p PatchFirst

PatchFirst · Latest vulnerabilities

Operating systems stack vulnerabilities · Page 141

Vulnerabilities published for Operating systems in the last 30 days: 6537. Listed in the KEV catalogue: 4.

Filter vulnerabilities
Operating systems

Vulnerabilities: 160620

  1. CVE-2026-113222

    Critical · CVSS 9.6EPSS 0.47%Fix available

    CVE-2026-113222

    Missing authorization in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  2. CVE-2026-113020

    Critical · CVSS 9.6EPSS 0.5%Fix available

    CVE-2026-113020

    Use after free in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  3. CVE-2026-113334

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113334

    Buffer overflow in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  4. CVE-2026-113324

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113324

    Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  5. CVE-2026-113285

    High · CVSS 8.8EPSS 0.43%Fix available

    CVE-2026-113285

    Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  6. CVE-2026-113210

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113210

    Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  7. CVE-2026-113225

    Medium · CVSS 6.5EPSS 0.33%Fix available

    CVE-2026-113225

    Use after free in Browser in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  8. CVE-2026-113293

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113293

    Out of bounds write in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  9. CVE-2026-113273

    High · CVSS 8.8EPSS 0.43%Fix available

    CVE-2026-113273

    Buffer overflow in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  10. CVE-2026-113266

    High · CVSS 8.8EPSS 0.4%Fix available

    CVE-2026-113266

    Out of bounds read in ANGLE in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  11. CVE-2026-113135

    High · CVSS 8.8EPSS 0.37%Fix available

    CVE-2026-113135

    Use after free in PictureInPicture in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  12. CVE-2026-113044

    High · CVSS 8.8EPSS 0.42%Fix available

    CVE-2026-113044

    Type confusion in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  13. CVE-2026-113305

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113305

    Use after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  14. CVE-2026-113252

    Critical · CVSS 9.6EPSS 0.5%Fix available

    CVE-2026-113252

    Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  15. CVE-2026-113234

    High · CVSS 8.8EPSS 0.42%Fix available

    CVE-2026-113234

    Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  16. CVE-2026-113316

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113316

    Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  17. CVE-2026-113141

    High · CVSS 8.8EPSS 0.41%Fix available

    CVE-2026-113141

    Race condition in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  18. CVE-2026-113284

    High · CVSS 8.8EPSS 0.43%Fix available

    CVE-2026-113284

    Use after free in XML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  19. CVE-2026-113236

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113236

    Improper input validation in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  20. CVE-2026-113315

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113315

    Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →