in ReadingMode * CVE-2026-110161: Use after free in Network * CVE-2026-110162: Use after free in Desktop * CVE-2026-110163: Use after free in DOM * CVE-2026-110164: Use after free in DOM * CVE-2026-110165: Use after free in Core * CVE-2026-110166: Buffer overflow in Animation * CVE-2026-110167: Use after free in Media * CVE-2026-110168: Use after free in V8 * CVE-2026-110169: Use after free in V8 * CVE-2026-110170: Use after free in Bindings * CVE-2026-110171: Use after free in Media * CVE-2026-110172: Use after free in Media
2026-10-11 Than Ngo <than at redhat dot com> - 155.0.8059.39-1 - Update to 155.0.8059.39, includes 247 security fixes * CVE-2026-102322: Incorrect Authorization in SiteIsolation * CVE-2026-106179: UI misrepresentation in WebAppInstalls * CVE-2026-106180: Observable discrepancy in Animation * CVE-2026-106181: Incorrect reference resolution in DevTools * CVE-2026-106182: UI misrepresentation in Paint * CVE-2026-106183: Missing authorization in Chromoting * CVE-2026-106184: Uninitialized resource in Media * CVE-2026-106185: Improper input validation in Viz * CVE-2026-106186: Uncontrolled search path element in CredentialProvider * CVE-2026-106187: Missing authorization in Permissions * CVE-2026-106188: Confused deputy in SignIn * CVE-2026-106189: Code injection in ReaderMode * CVE-2026-106190: Use after free in Media * CVE-2026-106191: Missing authorization in Actor * CVE-2026-106192: Information leak in Mobile * CVE-2026-106193: Use after free in Parser * CVE-2026-106194: Missing authorization in WebAppInstalls * CVE-2026-106195: Incorrect authorization in Chromoting * CVE-2026-106196: Missing authorization in Navigation * CVE-2026-106197: Use after free in Browser * CVE-2026-106198: Missing authorization in FileSystem * CVE-2026-106199: Incorrect authorization in Actor * CVE-2026-106200: Use after free in Track * CVE-2026-106201: Race condition in V8 * CVE-2026-106202: Uninitialized resource in ANGLE * CVE-2026-106203: Incomplete cleanup in Autofill * CVE-2026-106204: Use after free in PDF * CVE-2026-106205: Missing authorization in Passwords * CVE-2026-106206: Improper input validation in Mobile * CVE-2026-106207: Race condition in V8 * CVE-2026-106208: Missing authorization in API * CVE-2026-106209: UI misrepresentation in Mobile * CVE-2026-106210: Observable discrepancy in Scroll * CVE-2026-106211: Use after free in TabStrip * CVE-2026-106212: Incorrect authorization in Autofill * CVE-2026-106213: Race condition in WebAudio * CVE-2026-106214: Information leak in Proxy * CVE-2026-106215: Uninitialized resource in ANGLE * CVE-2026-106216: Cross-site request forgery in ReadingList * CVE-2026-106217: Missing authorization in Google Lens * CVE-2026-106220: Information leak in Passwords * CVE-2026-106221: Confused deputy in WebAPKs * CVE-2026-106222: Incorrect authorization in Sync * CVE-2026-106223: Uninitialized resource in GPU * CVE-2026-106224: Missing authorization in Google Lens * CVE-2026-106225: Missing authorization in Autofill * CVE-2026-106226: Improper input validation in Compositing * CVE-2026-106227: Use after free in Core * CVE-2026-106228: Confused deputy in Google Lens * CVE-2026-106229: UI misrepresentation in FileSystem * CVE-2026-106230: Incorrect reference resolution in Offline * CVE-2026-106231: Uninitialized resource in Dawn * CVE-2026-106232: UI misrepresentation in Browser * CVE-2026-106233: Use after free in Metrics * CVE-2026-106234: Use after free in Network * CVE-2026-106235: Use after free in WebAudio * CVE-2026-106236: UI misrepresentation in Chromoting * CVE-2026-106237: Information leak in Permissions * CVE-2026-106238: Race condition in Fonts * CVE-2026-106239: Integer overflow in WebGL * CVE-2026-106240: Type confusion in V8 * CVE-2026-106241: Incorrect authorization in Search * CVE-2026-106242: Information leak in Omnibox * CVE-2026-106243: Incomplete cleanup in Proxy Auth * CVE-2026-106244: Incorrect authorization in Permissions * CVE-2026-106245: Uninitialized resource in ANGLE * CVE-2026-106246: Incorrect authorization in Browser * CVE-2026-106247: Buffer overflow in ANGLE * CVE-2026-106248: Use after free in Bindings * CVE-2026-106249: Incorrect authorization in Autofill * CVE-2026-106250: Missing authorization in Actor * CVE-2026-106251: UI misrepresentation in Chromoting * CVE-2026-106252: Incorrect comparison in Fonts * CVE-2026-106253: Incorrect authorization in Extensions * CVE-2026-106254: Information leak in Mobile * CVE-2026-106255: Race condition in V8 * CVE-2026-106256: Information leak in Passwords * CVE-2026-106257: Use after free in HTML * CVE-2026-106258: Uninitialized resource in ANGLE * CVE-2026-106259: Incorrect authorization in PermissionElement * CVE-2026-106260: Incorrect authorization in DevTools * CVE-2026-106261: Uninitialized resource in Video * CVE-2026-106262: Incomplete cleanup in GetUserMedia * CVE-2026-106263: Improper input validation in SignIn * CVE-2026-106264: Missing authorization in Web Authentication (Passkeys & Security Keys) * CVE-2026-106265: UI misrepresentation in File * CVE-2026-106266: Confused deputy in Contextual Tasks * CVE-2026-106267: Missing authorization in Network * CVE-2026-106268: Use after free in WebRTC * CVE-2026-106269: Use after free in CSS * CVE-2026-106270: Incorrect authorization in WebAppInstalls * CVE-2026-106271: Missing authorization in Workers * CVE-2026-106272: UI misrepresentation in Chromoting * CVE-2026-106273: Uninitialized resource in Video * CVE-2026-106274: Incorrect reference resolution in Browser * CVE-2026-106275: Uninitialized resource in GPU * CVE-2026-106276: UI misrepresentation in Payments * CVE-2026-106277: Information leak in Animation * CVE-2026-106278: Use after free in Select * CVE-2026-106279: Incorrect reference resolution in Passwords * CVE-2026-106280: Incorrect authorization in PermissionElement * CVE-2026-106281: Use after free in Tint * CVE-2026-106282: UI misrepresentation in WebOTP * CVE-2026-106283: Use after free in Streaming * CVE-2026-106284: Out of bounds read in Printing * CVE-2026-106285: UI misrepresentation in WebAppInstalls * CVE-2026-106286: Confused deputy in Omnibox * CVE-2026-106287: Information loss in CORS * CVE-2026-106288: Missing authorization in Browser * CVE-2026-106289: Missing authorization in FedCM * CVE-2026-106290: Uninitialized resource in GPU * CVE-2026-106291: Use after free in GarbageCollection * CVE-2026-106292: Buffer overflow in Fonts * CVE-2026-106293: Type confusion in ANGLE * CVE-2026-106294: Incomplete cleanup in Chromoting * CVE-2026-106295: Incorrect authorization in Unbounded Element * CVE-2026-106296: Improper privilege management in UI * CVE-2026-106297: Incorrect authorization in Scheduling * CVE-2026-106298: Use after free in Chrome Tabs * CVE-2026-106299: Improper input validation in WebAudio * CVE-2026-106300: Race condition in CacheStorage * CVE-2026-106301: Confused deputy in Contextual Tasks * CVE-2026-106302: UI misrepresentation in PermissionElement * CVE-2026-106303: Observable discrepancy in Autofill AI * CVE-2026-106304: Out of bounds read in ANGLE * CVE-2026-106305: UI misrepresentation in Mobile * CVE-2026-106306: Incorrect authorization in DevTools * CVE-2026-106307: Incorrect authorization in Network * CVE-2026-106308: Incorrect reference resolution in Autofill * CVE-2026-106309: Incorrect authorization in Selection * CVE-2026-106310: Use of released resource in FontAccess * CVE-2026-106311: Clickjacking in PermissionElement * CVE-2026-106312: Missing authorization in SignIn * CVE-2026-106313: Incorrect authorization in Browser * CVE-2026-106314: Incorrect authorization in Bluetooth * CVE-2026-106315: Use after free in Modularization * CVE-2026-106316: UI misrepresentation in Chromoting * CVE-2026-106317: UI misrepresentation in FullScreen * CVE-2026-106318: Use after free in Media * CVE-2026-106320: Use of released resource in UI * CVE-2026-106321: Information leak in Editing * CVE-2026-106322: Open redirect in AppManifest * CVE-2026-106323: Missing authorization in Chrome for iOS * CVE-2026-106324: Incorrect authorization in WebAppInstalls * CVE-2026-106325: Incorrect reference resolution in Core * CVE-2026-106326: Confused deputy in UI * CVE-2026-106327: Incorrect authorization in Core * CVE-2026-106328: Incorrect authorization in PDF * CVE-2026-106329: Incorrect authorization in FileSystem * CVE-2026-106330: Information leak in Paint * CVE-2026-106331: Improper input validation in Extensions * CVE-2026-106332: Integer overflow in Compositing * CVE-2026-106333: Incorrect authorization in Input * CVE-2026-106334: Information leak in Payments * CVE-2026-106335: Use after free in Media * CVE-2026-106336: Observable discrepancy in Paint * CVE-2026-106337: UI misrepresentation in UI * CVE-2026-106338: UI misrepresentation in PictureInPicture * CVE-2026-106339: Use of released resource in Core * CVE-2026-106340: Missing authorization in CredentialProvider * CVE-2026-106341: Type confusion in V8 * CVE-2026-106342: Information leak in Autofill * CVE-2026-106343: Improper state validation in Autofill AI * CVE-2026-106344: Missing authorization in Permissions * CVE-2026-106345: Use of released resource in Session * CVE-2026-106346: Improper state validation in DevTools * CVE-2026-106347: Use after free in Track * CVE-2026-106348: Information leak in Animation * CVE-2026-106349: Use after free in V8 * CVE-2026-106350: Incorrect authorization in Browser * CVE-2026-106351: Observable discrepancy in Safebrowsing * CVE-2026-106352: Incorrect authorization in WebProtect * CVE-2026-106353: Improper input validation in Mobile * CVE-2026-106354: Improper resource exposure in Extensions * CVE-2026-106355: Missing authorization in Media * CVE-2026-106356: Clickjacking in EVP * CVE-2026-106357: Use after free in WebRTC * CVE-2026-106358: Use after free in Navigation * CVE-2026-106359: Confused deputy in DeviceBoundSessionCredentials * CVE-2026-106360: Information leak in Payments * CVE-2026-106361: Incorrect provision of specified functionality in Mobile * CVE-2026-106362: Missing authorization in DevTools * CVE-2026-106363: Missing authorization in FullScreen * CVE-2026-106364: Incorrect authorization in Omnibox * CVE-2026-106365: Missing authorization in Animation * CVE-2026-106366: Incomplete cleanup in CustomTabs * CVE-2026-106367: Missing authorization in Mobile * CVE-2026-106368: UI misrepresentation in UI * CVE-2026-106369: Missing authorization in Translate * CVE-2026-106370: Uninitialized resource in GPU * CVE-2026-106371: Incorrect authorization in Transactions Platform * CVE-2026-106372: Incorrect authorization in UI * CVE-2026-106373: Use after free in Fonts * CVE-2026-106374: Type confusion in V8 * CVE-2026-106375: Incomplete cleanup in Dawn * CVE-2026-106376: Uninitialized resource in ANGLE * CVE-2026-106377: Race condition in Fonts * CVE-2026-106378: Privilege elevation in Sandbox * CVE-2026-106379: Uninitialized resource in Skia * CVE-2026-106380: UI misrepresentation in UI * CVE-2026-106381: Incorrect authorization in Passwords * CVE-2026-106382: Use after free in Chromecast * CVE-2026-106383: Use after free in Media * CVE-2026-106384: Missing authorization in SiteIsolation * CVE-2026-106385: Race condition in Chromoting * CVE-2026-106386: Uninitialized resource in WebAudio * CVE-2026-106387: Missing authorization in Mobile * CVE-2026-106388: Missing authorization in DataTransfer * CVE-2026-106389: Incorrect authorization in USB * CVE-2026-106390: Incorrect provision of specified functionality in SanitizerAPI * CVE-2026-106391: Incorrect authorization in WebShare * CVE-2026-106392: Information leak in WebAudio * CVE-2026-106393: Use after free in Storage * CVE-2026-106394: Incomplete cleanup in Glic * CVE-2026-106395: Uninitialized resource in Dawn * CVE-2026-106396: Improper input validation in Omnibox * CVE-2026-106397: Incorrect authorization in Mobile * CVE-2026-106398: Incorrect authorization in Media * CVE-2026-106399: Out of bounds read in Skia * CVE-2026-106400: Clickjacking in Messages * CVE-2026-106401: Out of bounds write in Media * CVE-2026-106402: Incorrect authorization in Extensions * CVE-2026-106403: Incorrect authorization in Accessibility * CVE-2026-106404: Incorrect authorization in FontAccess * CVE-2026-106405: Race condition in CustomTabs * CVE-2026-106406: Missing authorization in Mobile * CVE-2026-106407: Incorrect authorization in GetUserMedia * CVE-2026-106408: Protection mechanism failure in Mobile * CVE-2026-106409: Incorrect reference resolution in WebAppInstalls * CVE-2026-106410: Missing authorization in Permissions * CVE-2026-106411: Use after free in Parser * CVE-2026-106412: Race condition in Core * CVE-2026-106413: Race condition in Browser * CVE-2026-106414: Improper input validation in Mobile * CVE-2026-106415: Information leak in Enterprise * CVE-2026-106416: Code injection in Extensions * CVE-2026-106417: Integer overflow in Media * CVE-2026-106418: Missing authorization in Network * CVE-2026-106419: Use after free in ANGLE * CVE-2026-106420: Incorrect calculation in API * CVE-2026-106421: Use after free in PDF * CVE-2026-106422: Incorrect authorization in API * CVE-2026-106423: Use after free in Media * CVE-2026-106424: Information leak in Audio * CVE-2026-106425: Missing authorization in BrowserTag * CVE-2026-106426: Race condition in Fonts * CVE-2026-106427: Confused deputy in Mobile
2026-10-03 Than Ngo <than at redhat dot com> - 154.0.8037.97-1 - Update to 154.0.8037.97 * CVE-2026-103621: Integer overflow in Compositing * CVE-2026-103622: Use after free in SVG * CVE-2026-103623: Use after free in MediaStream * CVE-2026-103624: Use after free in Contextual Tasks * CVE-2026-103625: Type confusion in V8 * CVE-2026-103626: Incorrect authorization in FileSystem * CVE-2026-103627: Information leak in SVG * CVE-2026-103628: Out of bounds write in WebGL * CVE-2026-103629: Integer overflow in Skia * CVE-2026-103630: Use after free in FedCM * CVE-2026-103631: Buffer overflow in WebRTC
2026-09-30 Than Ngo <than at redhat dot com> - 154.0.8037.92-1 - Update to 154.0.8037.92 * CVE-2026-102299: Type confusion in V8 * CVE-2026-102300: Uninitialized resource in WebGPU * CVE-2026-102301: Out of bounds write in GPU * CVE-2026-102302: Buffer overflow in V8 * CVE-2026-102303: Uninitialized resource in GPU * CVE-2026-102304: Use after free in Passwords * CVE-2026-102305: UI misrepresentation in SignIn * CVE-2026-102306: Use after free in Bluetooth * CVE-2026-102307: Uninitialized resource in Dawn * CVE-2026-102308: Use after free in Views * CVE-2026-102309: Use after free in FullScreen * CVE-2026-102310: Missing authorization in Payments * CVE-2026-102311: Uninitialized resource in GPU * CVE-2026-102312: UI misrepresentation in Omnibox * CVE-2026-102313: Uninitialized resource in ANGLE * CVE-2026-102314: UI misrepresentation in TabStrip * CVE-2026-102315: Uninitialized resource in Media * CVE-2026-102316: Use after free in Views * CVE-2026-102317: Improper privilege management in Mojo * CVE-2026-102318: Out of bounds read in WebGL * CVE-2026-102319: Uninitialized resource in GPU * CVE-2026-102320: Missing authorization in CORS * CVE-2026-102321: Type confusion in V8 * CVE-2026-102323: Type confusion in V8 * CVE-2026-102324: Use after free in PictureInPicture * CVE-2026-102325: Uninitialized resource in Skia * CVE-2026-102326: Type confusion in V8 * CVE-2026-102327: Incorrect authorization in WebView * CVE-2026-102328: Type confusion in V8 * CVE-2026-102329: Cross-site scripting in WebUI * CVE-2026-102330: Incorrect authorization in SiteIsolation * CVE-2026-102331: Buffer overflow in ANGLE
2026-09-23 Than Ngo <than at redhat dot com> - 154.0.8037.57-1 - Update to 154.0.8037.57 * CVE-2026-95274: Improper output encoding in DevTools * CVE-2026-95275: Incorrect reference resolution in MediaStream * CVE-2026-95276: Improper input validation in Themes * CVE-2026-95277: Use after free in Views * CVE-2026-95278: Missing authorization in WakeLock * CVE-2026-95279: UI misrepresentation in Omnibox * CVE-2026-95280: Race condition in V8 * CVE-2026-95281: Buffer overflow in ANGLE * CVE-2026-95282: Use after free in Platform * CVE-2026-95283: Buffer overflow in Tint * CVE-2026-95284: Buffer overflow in ANGLE * CVE-2026-95285: Missing authorization in WebView * CVE-2026-95286: Type confusion in Bindings * CVE-2026-95287: Missing authorization in Navigation * CVE-2026-95288: UI misrepresentation in Mobile * CVE-2026-95289: Incorrect authorization in Scroll * CVE-2026-95290: Missing authorization in NFC * CVE-2026-95291: UI misrepresentation in SecurityIndicators * CVE-2026-95292: Incorrect authorization in Safebrowsing * CVE-2026-95293: Uninitialized resource in GPU * CVE-2026-95294: UI misrepresentation in Browser * CVE-2026-95295: Information leak in Mobile * CVE-2026-95296: Missing authorization in Core * CVE-2026-95297: Missing authorization in Contextual Tasks * CVE-2026-95298: Use after free in Browser * CVE-2026-95299: Use after free in GPU * CVE-2026-95300: Missing authorization in DevTools * CVE-2026-95301: Missing authorization in Extensions * CVE-2026-95302: Incorrect authorization in WebAPKs * CVE-2026-95303: Incomplete cleanup in SmartCard * CVE-2026-95304: Out of bounds write in V8 * CVE-2026-95305: UI misrepresentation in Chromoting * CVE-2026-95306: Type confusion in V8 * CVE-2026-95307: UI misrepresentation in ExtensionsMenu * CVE-2026-95308: Integer overflow in Metrics * CVE-2026-95309: UI misrepresentation in Mobile * CVE-2026-95310: Use after free in AdFilter * CVE-2026-95311: Free of non-heap memory in Fonts * CVE-2026-95312: Information leak in Passwords * CVE-2026-95313: Use after free in Fullscreen * CVE-2026-95314: Incorrect authorization in HID * CVE-2026-95315: Use after free in Aura * CVE-2026-95316: Unchecked return value in Performance * CVE-2026-95317: Incorrect authorization in MediaCapture * CVE-2026-95318: Buffer overflow in Video * CVE-2026-95319: Use after free in Printing * CVE-2026-95320: Missing authorization in Navigation * CVE-2026-95321: UI misrepresentation in Payments * CVE-2026-95322: Out of bounds write in GPU * CVE-2026-95323: UI misrepresentation in Chromium * CVE-2026-95324: Uninitialized resource in GPU * CVE-2026-95325: Use after free in ANGLE * CVE-2026-95326: Incomplete cleanup in Bluetooth * CVE-2026-95327: Information leak in Networking * CVE-2026-95328: Confused deputy in Mobile * CVE-2026-95329: Out of bounds write in WebGL * CVE-2026-95330: Improper state validation in Downloads * CVE-2026-95331: Out of bounds write in ANGLE * CVE-2026-95332: Use of uninitialized variable in Tint * CVE-2026-95333: Use after free in Metrics * CVE-2026-95334: Incorrect reference resolution in WebProtect * CVE-2026-95335: Use after free in HID * CVE-2026-95336: Information leak in Transactions Platform * CVE-2026-95337: UI misrepresentation in Messages * CVE-2026-95338: Use after free in PDFium * CVE-2026-95339: Use after free in ServiceWorker * CVE-2026-95340: Incorrect authorization in PictureInPicture * CVE-2026-95341: Improper input validation in Desktop * CVE-2026-95342: Missing authorization in V8 * CVE-2026-95343: Use after free in WebAudio * CVE-2026-95344: Race condition in DevTools * CVE-2026-95345: Use after free in Actor * CVE-2026-95346: UI misrepresentation in Chromoting * CVE-2026-95347: Use after free in Updater * CVE-2026-95348: Use after free in Bluetooth * CVE-2026-95349: Buffer overflow in WebGL * CVE-2026-95350: Buffer overflow in ANGLE * CVE-2026-95351: Use after free in Views * CVE-2026-95352: Incorrect authorization in DevTools * CVE-2026-95353: Use after free in Bindings * CVE-2026-95354: Use after free in Verifier * CVE-2026-95355: Incorrect authorization in Navigation * CVE-2026-95356: Use after free in WindowDialog * CVE-2026-95357: Out of bounds write in GPU * CVE-2026-95358: Incorrect authorization in Mobile * CVE-2026-95359: Uninitialized resource in GPU * CVE-2026-95360: Race condition in Editing * CVE-2026-95361: Confused deputy in DevTools * CVE-2026-95362: Cross-site request forgery in DevTools * CVE-2026-95363: UI misrepresentation in FileSystem * CVE-2026-95364: Improper input validation in Passwords * CVE-2026-95365: Type confusion in IndexedDB * CVE-2026-95366: Use of released resource in Core * CVE-2026-95367: Information leak in DataTransfer * CVE-2026-95368: Incorrect authorization in DevTools * CVE-2026-95369: Inappropriate implementation in XML * CVE-2026-95370: Inappropriate implementation in NFC * CVE-2026-95371: Missing authorization in Views * CVE-2026-95372: Use after free in Chromecast * CVE-2026-95373: Use after free in DevTools * CVE-2026-95374: Incorrect authorization in Network * CVE-2026-95375: Incorrect authorization in BrowserTag * CVE-2026-95376: Externally controlled reference in DevTools * CVE-2026-95380: Type confusion in V8 * CVE-2026-95381: Improper input validation in Printing * CVE-2026-95382: Improper input validation in Auth * CVE-2026-95384: Race condition in Transactions Platform * CVE-2026-95385: Inappropriate implementation in PlatformIntegration
2026-09-18 Than Ngo <than at redhat dot com> - 153.0.8010.52-1 - Update to 153.0.8010.52 * CVE-2026-91708: Race condition in Network * CVE-2026-91709: Type confusion in ServiceWorker * CVE-2026-91710: Use after free in WebAppInstalls * CVE-2026-91711: Out of bounds write in ServiceWorker * CVE-2026-91712: Race condition in Extensions * CVE-2026-91713: Missing authorization in Browser * CVE-2026-91714: Observable discrepancy in Fonts * CVE-2026-91715: Type confusion in ServiceWorker * CVE-2026-91716: Use after free in Auth * CVE-2026-91717: Missing authorization in Android * CVE-2026-91718: Use after free in Core * CVE-2026-91719: Code injection in XML * CVE-2026-91720: Uninitialized resource in ANGLE * CVE-2026-91721: Use after free in Internals * CVE-2026-91722: Use after free in Input * CVE-2026-91723: Race condition in WebAppInstalls * CVE-2026-91724: Use after free in Input * CVE-2026-91725: Observable discrepancy in CSS * CVE-2026-91726: Out of bounds read in WebGL * CVE-2026-91727: Incorrect reference resolution in Extensions * CVE-2026-91728: Integer overflow in V8 * CVE-2026-91729: Use after free in DigitalCredentials * CVE-2026-91730: Incomplete cleanup in GetUserMedia * CVE-2026-91731: Type confusion in Compositing * CVE-2026-91732: Missing authorization in AppManifest * CVE-2026-91733: Improper state validation in Skia * CVE-2026-91734: Incorrect authorization in Core * CVE-2026-91735: Incorrect authorization in WebUI * CVE-2026-91736: Use after free in DOM * CVE-2026-91737: Use after free in PDF * CVE-2026-91738: Improper input validation in ANGLE * CVE-2026-91739: Missing authorization in Transactions Platform * CVE-2026-91740: Uninitialized resource in Skia * CVE-2026-91741: Type confusion in CacheStorage * CVE-2026-91742: Confused deputy in PriceTracking * CVE-2026-91743: Race condition in Core * CVE-2026-91744: Race condition in PlatformIntegration * CVE-2026-91745: Use after free in V8 * CVE-2026-91746: Integer overflow in Compositing * CVE-2026-91747: Use after free in Skia * CVE-2026-91748: Race condition in Extensions * CVE-2026-91749: Use after free in Workers * CVE-2026-93372: Buffer overflow in WebGL * CVE-2026-93373: Use after free in Extensions * CVE-2026-93374: Use after free in Dawn * CVE-2026-93375: Incorrect reference resolution in Tracing * CVE-2026-93376: Out of bounds read in DataTransfer * CVE-2026-93377: Type confusion in V8 * CVE-2026-93378: Missing authorization in Storage * CVE-2026-93379: Incorrect authorization in ORB * CVE-2026-93380: Race condition in FileSystem * CVE-2026-93381: Buffer overflow in PDFium * CVE-2026-93382: Use after free in PDFium * CVE-2026-93383: Information leak in Permissions * CVE-2026-93384: Server-side request forgery in Omnibox * CVE-2026-93385: Information leak in Paint * CVE-2026-93386: UI misrepresentation in WebAppInstalls * CVE-2026-93387: Improper state validation in Skia
2026-09-17 Dominik Mierzejewski <dominik at greysector dot net> - 153.0.8010.36-2 - Rebuild for FFmpeg 9
2026-09-14 Than Ngo <than at redhat dot com> - 153.0.8010.36-1 - Update to 153.0.8010.36 * CVE-2026-87429: Missing authorization in ServiceWorker * CVE-2026-87430: Buffer overflow in WebRTC * CVE-2026-87431: Missing authorization in Extensions * CVE-2026-87432: Incorrect authorization in Navigation * CVE-2026-87433: Race condition in FileAPI * CVE-2026-87434: Missing authorization in CORS * CVE-2026-87435: Information leak in ControlledFrame * CVE-2026-87436: Incomplete cleanup in Browser * CVE-2026-87437: Information leak in Frames * CVE-2026-87438: Out of bounds write in WebGL * CVE-2026-87439: Information leak in ServiceWorker * CVE-2026-87440: Out of bounds read in Media * CVE-2026-87441: Missing authorization in Downloads * CVE-2026-87442: Confused deputy in Prerender * CVE-2026-87443: Missing authorization in Actor * CVE-2026-87444: Memory corruption in Codecs * CVE-2026-87445: UI misrepresentation in Session * CVE-2026-87446: Incomplete cleanup in Extensions * CVE-2026-87447: Incorrect authorization in Network * CVE-2026-87448: Use after free in DevTools * CVE-2026-87449: Cross-site request forgery in DeviceBoundSessionCredentials * CVE-2026-87450: Incorrect authorization in Permissions * CVE-2026-87451: Information leak in Downloads * CVE-2026-87452: Incorrect authorization in GPU * CVE-2026-87453: Confused deputy in BackgroundFetch * CVE-2026-87454: Information leak in Enterprise * CVE-2026-87455: Use after free in Aura * CVE-2026-87456: Uninitialized resource in Media * CVE-2026-87457: Race condition in Updater * CVE-2026-87458: UI misrepresentation in Geometry * CVE-2026-87459: Observable discrepancy in Select * CVE-2026-87460: Use after free in Platform * CVE-2026-87461: Information leak in Core * CVE-2026-87462: UI misrepresentation in FedCM * CVE-2026-87463: Incorrect authorization in Certificate * CVE-2026-87464: Use after free in WebGL * CVE-2026-87465: Incorrect authorization in Downloads * CVE-2026-87466: Incorrect authorization in Workers * CVE-2026-87467: Race condition in Updater * CVE-2026-87468: Incorrect authorization in Isolated * CVE-2026-87469: Improper input validation in Extensions * CVE-2026-87470: Improper quantity validation in Tint * CVE-2026-87471: Incorrect authorization in ServiceWorker * CVE-2026-87472: Improper input validation in FedCM * CVE-2026-87473: Incorrect authorization in FileHandling * CVE-2026-87474: Use after free in Payments * CVE-2026-87475: Missing authorization in Omnibox * CVE-2026-87476: Incorrect authorization in Loader * CVE-2026-87477: Information leak in Core * CVE-2026-87478: Observable discrepancy in Autofill * CVE-2026-87479: Insufficient policy enforcement in Extensions * CVE-2026-87480: Use after free in Printing * CVE-2026-87481: Incorrect authorization in WebView * CVE-2026-87482: Cleartext transmission of sensitive data in HttpsUpgrades * CVE-2026-87483: Incorrect authorization in Browser * CVE-2026-87484: UI misrepresentation in Geometry * CVE-2026-87485: Incorrect authorization in CORS * CVE-2026-87486: Clickjacking in TrustedWebActivities * CVE-2026-87487: Missing authorization in FileSystem * CVE-2026-87488: Use after free in WebGL * CVE-2026-87489: Memory corruption in V8 * CVE-2026-87490: Information leak in Transactions Platform * CVE-2026-87491: Out of bounds write in V8 * CVE-2026-87492: Incorrect authorization in DevTools * CVE-2026-87493: Missing authorization in FileSystem * CVE-2026-87494: Use after free in Browser * CVE-2026-87495: Information leak in Scroll * CVE-2026-87496: UI misrepresentation in Browser * CVE-2026-87497: Uninitialized resource in Codecs * CVE-2026-87498: Missing authorization in WebUI * CVE-2026-87499: Incorrect authorization in Network * CVE-2026-87500: Improper validation of array index in ANGLE * CVE-2026-87501: UI misrepresentation in Passwords * CVE-2026-87502: Confused deputy in Fullscreen * CVE-2026-87503: Inappropriate implementation in Downloads * CVE-2026-87504: Use after free in Core * CVE-2026-87505: Incorrect authorization in FileSystem * CVE-2026-87506: Privilege elevation in WebUI * CVE-2026-87507: UI misrepresentation in Downloads * CVE-2026-87508: Incorrect authorization in Loader * CVE-2026-87509: Incorrect authorization in Updater * CVE-2026-87510: Improper input validation in FileAPI * CVE-2026-87511: Missing authorization in DevTools * CVE-2026-87512: Use after free in ANGLE * CVE-2026-87513: Missing authorization in ControlledFrame * CVE-2026-87514: Use after free in Views * CVE-2026-87515: Incorrect authorization in FileAPI * CVE-2026-87516: Observable discrepancy in Navigation * CVE-2026-87517: Race condition in Mobile * CVE-2026-87518: Observable discrepancy in Safebrowsing * CVE-2026-87519: Incorrect authorization in Safebrowsing * CVE-2026-87520: Use after free in Dawn * CVE-2026-87521: Information leak in WebMCP * CVE-2026-87522: Missing authorization in WebView * CVE-2026-87523: Race condition in DataTransfer * CVE-2026-87524: Use after free in Core * CVE-2026-87525: Out of bounds read in Chromoting * CVE-2026-87526: Use after free in Passwords * CVE-2026-87527: Buffer overflow in WebGL * CVE-2026-87528: Type confusion in Rust * CVE-2026-87529: Numeric truncation error in Media * CVE-2026-87530: Uncontrolled search path element in CredentialProvider * CVE-2026-87531: Information leak in CORS * CVE-2026-87532: Improper state validation in Safebrowsing * CVE-2026-87533: Use after free in DevTools * CVE-2026-87534: Missing authorization in WebView * CVE-2026-87535: Information loss or omission in Safebrowsing * CVE-2026-87536: Use after free in V8 * CVE-2026-87537: Missing authorization in Extensions * CVE-2026-87538: Clickjacking in Input * CVE-2026-87539: Observable discrepancy in Network * CVE-2026-87540: Incorrect authorization in Isolated * CVE-2026-87541: Information leak in Navigation * CVE-2026-87542: Use after free in Input * CVE-2026-87543: Missing authorization in Core * CVE-2026-87544: Incorrect authorization in Extensions * CVE-2026-87545: Information leak in Mobile * CVE-2026-87546: Incorrect type conversion or cast in Safebrowsing * CVE-2026-87547: Incorrect reference resolution in FileSystem * CVE-2026-87548: Improper state validation in Installer * CVE-2026-87549: Incomplete cleanup in Downloads * CVE-2026-87550: Improper encoding or escaping of output in CSS * CVE-2026-87551: Improper certificate validation in CORS * CVE-2026-87552: Missing authorization in TrustedWebActivities * CVE-2026-87553: Improper input validation in SiteIsolation * CVE-2026-87554: Race condition in Chromoting * CVE-2026-87555: Uninitialized resource in GPU * CVE-2026-87556: Missing authorization in Browser * CVE-2026-87557: Missing authorization in LocalNetworkAccess * CVE-2026-87558: Use after free in Payments * CVE-2026-87559: UI misrepresentation in UI * CVE-2026-87560: Missing authorization in Browser * CVE-2026-87561: Incorrect authorization in Web Authentication * CVE-2026-87562: Incorrect reference resolution in Accessibility * CVE-2026-87563: Origin validation error in Paint * CVE-2026-87564: Type confusion in V8 * CVE-2026-87565: Information leak in Passwords * CVE-2026-87566: Observable discrepancy in Layout * CVE-2026-87567: UI misrepresentation in UrlFormatting * CVE-2026-87568: Improper input validation in Chromium * CVE-2026-87569: Missing authorization in Views * CVE-2026-87570: Incorrect authorization in SiteIsolation * CVE-2026-87571: Improper certificate validation in Loader * CVE-2026-87572: Injection in DevTools * CVE-2026-87573: Improper input validation in Network * CVE-2026-87574: Information leak in ServiceWorker * CVE-2026-87575: Incorrect authorization in Loader * CVE-2026-87576: Uninitialized resource in GPU * CVE-2026-87577: Incorrect authorization in Isolated * CVE-2026-87578: Use after free in Receiver * CVE-2026-87579: Buffer overflow in WebRTC * CVE-2026-87580: Incorrect authorization in WebAppInstalls * CVE-2026-87581: Use after free in Payments * CVE-2026-87582: Confused deputy in DataTransfer * CVE-2026-87583: UI misrepresentation in Passwords * CVE-2026-87584: Incorrect authorization in WebUI * CVE-2026-87585: Double free in PDFium * CVE-2026-87586: Out of bounds read in ANGLE * CVE-2026-87587: Use after free in V8 * CVE-2026-87588: Use after free in Chromecast * CVE-2026-87589: Incorrect authorization in SiteIsolation * CVE-2026-87590: Improper input validation in Passwords * CVE-2026-87591: Incorrect authorization in Extensions * CVE-2026-87592: Out of bounds read in Tint * CVE-2026-87593: Information leak in Editing * CVE-2026-87594: Incorrect authorization in DataTransfer * CVE-2026-87595: Server-side request forgery in Mobile * CVE-2026-87596: Out of bounds read in ANGLE * CVE-2026-87597: UI misrepresentation in CustomTabs * CVE-2026-87598: Incorrect authorization in ServiceWorker * CVE-2026-87599: Improper input validation in Interstitials * CVE-2026-87600: Improper input validation in Safebrowsing * CVE-2026-87601: Race condition in V8 * CVE-2026-87602: Out of bounds read in ANGLE * CVE-2026-87603: Missing authorization in FileSystem * CVE-2026-87604: Out of bounds read in ANGLE * CVE-2026-87605: Missing authorization in Contacts * CVE-2026-87606: Missing authorization in SiteIsolation * CVE-2026-87607: Use after free in Device * CVE-2026-87608: Improper certificate validation in FedCM * CVE-2026-87609: Use after free in Sharing * CVE-2026-87610: Incorrect authorization in Omnibox * CVE-2026-87611: Missing authorization in FileSystem * CVE-2026-87612: Type confusion in V8 * CVE-2026-87613: Incorrect reference resolution in Extensions * CVE-2026-87614: Incorrect authorization in ServiceWorker * CVE-2026-87615: Race condition in Payments * CVE-2026-87616: Improper initialization in Views * CVE-2026-87617: Use after free in DevTools * CVE-2026-87618: Incorrect reference resolution in Storage * CVE-2026-87619: Observable discrepancy in Prefetch * CVE-2026-87620: Observable discrepancy in SVG * CVE-2026-87621: Out of bounds write in ANGLE * CVE-2026-87622: Missing authorization in FedCM * CVE-2026-87623: Observable discrepancy in DOM * CVE-2026-87624: UI misrepresentation in Passwords * CVE-2026-87625: Use after free in V8 * CVE-2026-87626: Incorrect authorization in DeviceBoundSessionCredentials * CVE-2026-87627: Interpretation conflict in Safebrowsing * CVE-2026-87628: Use after free in Cast * CVE-2026-87629: Incorrect authorization in Sources * CVE-2026-87630: Integer overflow in WebRTC * CVE-2026-87631: Missing authorization in DOM * CVE-2026-87632: Cross-site scripting in SanitizerAPI * CVE-2026-87633: Use after free in Views * CVE-2026-87634: Use after free in WebPackaging * CVE-2026-87635: UI misrepresentation in Payments * CVE-2026-87636: Type confusion in XML * CVE-2026-87637: Use after free in Extensions * CVE-2026-87638: Out of bounds write in Media * CVE-2026-87639: Use after free in WebPackaging * CVE-2026-87640: Out of bounds read in WebView * CVE-2026-87641: Race condition in Browser * CVE-2026-87642: Uninitialized resource in WebGL * CVE-2026-87643: Integer overflow in GPU * CVE-2026-87644: Incorrect authorization in Views * CVE-2026-87645: Improper state validation in Safebrowsing * CVE-2026-87646: Use after free in Web Authentication * CVE-2026-87647: Uninitialized resource in GPU * CVE-2026-87648: Use after free in ANGLE * CVE-2026-87649: UI misrepresentation in Downloads * CVE-2026-87650: Out of bounds read in WebGL * CVE-2026-87651: Incorrect authorization in Paint * CVE-2026-87652: Incorrect authorization in PushAPI * CVE-2026-87653: UI misrepresentation in FullScreen * CVE-2026-87654: Buffer overflow in ANGLE * CVE-2026-87655: Clickjacking in Downloads * CVE-2026-87656: Improper state validation in Safebrowsing * CVE-2026-87657: Use after free in V8 * CVE-2026-87658: Information leak in Extensions
2026-09-05 Than Ngo <than at redhat dot com> - 152.0.7977.82-1 - Update to 152.0.7977.82 * CVE-2026-85046: Type confusion in V8 * CVE-2026-85052: Out of bounds read in CrashReporting * CVE-2026-85043: Incomplete cleanup in Network * CVE-2026-85048: Use after free in Compositing * CVE-2026-85045: Race condition in V8 * CVE-2026-85050: Out of bounds write in WebGL * CVE-2026-85053: Improper resource exposure in CacheStorage * CVE-2026-85042: Use after free in DevTools * CVE-2026-85049: Use after free in Skia * CVE-2026-85051: Type confusion in Compositing * CVE-2026-85047: Improper input validation in Transactions Platform * CVE-2026-85044: Use of released resource in Mobile

Dependencies

Provides

  • chromium-common
  • chromium-common(x86-64)

Files


Sources on Pagure