p PatchFirst

PatchFirst · Latest vulnerabilities

Operating systems stack vulnerabilities · Page 144

Vulnerabilities published for Operating systems in the last 30 days: 6586. Listed in the KEV catalogue: 4.

Filter vulnerabilities
Operating systems

Vulnerabilities: 160669

  1. CVE-2026-113044

    High · CVSS 8.8EPSS 0.42%Fix available

    CVE-2026-113044

    Type confusion in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  2. CVE-2026-113305

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113305

    Use after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  3. CVE-2026-113252

    Critical · CVSS 9.6EPSS 0.5%Fix available

    CVE-2026-113252

    Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  4. CVE-2026-113234

    High · CVSS 8.8EPSS 0.42%Fix available

    CVE-2026-113234

    Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  5. CVE-2026-113316

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113316

    Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  6. CVE-2026-113141

    High · CVSS 8.8EPSS 0.41%Fix available

    CVE-2026-113141

    Race condition in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  7. CVE-2026-113284

    High · CVSS 8.8EPSS 0.43%Fix available

    CVE-2026-113284

    Use after free in XML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  8. CVE-2026-113236

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113236

    Improper input validation in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  9. CVE-2026-113315

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113315

    Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  10. CVE-2026-113298

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113298

    UI misrepresentation in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  11. CVE-2026-113253

    High · CVSS 8.8EPSS 0.39%Fix available

    CVE-2026-113253

    Incorrect authorization in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  12. CVE-2026-113163

    High · CVSS 8.8EPSS 0.53%Fix available

    CVE-2026-113163

    Buffer overflow in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  13. CVE-2026-113322

    Medium · CVSS 6.5EPSS 0.34%Fix available

    CVE-2026-113322

    Uninitialized resource in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  14. CVE-2026-113104

    High · CVSS 8.8EPSS 0.42%Fix available

    CVE-2026-113104

    Use after free in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  15. CVE-2026-113188

    High · CVSS 8.8EPSS 0.43%Fix available

    CVE-2026-113188

    Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  16. CVE-2026-113117

    High · CVSS 8.8EPSS 0.42%Fix available

    CVE-2026-113117

    Out of bounds read in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  17. CVE-2026-113193

    Medium · CVSS 6.5EPSS 0.32%Fix available

    CVE-2026-113193

    Type confusion in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  18. CVE-2026-113317

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113317

    Use after free in Accessibility in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  19. CVE-2026-113339

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113339

    Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  20. CVE-2026-113134

    High · CVSS 8.8EPSS 0.42%Fix available

    CVE-2026-113134

    Out of bounds read in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →