-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 30 Jul 2026 11:05:35 -0400
Source: chromium
Architecture: source
Version: 151.0.7922.71-1
Distribution: unstable
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (151.0.7922.71-1) unstable; urgency=high
.
[ Andres Salomon ]
* New upstream security release.
- CVE-2026-17650: Use after free in Compositing. Reported by Google.
- CVE-2026-17651: Insufficient validation of untrusted input in Dawn.
Reported by Google.
- CVE-2026-17652: Use after free in Views. Reported by Google.
- CVE-2026-17653: Use after free in Skia. Reported by Google.
- CVE-2026-17654: Race in Updater. Reported by Google.
- CVE-2026-17655: Insufficient validation of untrusted input in ANGLE.
Reported by Google.
- CVE-2026-17656: Use after free in Ozone. Reported by Google.
- CVE-2026-17657: Use after free in Navigation.
Reported by c6eed09fc8b174b0f3eebedcceb1e792.
- CVE-2026-17658: Use after free in V8. Reported by
Duc Nguyen of Calif.io in collaboration with OpenAI Codex Security.
- CVE-2026-17659: Inappropriate implementation in SiteIsolation.
Reported by Google.
- CVE-2026-17660: Insufficient validation of untrusted input in Network.
Reported by Google.
- CVE-2026-17661: Use after free in Loader. Reported by Google.
- CVE-2026-17662: Insufficient policy enforcement in Prefetch.
Reported by Google.
- CVE-2026-17663: Insufficient validation of untrusted input in GPU.
Reported by Google.
- CVE-2026-17664: Insufficient validation of untrusted input in Loader.
Reported by Google.
- CVE-2026-17665: Use after free in V8. Reported by Google.
- CVE-2026-17666: Cryptographic Flaw in Enterprise. Reported by Google.
- CVE-2026-17667: Uninitialized Use in ANGLE. Reported by Google.
- CVE-2026-17668: Uninitialized Use in ANGLE. Reported by Google.
- CVE-2026-17669: Inappropriate implementation in Chrome for iOS.
Reported by Google.
- CVE-2026-17670: Use after free in Views. Reported by Google.
- CVE-2026-17671: Insufficient validation of untrusted input in ANGLE.
Reported by Google.
- CVE-2026-17672: Insufficient validation of untrusted input in
Chromecast. Reported by Google.
- CVE-2026-17673: Integer overflow in QUIC. Reported by Google.
- CVE-2026-17674: Inappropriate implementation in HTML.
Reported by Google.
- CVE-2026-17675: Out of bounds write in ANGLE. Reported by Google.
- CVE-2026-17676: Inappropriate implementation in ANGLE.
Reported by Google.
- CVE-2026-17677: Inappropriate implementation in ANGLE.
Reported by Google.
- CVE-2026-17678: Out of bounds read in ANGLE. Reported by Google.
- CVE-2026-17679: Insufficient validation of untrusted input in
Print Preview. Reported by Google.
- CVE-2026-17680: Heap buffer overflow in Color. Reported by Google.
- CVE-2026-17681: Insufficient validation of untrusted input in
Web Authentication. Reported by Google.
- CVE-2026-17682: Integer overflow in ANGLE. Reported by Google.
- CVE-2026-17683: Inappropriate implementation in ANGLE.
Reported by Google.
- CVE-2026-17684: Insufficient validation of untrusted input in
Chrome for iOS. Reported by Google.
- CVE-2026-17685: Use after free in Autofill. Reported by Google.
- CVE-2026-17686: Insufficient validation of untrusted input in
Passwords. Reported by Google.
- CVE-2026-17687: Type Confusion in ANGLE. Reported by Google.
- CVE-2026-17688: Use after free in Input. Reported by Google.
- CVE-2026-17689: Uninitialized Use in ANGLE. Reported by Google.
- CVE-2026-17690: Insufficient validation of untrusted input in PDF.
Reported by Google.
- CVE-2026-17691: Out of bounds write in ANGLE. Reported by Google.
- CVE-2026-17692: Use after free in DataTransfer. Reported by Google.
- CVE-2026-17693: Inappropriate implementation in FileSystem.
Reported by Google.
- CVE-2026-17694: Use after free in DOM. Reported by Google.
- CVE-2026-17695: Inappropriate implementation in ANGLE.
Reported by Google.
- CVE-2026-17696: Side-channel information leakage in Media.
Reported by Google.
- CVE-2026-17697: Type Confusion in ANGLE. Reported by Google.
- CVE-2026-17698: Insufficient validation of untrusted input in UI.
Reported by Google.
- CVE-2026-17699: Use after free in Views. Reported by Google.
- CVE-2026-17700: Insufficient validation of untrusted input in Actor.
Reported by Google.
- CVE-2026-17701: Out of bounds read in ANGLE. Reported by Google.
- CVE-2026-17702: Inappropriate implementation in Skia.
Reported by Google.
- CVE-2026-17703: Policy bypass in Chrome for iOS. Reported by Google.
- CVE-2026-17704: Use after free in ANGLE. Reported by Google.
- CVE-2026-17705: Integer overflow in libxml.
Reported by ebassi of Igalia.
- CVE-2026-17706: Insufficient validation of untrusted input in Media.
Reported by Google.
- CVE-2026-17707: Uninitialized Use in Media. Reported by Google.
- CVE-2026-17708: Use after free in Audio. Reported by Google.
- CVE-2026-17709: Race in Downloads. Reported by Google.
- CVE-2026-17710: Inappropriate implementation in MHTML.
Reported by Google.
- CVE-2026-17711: Race in Downloads. Reported by Google.
- CVE-2026-17712: Race in Skia. Reported by Google.
- CVE-2026-17713: Insufficient validation of untrusted input
in Accessibility. Reported by Google.
- CVE-2026-17714: Uninitialized Use in ANGLE. Reported by Google.
- CVE-2026-17715: Inappropriate implementation in Passwords.
Reported by Google.
- CVE-2026-17716: Use after free in Updater. Reported by Google.
- CVE-2026-17717: Integer overflow in ANGLE. Reported by Google.
- CVE-2026-17718: Use after free in ANGLE. Reported by Google.
- CVE-2026-17719: Use after free in Input. Reported by Google.
- CVE-2026-17720: Insufficient policy enforcement in Passwords.
Reported by Google.
- CVE-2026-17721: Out of bounds write in ANGLE. Reported by Google.
- CVE-2026-17722: Object lifecycle issue in WebView. Reported by Google.
- CVE-2026-17723: Use after free in Media. Reported by Google.
- CVE-2026-17724: Race in Chrome for iOS. Reported by Google.
- CVE-2026-17725: Type Confusion in V8. Reported by nh.dev2022.
- CVE-2026-17726: Integer overflow in WebGL. Reported by Google.
- CVE-2026-17727: Out of bounds write in WebGL. Reported by Google.
- CVE-2026-17728: Inappropriate implementation in Extensions.
Reported by Suhas S P.
- CVE-2026-17758: Heap buffer overflow in Dawn.
Reported by Hyeonjun Ahn (@_deayzl).
- CVE-2026-17732: Inappropriate implementation in SVG.
Reported by Lyra Rebane (rebane2001).
- CVE-2026-17729: Use after free in V8. Reported by wang1r && lhfff.
- CVE-2026-17730: Side-channel information leakage in Autofill.
Reported by Google.
- CVE-2026-17731: Inappropriate implementation in Autofill. Reported by
Manojkumar Jaganathan Aka TheWhiteEvil with HackerBro Technologies.
- CVE-2026-17733: Inappropriate implementation in QUIC.
Reported by Google.
- CVE-2026-17734: Inappropriate implementation in Autofill.
Reported by Google.
- CVE-2026-17735: Insufficient validation of untrusted input in BFCache.
Reported by Google.
- CVE-2026-17736: Insufficient validation of untrusted input in WebView.
Reported by Google.
- CVE-2026-17737: Use after free in Bluetooth. Reported by Google.
- CVE-2026-17738: Insufficient validation of untrusted input in
Payments. Reported by Google.
- CVE-2026-17739: Insufficient policy enforcement in Extensions.
Reported by Google.
- CVE-2026-17740: Uninitialized Use in ANGLE. Reported by Google.
- CVE-2026-17741: Insufficient validation of untrusted input in WebView.
Reported by Google.
- CVE-2026-17742: Insufficient policy enforcement in Payments.
Reported by Google.
- CVE-2026-17743: Insufficient policy enforcement in ControlledFrame.
Reported by Google.
- CVE-2026-17744: Inappropriate implementation in File Input.
Reported by Google.
- CVE-2026-17745: Out of bounds read in Skia. Reported by Google.
- CVE-2026-17746: Use after free in GPU. Reported by Google.
- CVE-2026-17747: Insufficient validation of untrusted input in
Payments. Reported by Google.
- CVE-2026-17748: Inappropriate implementation in Extensions.
Reported by Google.
- CVE-2026-17749: Insufficient validation of untrusted input in
Extensions. Reported by Google.
- CVE-2026-17750: Use after free in ANGLE. Reported by Google.
- CVE-2026-17751: Inappropriate implementation in AdFilter.
Reported by Google.
- CVE-2026-17752: Use after free in Views. Reported by Google.
- CVE-2026-17753: Inappropriate implementation in Autofill.
Reported by Google.
- CVE-2026-17754: Inappropriate implementation in Blink.
Reported by Google.
- CVE-2026-17755: Incorrect security UI in Extensions.
Reported by Google.
- CVE-2026-17756: Insufficient policy enforcement in Presentation.
Reported by Google.
- CVE-2026-17757: Uninitialized Use in Skia. Reported by Google.
- CVE-2026-17759: Uninitialized Use in Codecs. Reported by Google.
- CVE-2026-17760: Side-channel information leakage in NoStatePrefetch.
Reported by Google.
- CVE-2026-17761: Insufficient validation of untrusted input in
Chrome for iOS. Reported by Google.
- CVE-2026-17762: Inappropriate implementation in Chrome for iOS.
Reported by Google.
- CVE-2026-17763: Inappropriate implementation in GPU.
Reported by Google.
- CVE-2026-17764: Inappropriate implementation in FedCM.
Reported by Google.
- CVE-2026-17765: Inappropriate implementation in WebProtect.
Reported by Google.
- CVE-2026-17766: Insufficient validation of untrusted input in
Clipboard. Reported by Google.
- CVE-2026-17767: Insufficient validation of untrusted input in WebView.
Reported by Google.
- CVE-2026-17768: Insufficient validation of untrusted input in
WebSockets. Reported by Google.
- CVE-2026-17769: Insufficient validation of untrusted input in Cast.
Reported by Google.
- CVE-2026-17770: Out of bounds read in Media. Reported by Google.
- CVE-2026-17771: Uninitialized Use in Skia. Reported by Google.
- CVE-2026-17772: Out of bounds read in WebGL. Reported by Google.
- CVE-2026-17773: Insufficient validation of untrusted input in Cast.
Reported by Google.
- CVE-2026-17774: Insufficient validation of untrusted input in
Variations. Reported by Google.
- CVE-2026-17775: Inappropriate implementation in PresentationAPI.
Reported by Google.
- CVE-2026-17776: Policy bypass in Receiver. Reported by Google.
- CVE-2026-17777: Inappropriate implementation in Autofill.
Reported by Google.
- CVE-2026-17778: Use after free in Extensions. Reported by Google.
- CVE-2026-17779: Inappropriate implementation in Site Isolation.
Reported by Google.
- CVE-2026-17780: Inappropriate implementation in Isolated Web Apps.
Reported by Google.
- CVE-2026-17781: Inappropriate implementation in Extensions.
Reported by Google.
- CVE-2026-17782: Incorrect security UI in Chrome for iOS.
Reported by Google.
- CVE-2026-17783: Inappropriate implementation in Loader.
Reported by Google.
- CVE-2026-17784: Use after free in Audio. Reported by Google.
- CVE-2026-17785: Uninitialized Use in ANGLE. Reported by Google.
- CVE-2026-17786: Insufficient validation of untrusted input in DevTools.
Reported by Google.
- CVE-2026-17787: Inappropriate implementation in DevTools.
Reported by Google.
- CVE-2026-17788: Inappropriate implementation in Blink.
Reported by Google.
- CVE-2026-17789: Insufficient validation of untrusted input in
Chrome for iOS. Reported by Google.
- CVE-2026-17790: Uninitialized Use in ANGLE. Reported by Google.
- CVE-2026-17791: Insufficient validation of untrusted input in Payments.
Reported by Google.
- CVE-2026-17792: Inappropriate implementation in Credential Management.
Reported by Google.
- CVE-2026-17793: Inappropriate implementation in Messages.
Reported by Google.
- CVE-2026-17794: Insufficient validation of untrusted input in Mobile.
Reported by Google.
- CVE-2026-17795: Insufficient validation of untrusted input in
GetUserMedia. Reported by Mihnea Nicolau.
- CVE-2026-17796: Side-channel information leakage in WebXR.
Reported by Google.
- CVE-2026-17797: Inappropriate implementation in CSS. Reported by Google
- CVE-2026-17798: Inappropriate implementation in Cast.
Reported by Google.
- CVE-2026-17799: Insufficient validation of untrusted input in
Safe Browsing. Reported by Google.
- CVE-2026-17800: Side-channel information leakage in MediaRecording.
Reported by Google.
- CVE-2026-17801: Out of bounds memory access in ANGLE.
Reported by Google.
- CVE-2026-17802: Side-channel information leakage in GPU.
Reported by Google.
- CVE-2026-17803: Insufficient validation of untrusted input in
Save to Drive. Reported by Google.
- CVE-2026-17804: Use after free in Media. Reported by Google.
- CVE-2026-17805: Insufficient policy enforcement in Glic.
Reported by Google.
- CVE-2026-17806: Insufficient validation of untrusted input in
Extensions. Reported by Google.
- CVE-2026-17807: Use after free in V8. Reported by Google.
- CVE-2026-17808: Uninitialized Use in WebGL. Reported by Google.
- CVE-2026-17809: Insufficient validation of untrusted input in
Extensions. Reported by Google.
- CVE-2026-17810: Uninitialized Use in Dawn. Reported by Google.
- CVE-2026-17811: Use after free in ANGLE. Reported by Google.
- CVE-2026-17812: Inappropriate implementation in DigitalCredentials.
Reported by Google.
- CVE-2026-17813: Insufficient policy enforcement in Chrome for iOS.
Reported by Google.
- CVE-2026-17814: Insufficient validation of untrusted input in
Chrome for iOS. Reported by Google.
- CVE-2026-17815: Insufficient policy enforcement in GuestView.
Reported by Google.
- CVE-2026-17816: Inappropriate implementation in Speech.
Reported by Google.
- CVE-2026-17817: Inappropriate implementation in ReportingAndNEL.
Reported by Google.
- CVE-2026-17818: Inappropriate implementation in Network.
Reported by Google.
- CVE-2026-17819: Inappropriate implementation in WebAppInstalls.
Reported by Google.
- CVE-2026-17820: Insufficient policy enforcement in Autofill.
Reported by Google.
- CVE-2026-17821: Insufficient policy enforcement in Extensions.
Reported by Google.
- CVE-2026-17822: Inappropriate implementation in Chrome for iOS.
Reported by Google.
- CVE-2026-17823: Insufficient policy enforcement in WebXR.
Reported by Google.
- CVE-2026-17824: Insufficient policy enforcement in ServiceWorker.
Reported by Google.
- CVE-2026-17825: Insufficient policy enforcement in Passwords.
Reported by Google.
- CVE-2026-17826: Inappropriate implementation in Chrome for iOS.
Reported by Google.
- CVE-2026-17827: Inappropriate implementation in CSS. Reported by Google
- CVE-2026-17828: Inappropriate implementation in Chrome for iOS.
Reported by Google.
- CVE-2026-17829: Insufficient policy enforcement in Passwords.
Reported by Google.
- CVE-2026-17830: Inappropriate implementation in Chrome for iOS.
Reported by Google.
- CVE-2026-17831: Insufficient validation of untrusted input in
Passwords. Reported by Google.
- CVE-2026-17832: Use after free in ANGLE. Reported by Google.
- CVE-2026-17833: Inappropriate implementation in Passwords.
Reported by Google.
- CVE-2026-17834: Inappropriate implementation in Passwords.
Reported by Google.
- CVE-2026-17835: Inappropriate implementation in Chrome for iOS.
Reported by Google.
- CVE-2026-17836: Use after free in V8. Reported by yupyon.itome.
- CVE-2026-17837: Insufficient validation of untrusted input in
DevTools. Reported by Google.
- CVE-2026-17838: Incorrect security UI in Chrome for iOS.
Reported by Google.
- CVE-2026-17839: Inappropriate implementation in Chrome for iOS.
Reported by Google.
- CVE-2026-17840: Incorrect security UI in Passwords. Reported by Google
- CVE-2026-17841: Race in Chrome for iOS. Reported by Google.
- CVE-2026-17842: Inappropriate implementation in Chrome for iOS.
Reported by Google.
- CVE-2026-17843: Inappropriate implementation in CSS. Reported by Google
- CVE-2026-17844: Insufficient validation of untrusted input in Cast.
Reported by Google.
- CVE-2026-17845: Inappropriate implementation in CSS. Reported by Google
- CVE-2026-17846: Inappropriate implementation in Media.
Reported by Google.
- CVE-2026-17847: Insufficient validation of untrusted input in ANGLE.
Reported by Google.
- CVE-2026-17848: Insufficient validation of untrusted input in Codecs.
Reported by Ameen Basha M K.
- CVE-2026-17849: Inappropriate implementation in Chrome for iOS.
Reported by Google.
- CVE-2026-17850: Inappropriate implementation in Permissions.
Reported by Tech Division (@taiphung) - Mobifone Digital Payment.
- CVE-2026-17851: Side-channel information leakage in Autofill.
Reported by Google.
- CVE-2026-17852: Inappropriate implementation in Media Router.
Reported by Google.
- CVE-2026-17853: Inappropriate implementation in DevTools.
Reported by Orange Tsai (@orange_8361) of DEVCORE Research Team.
- CVE-2026-17854: Insufficient policy enforcement in WebMCP.
Reported by Google.
- CVE-2026-17855: Race in DevTools. Reported by Google.
- CVE-2026-17856: Inappropriate implementation in Network.
Reported by Google.
- CVE-2026-17857: Inappropriate implementation in Network.
Reported by Google.
- CVE-2026-17858: Uninitialized Use in WebNN. Reported by Google.
- CVE-2026-17859: Side-channel information leakage in Favicons.
Reported by Google.
- CVE-2026-17860: Insufficient validation of untrusted input in Mobile.
Reported by Google.
- CVE-2026-17861: Insufficient validation of untrusted input in Updater.
Reported by Google.
- CVE-2026-17862: Use after free in Tracing. Reported by Google.
- CVE-2026-17863: Inappropriate implementation in Browser.
Reported by Google.
- CVE-2026-17864: Inappropriate implementation in Updater.
Reported by Google.
- CVE-2026-17865: Inappropriate implementation in Crypto.
Reported by Google.
- CVE-2026-17866: Type Confusion in Tab. Reported by Google.
- CVE-2026-17867: Insufficient validation of untrusted input in Dawn.
Reported by Google.
- CVE-2026-17868: Insufficient policy enforcement in USB.
Reported by Ariel Simon.
- CVE-2026-17869: Out of bounds read in WebXR. Reported by Google.
- CVE-2026-17870: Insufficient validation of untrusted input in Cast.
Reported by Google.
- CVE-2026-17871: Inappropriate implementation in Passwords.
Reported by Google.
- CVE-2026-17872: Cryptographic Flaw in WebAppInstalls.
Reported by Google.
- CVE-2026-17873: Insufficient policy enforcement in Chrome for iOS.
Reported by Google.
- CVE-2026-17874: Inappropriate implementation in Chrome for iOS.
Reported by Google.
- CVE-2026-17875: Use after free in PDFium. Reported by Google.
- CVE-2026-17876: Inappropriate implementation in Payments.
Reported by Google.
- CVE-2026-17877: Inappropriate implementation in Chromoting.
Reported by Google.
- CVE-2026-17878: Inappropriate implementation in CSS. Reported by Google
- CVE-2026-17879: Inappropriate implementation in Autofill.
Reported by Google.
- CVE-2026-17880: Inappropriate implementation in Autofill.
Reported by Google.
- CVE-2026-17881: Use after free in WebXR. Reported by Google.
- CVE-2026-17882: Policy bypass in Extensions. Reported by Google.
- CVE-2026-17883: Inappropriate implementation in Headless.
Reported by Google.
- CVE-2026-17884: Object lifecycle issue in WebRTC. Reported by Google.
- CVE-2026-17885: Inappropriate implementation in Paint.
Reported by Google.
- CVE-2026-17886: Use after free in Enterprise. Reported by Google.
- CVE-2026-17887: Use after free in TabStrip. Reported by Google.
- CVE-2026-17888: Insufficient validation of untrusted input in WebUI.
Reported by Google.
- CVE-2026-17889: Uninitialized Use in WebXR. Reported by Google.
- CVE-2026-17890: Insufficient validation of untrusted input in DevTools.
Reported by Google.
- CVE-2026-17891: Use after free in ANGLE. Reported by Google.
- CVE-2026-17892: Inappropriate implementation in WebXR.
Reported by Google.
- CVE-2026-17893: Insufficient validation of untrusted input in Updater.
Reported by Google.
- CVE-2026-17894: Use after free in Views. Reported by Google.
- CVE-2026-17895: Inappropriate implementation in DataTransfer.
Reported by hongan@calif.io.
- CVE-2026-17896: Use after free in DevTools. Reported by Google.
- CVE-2026-17897: Inappropriate implementation in ORB.
Reported by Sharkkcode.
- CVE-2026-17898: Use after free in DevTools. Reported by Syn4pse.
- CVE-2026-17899: Insufficient policy enforcement in DevTools.
Reported by asnine.
- CVE-2026-17900: Inappropriate implementation in Enterprise.
Reported by Google.
- CVE-2026-17901: Inappropriate implementation in Sharing.
Reported by Google.
- CVE-2026-17902: Inappropriate implementation in Editing.
Reported by Google.
- CVE-2026-17903: Insufficient policy enforcement in Chromecast.
Reported by Google.
- CVE-2026-17904: Insufficient policy enforcement in NFC.
Reported by Google.
- CVE-2026-17905: Inappropriate implementation in SurfaceCapture.
Reported by Google.
- CVE-2026-17906: Insufficient validation of untrusted input in
Bluetooth. Reported by Google.
- CVE-2026-17907: Side-channel information leakage in Network.
Reported by Google.
- CVE-2026-17908: Insufficient validation of untrusted input in
Printing. Reported by Google.
- CVE-2026-17909: Insufficient validation of untrusted input in
Isolated Web Apps. Reported by Google.
- CVE-2026-17910: Insufficient policy enforcement in NFC.
Reported by Google.
- CVE-2026-17911: Insufficient policy enforcement in SVG.
Reported by Google.
- CVE-2026-17912: Inappropriate implementation in Chrome for iOS.
Reported by Google.
- CVE-2026-17913: Inappropriate implementation in Chrome for iOS.
Reported by Google.
- CVE-2026-17914: Side-channel information leakage in Skia.
Reported by Google.
- CVE-2026-17915: Inappropriate implementation in WebView.
Reported by Google.
- CVE-2026-17916: Insufficient policy enforcement in Settings.
Reported by Itzik Chimino.
- CVE-2026-17917: Policy bypass in Chrome for iOS. Reported by Google.
- CVE-2026-17918: Use after free in Sync. Reported by Google.
- CVE-2026-17919: Insufficient policy enforcement in Enterprise.
Reported by Google.
- CVE-2026-17920: Use after free in V8. Reported by Google.
- CVE-2026-17921: Insufficient validation of untrusted input in
Navigation. Reported by Google.
- CVE-2026-17922: Inappropriate implementation in Enterprise.
Reported by Google.
- CVE-2026-17923: Policy bypass in Enterprise. Reported by Google.
- CVE-2026-17924: Use after free in DNS. Reported by Google.
- CVE-2026-17925: Inappropriate implementation in Cast.
Reported by Google.
- CVE-2026-17926: Insufficient validation of untrusted input in
DevTools. Reported by Google.
- CVE-2026-17927: Insufficient policy enforcement in DevTools.
Reported by Google.
- CVE-2026-17928: Inappropriate implementation in DataTransfer.
Reported by Google.
- CVE-2026-17929: Insufficient validation of untrusted input in
DevTools. Reported by Google.
- CVE-2026-17930: Insufficient validation of untrusted input in
Extensions. Reported by Google.
- CVE-2026-17931: Inappropriate implementation in DevTools.
Reported by Google.
- CVE-2026-17932: Use after free in DataTransfer. Reported by Google.
- CVE-2026-17933: Inappropriate implementation in DOMStorage.
Reported by Google.
- CVE-2026-17934: Insufficient validation of untrusted input in
DevTools. Reported by Google.
- CVE-2026-17935: Heap buffer overflow in Codecs. Reported by Google.
- CVE-2026-17936: Inappropriate implementation in DevTools.
Reported by Google.
- CVE-2026-17937: Inappropriate implementation in DevTools.
Reported by Google.
- CVE-2026-17938: Inappropriate implementation in FullScreen.
Reported by Google.
- CVE-2026-17939: Inappropriate implementation in Passwords.
Reported by Google.
- CVE-2026-17940: Insufficient validation of untrusted input in
Picture-in-Picture. Reported by Google.
- CVE-2026-17941: Inappropriate implementation in Chrome for iOS.
Reported by Google.
- CVE-2026-17942: Side-channel information leakage in SVG.
Reported by Google.
- CVE-2026-17943: Inappropriate implementation in Parser.
Reported by Google.
- CVE-2026-17944: Inappropriate implementation in Chrome for iOS.
Reported by Google.
- CVE-2026-17945: Inappropriate implementation in Navigation.
Reported by Google.
- CVE-2026-17946: Uninitialized Use in Dawn. Reported by Google.
- CVE-2026-17947: Use after free in WebSockets. Reported by Google.
- CVE-2026-17948: Type Confusion in V8. Reported by Google.
- CVE-2026-17949: Uninitialized Use in GPU. Reported by Google.
- CVE-2026-17950: Policy bypass in Safebrowsing. Reported by Google.
- CVE-2026-17951: Heap buffer overflow in WebRTC. Reported by Google.
- CVE-2026-17952: Inappropriate implementation in V8. Reported by Google
- CVE-2026-17953: Insufficient policy enforcement in WebView.
Reported by Google.
- CVE-2026-17954: Policy bypass in MHTML. Reported by Google.
- CVE-2026-17955: Insufficient validation of untrusted input in
Payments. Reported by Google.
- CVE-2026-17956: Inappropriate implementation in Scheduling.
Reported by Google.
- CVE-2026-17957: Inappropriate implementation in CORS.
Reported by Google.
- CVE-2026-17958: Inappropriate implementation in Views.
Reported by Google.
- CVE-2026-17959: Inappropriate implementation in Network.
Reported by Google.
- CVE-2026-17960: Inappropriate implementation in Chrome for iOS.
Reported by Google.
- CVE-2026-17961: Inappropriate implementation in Session.
Reported by Google.
- CVE-2026-17962: Inappropriate implementation in Blink.
Reported by Google.
- CVE-2026-17963: Inappropriate implementation in SVG. Reported by Google
- CVE-2026-17964: Incorrect security UI in UI. Reported by Google.
- CVE-2026-17965: Incorrect security UI in Chrome for iOS.
Reported by Google.
- CVE-2026-17966: Inappropriate implementation in Views.
Reported by Google.
- CVE-2026-17967: Use after free in Chrome for iOS. Reported by Google.
- CVE-2026-17968: Uninitialized Use in WebXR. Reported by Google.
- CVE-2026-17969: Inappropriate implementation in Passwords.
Reported by Google.
- CVE-2026-17970: Insufficient validation of untrusted input in
Passwords. Reported by Google.
- CVE-2026-17971: Inappropriate implementation in Frame.
Reported by Google.
- CVE-2026-17972: Inappropriate implementation in Chrome for iOS.
Reported by Google.
- CVE-2026-17973: Inappropriate implementation in Views.
Reported by Google.
- CVE-2026-17974: Insufficient policy enforcement in DevTools.
Reported by Google.
- CVE-2026-17975: Inappropriate implementation in IME. Reported by Google
- CVE-2026-17976: Policy bypass in Extensions. Reported by Google.
- CVE-2026-17977: Policy bypass in CSS. Reported by Google.
- CVE-2026-17978: Side-channel information leakage in WebCodecs.
Reported by Google.
- CVE-2026-17979: Race in V8. Reported by Google.
- CVE-2026-17980: Inappropriate implementation in UI. Reported by Google
- CVE-2026-17981: Inappropriate implementation in Blink.
Reported by Google.
- CVE-2026-17982: Insufficient validation of untrusted input in Cast.
Reported by Google.
- CVE-2026-17983: Incorrect security UI in Global Media Controls.
Reported by Google.
- CVE-2026-17984: Inappropriate implementation in Browser.
Reported by Google.
- CVE-2026-17985: Insufficient policy enforcement in Speech.
Reported by Google.
- CVE-2026-17986: Insufficient policy enforcement in Bluetooth.
Reported by Google.
- CVE-2026-17987: Insufficient validation of untrusted input in
Notifications. Reported by Google.
- CVE-2026-17988: Insufficient validation of untrusted input in
Navigation. Reported by Google.
- CVE-2026-17989: Type Confusion in V8. Reported by Google.
- CVE-2026-17990: Insufficient validation of untrusted input in
WebAuthn. Reported by Google.
- CVE-2026-17991: Insufficient validation of untrusted input in AI.
Reported by Google.
- CVE-2026-17992: Uninitialized Use in Skia. Reported by Google.
- CVE-2026-17993: Race in Updater. Reported by Google.
- CVE-2026-17994: Inappropriate implementation in Media.
Reported by Google.
- CVE-2026-17995: Out of bounds read in Dawn. Reported by sm1ee, ksw9722
- CVE-2026-17996: Inappropriate implementation in Browser.
Reported by Google.
- CVE-2026-17997: Inappropriate implementation in Passwords.
Reported by Google.
- CVE-2026-17998: Incorrect security UI in Extensions. Reported by Google
- CVE-2026-17999: Incorrect security UI in PictureInPicture.
Reported by Google.
- CVE-2026-18000: Insufficient policy enforcement in USB.
Reported by Google.
- CVE-2026-18001: Inappropriate implementation in WebGL.
Reported by Google.
- CVE-2026-18002: Insufficient validation of untrusted input in
Google Lens. Reported by Google.
- CVE-2026-18003: Inappropriate implementation in Chrome for iOS.
Reported by Google.
- CVE-2026-18004: Insufficient policy enforcement in Speech.
Reported by Google.
- CVE-2026-18005: Inappropriate implementation in WebXR.
Reported by Google.
- CVE-2026-18006: Inappropriate implementation in Google Lens.
Reported by Google.
- CVE-2026-18007: Inappropriate implementation in Input.
Reported by Google.
- CVE-2026-18008: Inappropriate implementation in Settings.
Reported by Google.
- CVE-2026-18009: Insufficient validation of untrusted input in
Passwords. Reported by Google.
- CVE-2026-18010: Inappropriate implementation in Passwords.
Reported by Google.
- CVE-2026-18011: Inappropriate implementation in Chrome for iOS.
Reported by Google.
- CVE-2026-18012: Use after free in PDFium. Reported by Google.
- CVE-2026-18013: Inappropriate implementation in Chrome for iOS.
Reported by Google.
- CVE-2026-18014: Insufficient validation of untrusted input in
DevTools. Reported by Google.
- CVE-2026-18015: Inappropriate implementation in Tint.
Reported by Google.
- CVE-2026-18016: Insufficient policy enforcement in Chrome for iOS.
Reported by Google.
- CVE-2026-18017: Use after free in Dawn. Reported by Google.
- CVE-2026-18018: Inappropriate implementation in Updater.
Reported by Google.
- CVE-2026-18019: Side-channel information leakage in Media.
Reported by Google.
- CVE-2026-16807: Out of bounds write in Codecs. Reported by Google.
- CVE-2026-16806: Use after free in WebMCP. Reported by Google.
- CVE-2026-16805: Use after free in Blink. Reported by Google.
- CVE-2026-16804: Use after free in Input. Reported by Google.
.
[ Timothy Pearson ]
* d/patches/ppc64le:
- core/baseline-isa-3-0.patch: refresh for upstream changes
Checksums-Sha1:
486e471f672ed1722759dfe45e64f88e3d7b321e 4378 chromium_151.0.7922.71-1.dsc
dc722fb3cb5384a2239c20c6d61472f194fcfb97 15040720 chromium_151.0.7922.71.orig-pre-gen.tar.xz
d4f2ffad3afdca20e1fb90d0f0a13d7d7701165f 952065332 chromium_151.0.7922.71.orig.tar.xz
b6b8bc940bd7a2f6612c3b91a35fc1f1f9b1e80f 548184 chromium_151.0.7922.71-1.debian.tar.xz
439250366f1cb3a317a174a6b39c72fdcdf8352b 28272 chromium_151.0.7922.71-1_source.buildinfo
Checksums-Sha256:
7d4459e1bbfed8223483fa106468104ea68df202a7baf429557f5e919d17a810 4378 chromium_151.0.7922.71-1.dsc
de2b1399c3b7940f78fba757a5c1c61c10237881d6a73adb13c1718f3d8beb10 15040720 chromium_151.0.7922.71.orig-pre-gen.tar.xz
f7c8bb0c45c0488cb48a22fdc20ac3da2fa02ac89c67898ff6272b6fd0e1b11c 952065332 chromium_151.0.7922.71.orig.tar.xz
c1704a6da975085f93f683b1dab43cf869c061c5e4181337f5f5fcbb19803a49 548184 chromium_151.0.7922.71-1.debian.tar.xz
04979a6aacd86e7b1473981e5d0e88b0818227beabe6209c033c410c8d99984e 28272 chromium_151.0.7922.71-1_source.buildinfo
Files:
61c2363fdfcbe67bd69f753b184c2acc 4378 web optional chromium_151.0.7922.71-1.dsc
18416d706ff835ecc758c85372b2895f 15040720 web optional chromium_151.0.7922.71.orig-pre-gen.tar.xz
bab8784de46947929b26c06edf0b1747 952065332 web optional chromium_151.0.7922.71.orig.tar.xz
88d5f611366db13f5dc92d9f86ba6732 548184 web optional chromium_151.0.7922.71-1.debian.tar.xz
d3fd6d232eb6f1cf0acbde3e197ac9e3 28272 web optional chromium_151.0.7922.71-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=3WG2
-----END PGP SIGNATURE-----
