p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de la pila Sistemas operativos · Página 128

Vulnerabilidades publicadas para Sistemas operativos en los últimos 30 días: 6571. Incluidas en el catálogo KEV: 4.

Filtrar vulnerabilidades
Sistemas operativos

Vulnerabilidades: 160576

  1. CVE-2026-113340

    Media · CVSS 6.5EPSS 0,34%Corrección disponible

    CVE-2026-113340

    Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

    • Actualiza a 156.0.8078.47-1
    • Actualiza a 156.0.8078.47-1~deb12u1
    • Actualiza a 156.0.8078.47-1~deb13u1
    Publicación Actualización
  2. CVE-2026-113089

    Crítica · CVSS 9.6EPSS 0,5%Corrección disponible

    CVE-2026-113089

    Incorrect authorization in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)

    • Actualiza a 156.0.8078.47-1
    • Actualiza a 156.0.8078.47-1~deb12u1
    • Actualiza a 156.0.8078.47-1~deb13u1
    Publicación Actualización
  3. CVE-2026-113235

    Crítica · CVSS 9.6EPSS 0,5%Corrección disponible

    CVE-2026-113235

    Missing authorization in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

    • Actualiza a 156.0.8078.47-1
    • Actualiza a 156.0.8078.47-1~deb12u1
    • Actualiza a 156.0.8078.47-1~deb13u1
    Publicación Actualización
  4. CVE-2026-113157

    Media · CVSS 6.5EPSS 0,34%Corrección disponible

    CVE-2026-113157

    Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

    • Actualiza a 156.0.8078.47-1
    • Actualiza a 156.0.8078.47-1~deb12u1
    • Actualiza a 156.0.8078.47-1~deb13u1
    Publicación Actualización
  5. CVE-2026-113143

    Media · CVSS 4.3EPSS 0,34%Corrección disponible

    CVE-2026-113143

    Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

    • Actualiza a 156.0.8078.47-1
    • Actualiza a 156.0.8078.47-1~deb12u1
    • Actualiza a 156.0.8078.47-1~deb13u1
    Publicación Actualización
  6. CVE-2026-113200

    Alta · CVSS 8.8EPSS 0,4%Corrección disponible

    CVE-2026-113200

    Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

    • Actualiza a 156.0.8078.47-1
    • Actualiza a 156.0.8078.47-1~deb12u1
    • Actualiza a 156.0.8078.47-1~deb13u1
    Publicación Actualización
  7. CVE-2026-113111

    Alta · CVSS 8.8EPSS 0,42%Corrección disponible

    CVE-2026-113111

    Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

    • Actualiza a 156.0.8078.47-1
    • Actualiza a 156.0.8078.47-1~deb12u1
    • Actualiza a 156.0.8078.47-1~deb13u1
    Publicación Actualización
  8. CVE-2026-113008

    Alta · CVSS 8.8EPSS 0,42%Corrección disponible

    CVE-2026-113008

    Race condition in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

    • Actualiza a 156.0.8078.47-1
    • Actualiza a 156.0.8078.47-1~deb12u1
    • Actualiza a 156.0.8078.47-1~deb13u1
    Publicación Actualización
  9. CVE-2026-113050

    Media · CVSS 6.5EPSS 0,3%Corrección disponible

    CVE-2026-113050

    Incomplete cleanup in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)

    • Actualiza a 156.0.8078.47-1
    • Actualiza a 156.0.8078.47-1~deb12u1
    • Actualiza a 156.0.8078.47-1~deb13u1
    Publicación Actualización
  10. CVE-2026-113096

    Alta · CVSS 8.8EPSS 0,44%Corrección disponible

    CVE-2026-113096

    UI misrepresentation in Text in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)

    • Actualiza a 156.0.8078.47-1
    • Actualiza a 156.0.8078.47-1~deb12u1
    • Actualiza a 156.0.8078.47-1~deb13u1
    Publicación Actualización
  11. CVE-2026-113062

    Alta · CVSS 8.8EPSS 0,37%Corrección disponible

    CVE-2026-113062

    Missing authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

    • Actualiza a 156.0.8078.47-1
    • Actualiza a 156.0.8078.47-1~deb12u1
    • Actualiza a 156.0.8078.47-1~deb13u1
    Publicación Actualización
  12. CVE-2026-113297

    Media · CVSS 6.5EPSS 0,33%Corrección disponible

    CVE-2026-113297

    UI misrepresentation in Ozone in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

    • Actualiza a 156.0.8078.47-1
    • Actualiza a 156.0.8078.47-1~deb12u1
    • Actualiza a 156.0.8078.47-1~deb13u1
    Publicación Actualización
  13. CVE-2026-113258

    Alta · CVSS 8.8EPSS 0,43%Corrección disponible

    CVE-2026-113258

    Use after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)

    • Actualiza a 156.0.8078.47-1
    • Actualiza a 156.0.8078.47-1~deb12u1
    • Actualiza a 156.0.8078.47-1~deb13u1
    Publicación Actualización
  14. CVE-2026-113170

    Alta · CVSS 8.8EPSS 0,37%Corrección disponible

    CVE-2026-113170

    UI misrepresentation in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)

    • Actualiza a 156.0.8078.47-1
    • Actualiza a 156.0.8078.47-1~deb12u1
    • Actualiza a 156.0.8078.47-1~deb13u1
    Publicación Actualización
  15. CVE-2026-113203

    Alta · CVSS 8.8EPSS 0,4%Corrección disponible

    CVE-2026-113203

    Observable discrepancy in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

    • Actualiza a 156.0.8078.47-1
    • Actualiza a 156.0.8078.47-1~deb12u1
    • Actualiza a 156.0.8078.47-1~deb13u1
    Publicación Actualización
  16. CVE-2026-113197

    Alta · CVSS 8.8EPSS 0,44%Corrección disponible

    CVE-2026-113197

    Observable discrepancy in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

    • Actualiza a 156.0.8078.47-1
    • Actualiza a 156.0.8078.47-1~deb12u1
    • Actualiza a 156.0.8078.47-1~deb13u1
    Publicación Actualización
  17. CVE-2026-113199

    Media · CVSS 6.5EPSS 0,32%Corrección disponible

    CVE-2026-113199

    UI misrepresentation in Payments in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)

    • Actualiza a 156.0.8078.47-1
    • Actualiza a 156.0.8078.47-1~deb12u1
    • Actualiza a 156.0.8078.47-1~deb13u1
    Publicación Actualización
  18. CVE-2026-113002

    Media · CVSS 6.5EPSS 0,33%Corrección disponible

    CVE-2026-113002

    Incorrect authorization in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

    • Actualiza a 156.0.8078.47-1
    • Actualiza a 156.0.8078.47-1~deb12u1
    • Actualiza a 156.0.8078.47-1~deb13u1
    Publicación Actualización
  19. CVE-2026-113065

    Alta · CVSS 8.8EPSS 0,42%Corrección disponible

    CVE-2026-113065

    Improper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted media file. (Chromium security severity: Medium)

    • Actualiza a 156.0.8078.47-1
    • Actualiza a 156.0.8078.47-1~deb12u1
    • Actualiza a 156.0.8078.47-1~deb13u1
    Publicación Actualización
  20. CVE-2026-113233

    Alta · CVSS 8.8EPSS 0,42%Corrección disponible

    CVE-2026-113233

    Race condition in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

    • Actualiza a 156.0.8078.47-1
    • Actualiza a 156.0.8078.47-1~deb12u1
    • Actualiza a 156.0.8078.47-1~deb13u1
    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →