# ALSA-2026:69098: Security update for 4 packages ALSA-2026:69098, released September 21, 2026, fixes 303 CVEs across 4 products. One of them is being exploited (CVE-2026-3909); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/alsa-2026-69098 - Platform: Linux - Released: Sep 21, 2026 - Priority: Patch now (Closes CVE-2026-3909, exploited (CISA KEV)) - CVEs: 303, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://osv.dev/vulnerability/ALSA-2026:69098 ## Applies to | Product | Release | Fixed in | |---|---|---| | [webkit2gtk3](https://patchblox.com/security/data/product/linux/webkit2gtk3.md) | almalinux 9 | 2.54.0-1.el9_8 | | [webkit2gtk3-devel](https://patchblox.com/security/data/product/linux/webkit2gtk3-devel.md) | almalinux 9 | 2.54.0-1.el9_8 | | [webkit2gtk3-jsc](https://patchblox.com/security/data/product/linux/webkit2gtk3-jsc.md) | almalinux 9 | 2.54.0-1.el9_8 | | [webkit2gtk3-jsc-devel](https://patchblox.com/security/data/product/linux/webkit2gtk3-jsc-devel.md) | almalinux 9 | 2.54.0-1.el9_8 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-3909](https://patchblox.com/security/data/cve/CVE-2026-3909.md) | Patch now | Chromium: CVE-2026-3909 Out of bounds write in Skia | 9.6 | 0.0234 | CISA KEV | | [CVE-2026-10881](https://patchblox.com/security/data/cve/CVE-2026-10881.md) | Urgent | Chromium: CVE-2026-10881 Out of bounds read and write in ANGLE | 9.6 | 0.0063 | | | [CVE-2026-78904](https://patchblox.com/security/data/cve/CVE-2026-78904.md) | Urgent | Chromium: CVE-2026-78904 Type confusion in ANGLE | 9.6 | 0.0062 | | | [CVE-2026-78989](https://patchblox.com/security/data/cve/CVE-2026-78989.md) | Urgent | Chromium: CVE-2026-78989 Out of bounds read in ANGLE | 9.6 | 0.0056 | | | [CVE-2026-17687](https://patchblox.com/security/data/cve/CVE-2026-17687.md) | Urgent | Chromium: CVE-2026-17687 Type Confusion in ANGLE | 9.6 | 0.0056 | | | [CVE-2026-17655](https://patchblox.com/security/data/cve/CVE-2026-17655.md) | Urgent | Chromium: CVE-2026-17655 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0055 | | | [CVE-2026-17697](https://patchblox.com/security/data/cve/CVE-2026-17697.md) | Urgent | Chromium: CVE-2026-17697 Type Confusion in ANGLE | 9.6 | 0.0055 | | | [CVE-2026-17671](https://patchblox.com/security/data/cve/CVE-2026-17671.md) | Urgent | Chromium: CVE-2026-17671 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0051 | | | [CVE-2026-17682](https://patchblox.com/security/data/cve/CVE-2026-17682.md) | Urgent | Chromium: CVE-2026-17682 Integer overflow in ANGLE | 9.6 | 0.0051 | | | [CVE-2026-17704](https://patchblox.com/security/data/cve/CVE-2026-17704.md) | Urgent | Chromium: CVE-2026-17704 Use after free in ANGLE | 9.6 | 0.0051 | | | [CVE-2026-17717](https://patchblox.com/security/data/cve/CVE-2026-17717.md) | Urgent | Chromium: CVE-2026-17717 Integer overflow in ANGLE | 9.6 | 0.0051 | | | [CVE-2026-17676](https://patchblox.com/security/data/cve/CVE-2026-17676.md) | Urgent | Chromium: CVE-2026-17676 Inappropriate implementation in ANGLE | 9.6 | 0.0049 | | | [CVE-2026-79282](https://patchblox.com/security/data/cve/CVE-2026-79282.md) | Urgent | chromium: Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute ar... | 9.6 | 0.0048 | | | [CVE-2026-79131](https://patchblox.com/security/data/cve/CVE-2026-79131.md) | Urgent | Chromium: CVE-2026-79131 Out of bounds write in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-79149](https://patchblox.com/security/data/cve/CVE-2026-79149.md) | Urgent | Chromium: CVE-2026-79149 Use after free in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-79188](https://patchblox.com/security/data/cve/CVE-2026-79188.md) | Urgent | Chromium: CVE-2026-79188 Out of bounds write in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-79275](https://patchblox.com/security/data/cve/CVE-2026-79275.md) | Urgent | Chromium: CVE-2026-79275 Use after free in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-79019](https://patchblox.com/security/data/cve/CVE-2026-79019.md) | Urgent | Chromium: CVE-2026-79019 Out of bounds write in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-17691](https://patchblox.com/security/data/cve/CVE-2026-17691.md) | Urgent | Chromium: CVE-2026-17691 Out of bounds write in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-17695](https://patchblox.com/security/data/cve/CVE-2026-17695.md) | Urgent | Chromium: CVE-2026-17695 Inappropriate implementation in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-17701](https://patchblox.com/security/data/cve/CVE-2026-17701.md) | Urgent | Chromium: CVE-2026-17701 Out of bounds read in ANGLE | 9.6 | 0.0047 | | | [CVE-2026-13885](https://patchblox.com/security/data/cve/CVE-2026-13885.md) | Urgent | Chromium: CVE-2026-13885 Use after free in Skia | 9.6 | 0.0046 | | | [CVE-2026-79043](https://patchblox.com/security/data/cve/CVE-2026-79043.md) | Urgent | Chromium: CVE-2026-79043 Out of bounds write in ANGLE | 9.6 | 0.0046 | | | [CVE-2026-17718](https://patchblox.com/security/data/cve/CVE-2026-17718.md) | Urgent | Chromium: CVE-2026-17718 Use after free in ANGLE | 9.6 | 0.0044 | | | [CVE-2026-17721](https://patchblox.com/security/data/cve/CVE-2026-17721.md) | Urgent | Chromium: CVE-2026-17721 Out of bounds write in ANGLE | 9.6 | 0.0044 | | | [CVE-2026-17675](https://patchblox.com/security/data/cve/CVE-2026-17675.md) | Urgent | Chromium: CVE-2026-17675 Out of bounds write in ANGLE | 9.6 | 0.0043 | | | [CVE-2026-17801](https://patchblox.com/security/data/cve/CVE-2026-17801.md) | Urgent | Chromium: CVE-2026-17801 Out of bounds memory access in ANGLE | 9.6 | 0.0043 | | | [CVE-2026-13780](https://patchblox.com/security/data/cve/CVE-2026-13780.md) | Urgent | Chromium: CVE-2026-13780 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0043 | | | [CVE-2026-13781](https://patchblox.com/security/data/cve/CVE-2026-13781.md) | Urgent | Chromium: CVE-2026-13781 Insufficient validation of untrusted input in Skia | 9.6 | 0.0043 | | | [CVE-2026-79130](https://patchblox.com/security/data/cve/CVE-2026-79130.md) | Urgent | Chromium: CVE-2026-79130 Buffer overflow in ANGLE | 9.6 | 0.0042 | | | [CVE-2026-13883](https://patchblox.com/security/data/cve/CVE-2026-13883.md) | Urgent | Chromium: CVE-2026-13883 Type Confusion in ANGLE | 9.6 | 0.0041 | | | [CVE-2026-13819](https://patchblox.com/security/data/cve/CVE-2026-13819.md) | Urgent | Chromium: CVE-2026-13819 Out of bounds read in ANGLE | 9.6 | 0.0040 | | | [CVE-2026-19157](https://patchblox.com/security/data/cve/CVE-2026-19157.md) | Urgent | CVE-2026-19157 Out of bounds write in ANGLE | 9.6 | 0.0038 | | | [CVE-2026-13859](https://patchblox.com/security/data/cve/CVE-2026-13859.md) | Urgent | Chromium: CVE-2026-13859 Inappropriate implementation in ANGLE | 9.6 | 0.0038 | | | [CVE-2026-79189](https://patchblox.com/security/data/cve/CVE-2026-79189.md) | Urgent | Chromium: CVE-2026-79189 Out of bounds write in ANGLE | 9.6 | 0.0038 | | | [CVE-2026-13833](https://patchblox.com/security/data/cve/CVE-2026-13833.md) | Urgent | Chromium: CVE-2026-13833 Uninitialized Use in ANGLE | 9.6 | 0.0038 | | | [CVE-2023-4860](https://patchblox.com/security/data/cve/CVE-2023-4860.md) | Urgent | chromium: Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compro... | 9.6 | 0.0037 | | | [CVE-2026-17847](https://patchblox.com/security/data/cve/CVE-2026-17847.md) | Urgent | Chromium: CVE-2026-17847 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0037 | | | [CVE-2026-79138](https://patchblox.com/security/data/cve/CVE-2026-79138.md) | Urgent | Chromium: CVE-2026-79138 Out of bounds write in ANGLE | 9.6 | 0.0036 | | | [CVE-2026-13820](https://patchblox.com/security/data/cve/CVE-2026-13820.md) | Urgent | Chromium: CVE-2026-13820 Out of bounds read in Skia | 9.6 | 0.0034 | | | [CVE-2026-10974](https://patchblox.com/security/data/cve/CVE-2026-10974.md) | Urgent | Chromium: CVE-2026-10974 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-11065](https://patchblox.com/security/data/cve/CVE-2026-11065.md) | Urgent | Chromium: CVE-2026-11065 Use after free in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-11088](https://patchblox.com/security/data/cve/CVE-2026-11088.md) | Urgent | Chromium: CVE-2026-11088 Integer overflow in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-17832](https://patchblox.com/security/data/cve/CVE-2026-17832.md) | Urgent | Chromium: CVE-2026-17832 Use after free in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-14385](https://patchblox.com/security/data/cve/CVE-2026-14385.md) | Urgent | Chromium: CVE-2026-14385 Heap buffer overflow in ANGLE | 9.6 | 0.0033 | | | [CVE-2026-11043](https://patchblox.com/security/data/cve/CVE-2026-11043.md) | Urgent | Chromium: CVE-2026-11043 Out of bounds write in ANGLE | 9.6 | 0.0030 | | | [CVE-2026-14387](https://patchblox.com/security/data/cve/CVE-2026-14387.md) | Urgent | Google Chrome: Integer overflow | 9.6 | 0.0029 | | | [CVE-2026-11113](https://patchblox.com/security/data/cve/CVE-2026-11113.md) | Urgent | Chromium: CVE-2026-11113 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-14382](https://patchblox.com/security/data/cve/CVE-2026-14382.md) | Urgent | Chromium: CVE-2026-14382 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-14044](https://patchblox.com/security/data/cve/CVE-2026-14044.md) | Urgent | Chromium: CVE-2026-14044 Use after free in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-11061](https://patchblox.com/security/data/cve/CVE-2026-11061.md) | Urgent | Chromium: CVE-2026-11061 Out of bounds read in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-11066](https://patchblox.com/security/data/cve/CVE-2026-11066.md) | Urgent | Chromium: CVE-2026-11066 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-14411](https://patchblox.com/security/data/cve/CVE-2026-14411.md) | Urgent | Chromium: CVE-2026-14411 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-14384](https://patchblox.com/security/data/cve/CVE-2026-14384.md) | Urgent | Google Chrome: Out of bounds read | 9.6 | 0.0026 | | | [CVE-2026-13975](https://patchblox.com/security/data/cve/CVE-2026-13975.md) | Urgent | Chromium: CVE-2026-13975 Out of bounds read in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-16419](https://patchblox.com/security/data/cve/CVE-2026-16419.md) | Urgent | Chromium: CVE-2026-16419 Out of bounds read and write in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-14390](https://patchblox.com/security/data/cve/CVE-2026-14390.md) | Urgent | Chromium: CVE-2026-14390 Use after free in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-14152](https://patchblox.com/security/data/cve/CVE-2026-14152.md) | Urgent | Chromium: CVE-2026-14152 Out of bounds write in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-14397](https://patchblox.com/security/data/cve/CVE-2026-14397.md) | Urgent | Chromium: CVE-2026-14397 Out of bounds write in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-14401](https://patchblox.com/security/data/cve/CVE-2026-14401.md) | Urgent | Chromium: CVE-2026-14401 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-14391](https://patchblox.com/security/data/cve/CVE-2026-14391.md) | Urgent | Chromium: CVE-2026-14391 Integer overflow in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-14398](https://patchblox.com/security/data/cve/CVE-2026-14398.md) | Urgent | Chromium: CVE-2026-14398 Use after free in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-14419](https://patchblox.com/security/data/cve/CVE-2026-14419.md) | Urgent | Chromium: CVE-2026-14419 Use after free in Skia | 9.6 | 0.0023 | | | [CVE-2026-14425](https://patchblox.com/security/data/cve/CVE-2026-14425.md) | Urgent | Chromium: CVE-2026-14425 Use after free in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-14402](https://patchblox.com/security/data/cve/CVE-2026-14402.md) | Urgent | Chromium: CVE-2026-14402 Uninitialized Use in ANGLE | 9.6 | 0.0022 | | | [CVE-2026-11099](https://patchblox.com/security/data/cve/CVE-2026-11099.md) | Urgent | Chromium: CVE-2026-11099 Vulnerability in Skia | 9.6 | n/a | | | [CVE-2026-8510](https://patchblox.com/security/data/cve/CVE-2026-8510.md) | High | Chromium: CVE-2026-8510 Integer overflow in Skia | 9.6 | 0.0995 | | | [CVE-2025-9478](https://patchblox.com/security/data/cve/CVE-2025-9478.md) | High | Chromium: CVE-2025-9478 Use after free in ANGLE | 9.6 | 0.0742 | | | [CVE-2024-7532](https://patchblox.com/security/data/cve/CVE-2024-7532.md) | High | Chromium: CVE-2024-7533 Use after free in Sharing | 9.6 | 0.0104 | | | [CVE-2026-3538](https://patchblox.com/security/data/cve/CVE-2026-3538.md) | High | Chromium: CVE-2026-3538 Integer overflow in Skia | 9.6 | 0.0078 | | | [CVE-2024-7966](https://patchblox.com/security/data/cve/CVE-2024-7966.md) | High | Chromium: CVE-2024-7966 Out of bounds memory access in Skia | 9.6 | 0.0071 | | | [CVE-2026-3536](https://patchblox.com/security/data/cve/CVE-2026-3536.md) | High | Chromium: CVE-2026-3536 Integer overflow in ANGLE | 9.6 | 0.0070 | | | [CVE-2026-65331](https://patchblox.com/security/data/cve/CVE-2026-65331.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0065 | | | [CVE-2026-65332](https://patchblox.com/security/data/cve/CVE-2026-65332.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0065 | | | [CVE-2026-65337](https://patchblox.com/security/data/cve/CVE-2026-65337.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0065 | | | [CVE-2026-65340](https://patchblox.com/security/data/cve/CVE-2026-65340.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0065 | | | [CVE-2026-65351](https://patchblox.com/security/data/cve/CVE-2026-65351.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0065 | | | [CVE-2024-8636](https://patchblox.com/security/data/cve/CVE-2024-8636.md) | High | Chromium: CVE-2024-8636 Heap buffer overflow in Skia | 9.6 | 0.0065 | | | [CVE-2026-10883](https://patchblox.com/security/data/cve/CVE-2026-10883.md) | High | Chromium: CVE-2026-10883 Out of bounds write in ANGLE | 9.6 | 0.0063 | | | [CVE-2026-64780](https://patchblox.com/security/data/cve/CVE-2026-64780.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0063 | | | [CVE-2026-78905](https://patchblox.com/security/data/cve/CVE-2026-78905.md) | High | Chromium: CVE-2026-78905 Type confusion in ANGLE | 9.6 | 0.0062 | | | [CVE-2024-8198](https://patchblox.com/security/data/cve/CVE-2024-8198.md) | High | Chromium: CVE-2024-8198 Heap buffer overflow in Skia | 9.6 | 0.0061 | | | [CVE-2024-8193](https://patchblox.com/security/data/cve/CVE-2024-8193.md) | High | chromium: Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised t... | 9.6 | 0.0059 | | | [CVE-2025-0436](https://patchblox.com/security/data/cve/CVE-2025-0436.md) | High | Chromium: CVE-2025-0436 Integer overflow in Skia | 9.6 | 0.0059 | | | [CVE-2026-43795](https://patchblox.com/security/data/cve/CVE-2026-43795.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0058 | | | [CVE-2026-64784](https://patchblox.com/security/data/cve/CVE-2026-64784.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0058 | | | [CVE-2026-65334](https://patchblox.com/security/data/cve/CVE-2026-65334.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0058 | | | [CVE-2026-65335](https://patchblox.com/security/data/cve/CVE-2026-65335.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0058 | | | [CVE-2026-65336](https://patchblox.com/security/data/cve/CVE-2026-65336.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0058 | | | [CVE-2026-65338](https://patchblox.com/security/data/cve/CVE-2026-65338.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0058 | | | [CVE-2026-79048](https://patchblox.com/security/data/cve/CVE-2026-79048.md) | High | Chromium: CVE-2026-79048 Out of bounds write in ANGLE | 9.6 | 0.0056 | | | [CVE-2026-6296](https://patchblox.com/security/data/cve/CVE-2026-6296.md) | High | Chromium: CVE-2026-6296 Heap buffer overflow in ANGLE | 9.6 | 0.0056 | | | [CVE-2026-19176](https://patchblox.com/security/data/cve/CVE-2026-19176.md) | High | CVE-2026-19176 Use after free in Skia | 9.6 | 0.0053 | | | [CVE-2026-17667](https://patchblox.com/security/data/cve/CVE-2026-17667.md) | High | Chromium: CVE-2026-17667 Uninitialized Use in ANGLE | 9.6 | 0.0052 | | | [CVE-2026-17668](https://patchblox.com/security/data/cve/CVE-2026-17668.md) | High | Chromium: CVE-2026-17668 Uninitialized Use in ANGLE | 9.6 | 0.0052 | | | [CVE-2026-17714](https://patchblox.com/security/data/cve/CVE-2026-17714.md) | High | Chromium: CVE-2026-17714 Uninitialized Use in ANGLE | 9.6 | 0.0052 | | | [CVE-2026-17678](https://patchblox.com/security/data/cve/CVE-2026-17678.md) | High | Chromium: CVE-2026-17678 Out of bounds read in ANGLE | 9.6 | 0.0051 | | | [CVE-2026-83596](https://patchblox.com/security/data/cve/CVE-2026-83596.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium... | 9.6 | 0.0050 | | | [CVE-2026-17653](https://patchblox.com/security/data/cve/CVE-2026-17653.md) | High | Chromium: CVE-2026-17653 Use after free in Skia | 9.6 | 0.0049 | | | [CVE-2026-64730](https://patchblox.com/security/data/cve/CVE-2026-64730.md) | High | WebKit: Visiting a website that frames malicious content may lead to UI spoofing | 9.6 | 0.0049 | | | [CVE-2024-9123](https://patchblox.com/security/data/cve/CVE-2024-9123.md) | High | Chromium: CVE-2024-9123 Integer overflow in Skia | 9.6 | 0.0048 | | | [CVE-2026-79127](https://patchblox.com/security/data/cve/CVE-2026-79127.md) | High | Chromium: CVE-2026-79127 Out of bounds write in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-17677](https://patchblox.com/security/data/cve/CVE-2026-17677.md) | High | Chromium: CVE-2026-17677 Inappropriate implementation in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-17683](https://patchblox.com/security/data/cve/CVE-2026-17683.md) | High | Chromium: CVE-2026-17683 Inappropriate implementation in ANGLE | 9.6 | 0.0047 | | | [CVE-2026-6298](https://patchblox.com/security/data/cve/CVE-2026-6298.md) | High | Chromium: CVE-2026-6298 Heap buffer overflow in Skia | 9.6 | 0.0047 | | | [CVE-2026-78376](https://patchblox.com/security/data/cve/CVE-2026-78376.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium... | 9.6 | 0.0047 | | | [CVE-2026-64715](https://patchblox.com/security/data/cve/CVE-2026-64715.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected process crash | 9.6 | 0.0047 | | | [CVE-2026-64757](https://patchblox.com/security/data/cve/CVE-2026-64757.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0047 | | | [CVE-2026-64713](https://patchblox.com/security/data/cve/CVE-2026-64713.md) | High | WebKit: Websites may know if the user has visited a given link | 9.6 | 0.0047 | | | [CVE-2025-0444](https://patchblox.com/security/data/cve/CVE-2025-0444.md) | High | Chromium: CVE-2025-0444 Use after free in Skia | 9.6 | 0.0046 | | | [CVE-2026-78978](https://patchblox.com/security/data/cve/CVE-2026-78978.md) | High | Chromium: CVE-2026-78978 Out of bounds read in ANGLE | 9.6 | 0.0046 | | | [CVE-2026-17689](https://patchblox.com/security/data/cve/CVE-2026-17689.md) | High | Chromium: CVE-2026-17689 Uninitialized Use in ANGLE | 9.6 | 0.0045 | | | [CVE-2026-78965](https://patchblox.com/security/data/cve/CVE-2026-78965.md) | High | Chromium: CVE-2026-78965 Uninitialized resource in ANGLE | 9.6 | 0.0045 | | | [CVE-2026-5275](https://patchblox.com/security/data/cve/CVE-2026-5275.md) | High | Chromium: CVE-2026-5275 Heap buffer overflow in ANGLE | 9.6 | 0.0045 | | | [CVE-2026-17712](https://patchblox.com/security/data/cve/CVE-2026-17712.md) | High | Chromium: CVE-2026-17712 Race in Skia | 9.6 | 0.0045 | | | [CVE-2026-9893](https://patchblox.com/security/data/cve/CVE-2026-9893.md) | High | Chromium: CVE-2026-9893 Use after free in Skia | 9.6 | 0.0044 | | | [CVE-2026-10941](https://patchblox.com/security/data/cve/CVE-2026-10941.md) | High | Chromium: CVE-2026-10941 Out of bounds memory access in Skia | 9.6 | 0.0044 | | | [CVE-2026-43804](https://patchblox.com/security/data/cve/CVE-2026-43804.md) | High | WebKit: Visiting a website may lead to an app denial-of-service | 9.6 | 0.0043 | | | [CVE-2026-64782](https://patchblox.com/security/data/cve/CVE-2026-64782.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0043 | | | [CVE-2026-64783](https://patchblox.com/security/data/cve/CVE-2026-64783.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0043 | | | [CVE-2026-78906](https://patchblox.com/security/data/cve/CVE-2026-78906.md) | High | Chromium: CVE-2026-78906 Race condition in ANGLE | 9.6 | 0.0042 | | | [CVE-2026-13834](https://patchblox.com/security/data/cve/CVE-2026-13834.md) | High | Chromium: CVE-2026-13834 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0041 | | | [CVE-2026-15766](https://patchblox.com/security/data/cve/CVE-2026-15766.md) | High | Chromium: CVE-2026-15766 Uninitialized Use in Skia | 9.6 | 0.0040 | | | [CVE-2026-79142](https://patchblox.com/security/data/cve/CVE-2026-79142.md) | High | Chromium: CVE-2026-79142 Buffer overflow in ANGLE | 9.6 | 0.0040 | | | [CVE-2026-19160](https://patchblox.com/security/data/cve/CVE-2026-19160.md) | High | CVE-2026-19160 Uninitialized Use in Skia | 9.6 | 0.0040 | | | [CVE-2026-10913](https://patchblox.com/security/data/cve/CVE-2026-10913.md) | High | Chromium: CVE-2026-10913 Use after free in ANGLE | 9.6 | 0.0039 | | | [CVE-2026-10914](https://patchblox.com/security/data/cve/CVE-2026-10914.md) | High | Chromium: CVE-2026-10914 Use after free in ANGLE | 9.6 | 0.0039 | | | [CVE-2026-79229](https://patchblox.com/security/data/cve/CVE-2026-79229.md) | High | Chromium: CVE-2026-79229 Uninitialized resource in ANGLE | 9.6 | 0.0039 | | | [CVE-2026-79270](https://patchblox.com/security/data/cve/CVE-2026-79270.md) | High | Chromium: CVE-2026-79270 Uninitialized resource in ANGLE | 9.6 | 0.0039 | | | [CVE-2026-17740](https://patchblox.com/security/data/cve/CVE-2026-17740.md) | High | Chromium: CVE-2026-17740 Uninitialized Use in ANGLE | 9.6 | 0.0039 | | | [CVE-2026-17757](https://patchblox.com/security/data/cve/CVE-2026-17757.md) | High | Chromium: CVE-2026-17757 Uninitialized Use in Skia | 9.6 | 0.0039 | | | [CVE-2026-17771](https://patchblox.com/security/data/cve/CVE-2026-17771.md) | High | Chromium: CVE-2026-17771 Uninitialized Use in Skia | 9.6 | 0.0039 | | | [CVE-2026-17785](https://patchblox.com/security/data/cve/CVE-2026-17785.md) | High | Chromium: CVE-2026-17785 Uninitialized Use in ANGLE | 9.6 | 0.0039 | | | [CVE-2026-13841](https://patchblox.com/security/data/cve/CVE-2026-13841.md) | High | Chromium: CVE-2026-13841 Integer overflow in Skia | 9.6 | 0.0039 | | | [CVE-2026-79020](https://patchblox.com/security/data/cve/CVE-2026-79020.md) | High | Chromium: CVE-2026-79020 Out of bounds read in Skia | 9.6 | 0.0038 | | | [CVE-2026-10955](https://patchblox.com/security/data/cve/CVE-2026-10955.md) | High | Chromium: CVE-2026-10955 Type Confusion in ANGLE | 9.6 | 0.0038 | | | [CVE-2026-64779](https://patchblox.com/security/data/cve/CVE-2026-64779.md) | High | WebKit Storage: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0038 | | | [CVE-2026-13971](https://patchblox.com/security/data/cve/CVE-2026-13971.md) | High | Chromium: CVE-2026-13971 Uninitialized Use in Skia | 9.6 | 0.0038 | | | [CVE-2026-17790](https://patchblox.com/security/data/cve/CVE-2026-17790.md) | High | Chromium: CVE-2026-17790 Uninitialized Use in ANGLE | 9.6 | 0.0037 | | | [CVE-2026-64728](https://patchblox.com/security/data/cve/CVE-2026-64728.md) | High | WebKit: Maliciously crafted web content may violate iframe sandboxing policy | 9.6 | 0.0037 | | | [CVE-2026-79285](https://patchblox.com/security/data/cve/CVE-2026-79285.md) | High | Chromium: CVE-2026-79285 Uninitialized resource in ANGLE | 9.6 | 0.0037 | | | [CVE-2026-84635](https://patchblox.com/security/data/cve/CVE-2026-84635.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium... | 9.6 | 0.0037 | | | [CVE-2026-13877](https://patchblox.com/security/data/cve/CVE-2026-13877.md) | High | Chromium: CVE-2026-13877 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0037 | | | [CVE-2026-11024](https://patchblox.com/security/data/cve/CVE-2026-11024.md) | High | Chromium: CVE-2026-11024 Stack buffer overflow in Skia | 9.6 | 0.0037 | | | [CVE-2026-76046](https://patchblox.com/security/data/cve/CVE-2026-76046.md) | High | chromium: Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had com... | 9.6 | 0.0037 | | | [CVE-2026-64753](https://patchblox.com/security/data/cve/CVE-2026-64753.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0037 | | | [CVE-2026-79240](https://patchblox.com/security/data/cve/CVE-2026-79240.md) | High | Chromium: CVE-2026-79240 Out of bounds write in ANGLE | 9.6 | 0.0036 | | | [CVE-2026-5868](https://patchblox.com/security/data/cve/CVE-2026-5868.md) | High | Chromium: CVE-2026-5868 Heap buffer overflow in ANGLE | 9.6 | 0.0035 | | | [CVE-2026-7354](https://patchblox.com/security/data/cve/CVE-2026-7354.md) | High | Google Chrome: Out-of-bounds Read | 9.6 | 0.0035 | | | [CVE-2026-7359](https://patchblox.com/security/data/cve/CVE-2026-7359.md) | High | Google Chrome: Use after free | 9.6 | 0.0035 | | | [CVE-2026-10977](https://patchblox.com/security/data/cve/CVE-2026-10977.md) | High | Chromium: CVE-2026-10977 Uninitialized Use in Skia | 9.6 | 0.0035 | | | [CVE-2026-10994](https://patchblox.com/security/data/cve/CVE-2026-10994.md) | High | Chromium: CVE-2026-10994 Uninitialized Use in ANGLE | 9.6 | 0.0035 | | | [CVE-2026-76041](https://patchblox.com/security/data/cve/CVE-2026-76041.md) | High | Chromium: CVE-2026-76041 Information leak in Skia | 9.6 | 0.0035 | | | [CVE-2026-10993](https://patchblox.com/security/data/cve/CVE-2026-10993.md) | High | Chromium: CVE-2026-10993 Heap buffer overflow in Skia | 9.6 | 0.0035 | | | [CVE-2026-19154](https://patchblox.com/security/data/cve/CVE-2026-19154.md) | High | chromium: Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromi... | 9.6 | 0.0035 | | | [CVE-2026-9910](https://patchblox.com/security/data/cve/CVE-2026-9910.md) | High | Chromium: CVE-2026-9910 Out of bounds memory access in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-19173](https://patchblox.com/security/data/cve/CVE-2026-19173.md) | High | CVE-2026-19173 Out of bounds write in Skia | 9.6 | 0.0034 | | | [CVE-2026-10907](https://patchblox.com/security/data/cve/CVE-2026-10907.md) | High | Chromium: CVE-2026-10907 Out of bounds write in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-64778](https://patchblox.com/security/data/cve/CVE-2026-64778.md) | High | WebKit History: Visiting a maliciously crafted website may leak sensitive data | 9.6 | 0.0034 | | | [CVE-2025-8901](https://patchblox.com/security/data/cve/CVE-2025-8901.md) | High | Chromium: CVE-2025-8901 Out of bounds write in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-19161](https://patchblox.com/security/data/cve/CVE-2026-19161.md) | High | CVE-2026-19161 Uninitialized Use in Skia | 9.6 | 0.0034 | | | [CVE-2026-78958](https://patchblox.com/security/data/cve/CVE-2026-78958.md) | High | Chromium: CVE-2026-78958 Uninitialized resource in Skia | 9.6 | 0.0034 | | | [CVE-2026-7353](https://patchblox.com/security/data/cve/CVE-2026-7353.md) | High | Google Chrome: Heap buffer overflow | 9.6 | 0.0034 | | | [CVE-2026-5277](https://patchblox.com/security/data/cve/CVE-2026-5277.md) | High | Chromium: CVE-2026-5277 Integer overflow in ANGLE | 9.6 | 0.0033 | | | [CVE-2026-64787](https://patchblox.com/security/data/cve/CVE-2026-64787.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected process termination | 9.6 | 0.0033 | | | [CVE-2026-5870](https://patchblox.com/security/data/cve/CVE-2026-5870.md) | High | Chromium: CVE-2026-5870 Integer overflow in Skia | 9.6 | 0.0033 | | | [CVE-2026-9878](https://patchblox.com/security/data/cve/CVE-2026-9878.md) | High | Chromium: CVE-2026-9878 Use after free in ANGLE | 9.6 | 0.0033 | | | [CVE-2026-0908](https://patchblox.com/security/data/cve/CVE-2026-0908.md) | High | Chromium: CVE-2026-0908 Use after free in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-10979](https://patchblox.com/security/data/cve/CVE-2026-10979.md) | High | Chromium: CVE-2026-10979 Out of bounds read in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-10985](https://patchblox.com/security/data/cve/CVE-2026-10985.md) | High | Chromium: CVE-2026-10985 Out of bounds read in Skia | 9.6 | 0.0032 | | | [CVE-2026-9927](https://patchblox.com/security/data/cve/CVE-2026-9927.md) | High | Chromium: CVE-2026-9927 Use after free in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-9941](https://patchblox.com/security/data/cve/CVE-2026-9941.md) | High | Chromium: CVE-2026-9941 Use after free in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-79120](https://patchblox.com/security/data/cve/CVE-2026-79120.md) | High | Chromium: CVE-2026-79120 Uninitialized resource in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-10930](https://patchblox.com/security/data/cve/CVE-2026-10930.md) | High | Chromium: CVE-2026-10930 Out of bounds read in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-3931](https://patchblox.com/security/data/cve/CVE-2026-3931.md) | High | Chromium: CVE-2026-3931 Heap buffer overflow in Skia | 9.6 | 0.0032 | | | [CVE-2026-5879](https://patchblox.com/security/data/cve/CVE-2026-5879.md) | High | Chromium: CVE-2026-5879 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-10929](https://patchblox.com/security/data/cve/CVE-2026-10929.md) | High | Chromium: CVE-2026-10929 Heap buffer overflow in ANGLE | 9.6 | 0.0031 | | | [CVE-2026-17702](https://patchblox.com/security/data/cve/CVE-2026-17702.md) | High | Chromium: CVE-2026-17702 Inappropriate implementation in Skia | 9.6 | 0.0031 | | | [CVE-2026-9879](https://patchblox.com/security/data/cve/CVE-2026-9879.md) | High | Chromium: CVE-2026-9879 Out of bounds write in ANGLE | 9.6 | 0.0031 | | | [CVE-2026-9969](https://patchblox.com/security/data/cve/CVE-2026-9969.md) | High | Chromium: CVE-2026-9969 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0031 | | | [CVE-2026-9928](https://patchblox.com/security/data/cve/CVE-2026-9928.md) | High | Chromium: CVE-2026-9928 Out of bounds read in ANGLE | 9.6 | 0.0030 | | | [CVE-2026-10889](https://patchblox.com/security/data/cve/CVE-2026-10889.md) | High | Chromium: CVE-2026-10889 Out of bounds read in ANGLE | 9.6 | 0.0030 | | | [CVE-2026-10919](https://patchblox.com/security/data/cve/CVE-2026-10919.md) | High | Chromium: CVE-2026-10919 Use after free in ANGLE | 9.6 | 0.0030 | | | [CVE-2026-65341](https://patchblox.com/security/data/cve/CVE-2026-65341.md) | High | WebKit: Processing maliciously crafted web content may lead to memory corruption | 9.6 | 0.0030 | | | [CVE-2026-4448](https://patchblox.com/security/data/cve/CVE-2026-4448.md) | High | Chromium: CVE-2026-4448 Heap buffer overflow in ANGLE | 9.6 | 0.0030 | | | [CVE-2026-17750](https://patchblox.com/security/data/cve/CVE-2026-17750.md) | High | Chromium: CVE-2026-17750 Use after free in ANGLE | 9.6 | 0.0029 | | | [CVE-2026-79230](https://patchblox.com/security/data/cve/CVE-2026-79230.md) | High | Chromium: CVE-2026-79230 Improper input validation in ANGLE | 9.6 | 0.0029 | | | [CVE-2026-79269](https://patchblox.com/security/data/cve/CVE-2026-79269.md) | High | Chromium: CVE-2026-79269 Uninitialized resource in ANGLE | 9.6 | 0.0029 | | | [CVE-2026-15774](https://patchblox.com/security/data/cve/CVE-2026-15774.md) | High | Chromium: CVE-2026-15774 Use after free in Skia | 9.6 | 0.0029 | | | [CVE-2026-10999](https://patchblox.com/security/data/cve/CVE-2026-10999.md) | High | Chromium: CVE-2026-10999 Out of bounds memory access in ANGLE | 9.6 | 0.0029 | | | [CVE-2026-11191](https://patchblox.com/security/data/cve/CVE-2026-11191.md) | High | Chromium: CVE-2026-11191 Out of bounds memory access in ANGLE | 9.6 | 0.0029 | | | [CVE-2026-15109](https://patchblox.com/security/data/cve/CVE-2026-15109.md) | High | Chromium: CVE-2026-15109 Uninitialized Use in ANGLE | 9.6 | 0.0029 | | | [CVE-2025-10502](https://patchblox.com/security/data/cve/CVE-2025-10502.md) | High | Chromium: CVE-2025-10502 Heap buffer overflow in ANGLE | 9.6 | 0.0029 | | | [CVE-2026-10925](https://patchblox.com/security/data/cve/CVE-2026-10925.md) | High | Chromium: CVE-2026-10925 Out of bounds write in Skia | 9.6 | 0.0029 | | | [CVE-2026-11004](https://patchblox.com/security/data/cve/CVE-2026-11004.md) | High | Chromium: CVE-2026-11004 Out of bounds read in ANGLE | 9.6 | 0.0029 | | | [CVE-2026-11044](https://patchblox.com/security/data/cve/CVE-2026-11044.md) | High | Chromium: CVE-2026-11044 Integer overflow in ANGLE | 9.6 | 0.0029 | | | [CVE-2026-11055](https://patchblox.com/security/data/cve/CVE-2026-11055.md) | High | Chromium: CVE-2026-11055 Use after free in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-14125](https://patchblox.com/security/data/cve/CVE-2026-14125.md) | High | Chromium: CVE-2026-14125 Uninitialized Use in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-79118](https://patchblox.com/security/data/cve/CVE-2026-79118.md) | High | Chromium: CVE-2026-79118 Uninitialized resource in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-14386](https://patchblox.com/security/data/cve/CVE-2026-14386.md) | High | Chromium: CVE-2026-14386 Out of bounds read in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-14388](https://patchblox.com/security/data/cve/CVE-2026-14388.md) | High | Chromium: CVE-2026-14388 Out of bounds read in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-4460](https://patchblox.com/security/data/cve/CVE-2026-4460.md) | High | Chromium: CVE-2026-4460 Out of bounds read in Skia | 9.6 | 0.0028 | | | [CVE-2026-4464](https://patchblox.com/security/data/cve/CVE-2026-4464.md) | High | Chromium: CVE-2026-4464 Integer overflow in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-11005](https://patchblox.com/security/data/cve/CVE-2026-11005.md) | High | Chromium: CVE-2026-11005 Out of bounds read in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-78914](https://patchblox.com/security/data/cve/CVE-2026-78914.md) | High | Chromium: CVE-2026-78914 Uninitialized resource in Skia | 9.6 | 0.0027 | | | [CVE-2026-9940](https://patchblox.com/security/data/cve/CVE-2026-9940.md) | High | Chromium: CVE-2026-9940 Heap buffer overflow in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-16413](https://patchblox.com/security/data/cve/CVE-2026-16413.md) | High | Chromium: CVE-2026-16413 Out of bounds write in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-9901](https://patchblox.com/security/data/cve/CVE-2026-9901.md) | High | Chromium: CVE-2026-9901 Use after free in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-9909](https://patchblox.com/security/data/cve/CVE-2026-9909.md) | High | Chromium: CVE-2026-9909 Integer overflow in Skia | 9.6 | 0.0027 | | | [CVE-2026-9983](https://patchblox.com/security/data/cve/CVE-2026-9983.md) | High | Chromium: CVE-2026-9983 Type Confusion in Skia | 9.6 | 0.0027 | | | [CVE-2026-17745](https://patchblox.com/security/data/cve/CVE-2026-17745.md) | High | Chromium: CVE-2026-17745 Out of bounds read in Skia | 9.6 | 0.0027 | | | [CVE-2026-7901](https://patchblox.com/security/data/cve/CVE-2026-7901.md) | High | Chromium: CVE-2026-7901 Use after free in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-9923](https://patchblox.com/security/data/cve/CVE-2026-9923.md) | High | Chromium: CVE-2026-9923 Use after free in Skia | 9.6 | 0.0027 | | | [CVE-2026-5283](https://patchblox.com/security/data/cve/CVE-2026-5283.md) | High | Chromium: CVE-2026-5283 Inappropriate implementation in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-11039](https://patchblox.com/security/data/cve/CVE-2026-11039.md) | High | Chromium: CVE-2026-11039 Uninitialized Use in Skia | 9.6 | 0.0026 | | | [CVE-2026-11057](https://patchblox.com/security/data/cve/CVE-2026-11057.md) | High | Chromium: CVE-2026-11057 Uninitialized Use in Skia | 9.6 | 0.0026 | | | [CVE-2026-11087](https://patchblox.com/security/data/cve/CVE-2026-11087.md) | High | Chromium: CVE-2026-11087 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-11090](https://patchblox.com/security/data/cve/CVE-2026-11090.md) | High | Chromium: CVE-2026-11090 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-11104](https://patchblox.com/security/data/cve/CVE-2026-11104.md) | High | Chromium: CVE-2026-11104 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-11109](https://patchblox.com/security/data/cve/CVE-2026-11109.md) | High | Chromium: CVE-2026-11109 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-11110](https://patchblox.com/security/data/cve/CVE-2026-11110.md) | High | Chromium: CVE-2026-11110 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-11123](https://patchblox.com/security/data/cve/CVE-2026-11123.md) | High | Chromium: CVE-2026-11123 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-11137](https://patchblox.com/security/data/cve/CVE-2026-11137.md) | High | Chromium: CVE-2026-11137 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-11138](https://patchblox.com/security/data/cve/CVE-2026-11138.md) | High | Chromium: CVE-2026-11138 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-4452](https://patchblox.com/security/data/cve/CVE-2026-4452.md) | High | Chromium: CVE-2026-4452 Integer overflow in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-64718](https://patchblox.com/security/data/cve/CVE-2026-64718.md) | High | WebKit Canvas: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0026 | | | [CVE-2026-7340](https://patchblox.com/security/data/cve/CVE-2026-7340.md) | High | Google Chrome: Integer overflow | 9.6 | 0.0026 | | | [CVE-2026-9953](https://patchblox.com/security/data/cve/CVE-2026-9953.md) | High | Chromium: CVE-2026-9953 Out of bounds read in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-14427](https://patchblox.com/security/data/cve/CVE-2026-14427.md) | High | Chromium: CVE-2026-14427 Heap buffer overflow in Skia | 9.6 | 0.0026 | | | [CVE-2026-17992](https://patchblox.com/security/data/cve/CVE-2026-17992.md) | High | Chromium: CVE-2026-17992 Uninitialized Use in Skia | 9.6 | 0.0026 | | | [CVE-2026-9915](https://patchblox.com/security/data/cve/CVE-2026-9915.md) | High | Chromium: CVE-2026-9915 Heap buffer overflow in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-9926](https://patchblox.com/security/data/cve/CVE-2026-9926.md) | High | Chromium: CVE-2026-9926 Heap buffer overflow in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-79144](https://patchblox.com/security/data/cve/CVE-2026-79144.md) | High | Chromium: CVE-2026-79144 Information leak in Skia | 9.6 | 0.0026 | | | [CVE-2026-9965](https://patchblox.com/security/data/cve/CVE-2026-9965.md) | High | Chromium: CVE-2026-9965 Out of bounds write in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-14396](https://patchblox.com/security/data/cve/CVE-2026-14396.md) | High | Chromium: CVE-2026-14396 Out of bounds read in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-14412](https://patchblox.com/security/data/cve/CVE-2026-14412.md) | High | Chromium: CVE-2026-14412 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-79112](https://patchblox.com/security/data/cve/CVE-2026-79112.md) | High | Chromium: CVE-2026-79112 Out of bounds read in Skia | 9.6 | 0.0025 | | | [CVE-2026-9908](https://patchblox.com/security/data/cve/CVE-2026-9908.md) | High | Chromium: CVE-2026-9908 Out of bounds read in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-9914](https://patchblox.com/security/data/cve/CVE-2026-9914.md) | High | Chromium: CVE-2026-9914 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-9935](https://patchblox.com/security/data/cve/CVE-2026-9935.md) | High | Chromium: CVE-2026-9935 Uninitialized Use in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-11268](https://patchblox.com/security/data/cve/CVE-2026-11268.md) | High | Chromium: CVE-2026-11268 Uninitialized Use in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-9999](https://patchblox.com/security/data/cve/CVE-2026-9999.md) | High | Chromium: CVE-2026-9999 Inappropriate implementation in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-14414](https://patchblox.com/security/data/cve/CVE-2026-14414.md) | High | Chromium: CVE-2026-14414 Insufficient validation of untrusted input in Skia | 9.6 | 0.0025 | | | [CVE-2026-11124](https://patchblox.com/security/data/cve/CVE-2026-11124.md) | High | Chromium: CVE-2026-11124 Heap buffer overflow in Skia | 9.6 | 0.0025 | | | [CVE-2026-6364](https://patchblox.com/security/data/cve/CVE-2026-6364.md) | High | Chromium: CVE-2026-6364 Out of bounds read in Skia | 9.6 | 0.0025 | | | [CVE-2026-9913](https://patchblox.com/security/data/cve/CVE-2026-9913.md) | High | Chromium: CVE-2026-9913 Inappropriate implementation in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-14389](https://patchblox.com/security/data/cve/CVE-2026-14389.md) | High | Google Chrome: Integer overflow | 9.6 | 0.0025 | | | [CVE-2026-9924](https://patchblox.com/security/data/cve/CVE-2026-9924.md) | High | Chromium: CVE-2026-9924 Heap buffer overflow in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-11051](https://patchblox.com/security/data/cve/CVE-2026-11051.md) | High | Chromium: CVE-2026-11051 Out of bounds read in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-11121](https://patchblox.com/security/data/cve/CVE-2026-11121.md) | High | Chromium: CVE-2026-11121 Insufficient validation of untrusted input in Skia | 9.6 | 0.0024 | | | [CVE-2026-14429](https://patchblox.com/security/data/cve/CVE-2026-14429.md) | High | Chromium: CVE-2026-14429 Insufficient validation of untrusted input in Skia | 9.6 | 0.0024 | | | [CVE-2026-11111](https://patchblox.com/security/data/cve/CVE-2026-11111.md) | High | Chromium: CVE-2026-11111 Out of bounds read in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-7900](https://patchblox.com/security/data/cve/CVE-2026-7900.md) | High | Chromium: CVE-2026-7900 Heap buffer overflow in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-11040](https://patchblox.com/security/data/cve/CVE-2026-11040.md) | High | Chromium: CVE-2026-11040 Use after free in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-14400](https://patchblox.com/security/data/cve/CVE-2026-14400.md) | High | Chromium: CVE-2026-14400 Out of bounds write in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-16417](https://patchblox.com/security/data/cve/CVE-2026-16417.md) | High | Chromium: CVE-2026-16417 Uninitialized Use in Skia | 9.6 | 0.0024 | | | [CVE-2026-9877](https://patchblox.com/security/data/cve/CVE-2026-9877.md) | High | Chromium: CVE-2026-9877 Use after free in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-9916](https://patchblox.com/security/data/cve/CVE-2026-9916.md) | High | Chromium: CVE-2026-9916 Out of bounds write in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-9925](https://patchblox.com/security/data/cve/CVE-2026-9925.md) | High | Chromium: CVE-2026-9925 Use after free in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-11663](https://patchblox.com/security/data/cve/CVE-2026-11663.md) | High | Chromium: CVE-2026-11663 Use after free in Skia | 9.6 | 0.0023 | | | [CVE-2026-8519](https://patchblox.com/security/data/cve/CVE-2026-8519.md) | High | Chromium: CVE-2026-8519 Integer overflow in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-10009](https://patchblox.com/security/data/cve/CVE-2026-10009.md) | High | Chromium: CVE-2026-10009 Integer overflow in Skia | 9.6 | 0.0023 | | | [CVE-2026-9882](https://patchblox.com/security/data/cve/CVE-2026-9882.md) | High | Chromium: CVE-2026-9882 Integer overflow in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-11159](https://patchblox.com/security/data/cve/CVE-2026-11159.md) | High | Chromium: CVE-2026-11159 Uninitialized Use in Skia | 9.6 | 0.0023 | | | [CVE-2026-17914](https://patchblox.com/security/data/cve/CVE-2026-17914.md) | High | Chromium: CVE-2026-17914 Side-channel information leakage in Skia | 9.6 | 0.0023 | | | [CVE-2026-84359](https://patchblox.com/security/data/cve/CVE-2026-84359.md) | High | Chromium: CVE-2026-84359 Information leak in Skia | 9.6 | 0.0023 | | | [CVE-2026-8525](https://patchblox.com/security/data/cve/CVE-2026-8525.md) | High | Chromium: CVE-2026-8525 Heap buffer overflow in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-17811](https://patchblox.com/security/data/cve/CVE-2026-17811.md) | High | Chromium: CVE-2026-17811 Use after free in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-9899](https://patchblox.com/security/data/cve/CVE-2026-9899.md) | High | Chromium: CVE-2026-9899 Use after free in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-9900](https://patchblox.com/security/data/cve/CVE-2026-9900.md) | High | Chromium: CVE-2026-9900 Out of bounds write in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-9904](https://patchblox.com/security/data/cve/CVE-2026-9904.md) | High | Chromium: CVE-2026-9904 Use after free in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-9975](https://patchblox.com/security/data/cve/CVE-2026-9975.md) | High | Chromium: CVE-2026-9975 Out of bounds read and write in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-7903](https://patchblox.com/security/data/cve/CVE-2026-7903.md) | High | Chromium: CVE-2026-7903 Integer overflow in ANGLE | 9.6 | 0.0022 | | | [CVE-2026-79147](https://patchblox.com/security/data/cve/CVE-2026-79147.md) | High | Chromium: CVE-2026-79147 Information leak in Skia | 9.6 | 0.0022 | | | [CVE-2026-9932](https://patchblox.com/security/data/cve/CVE-2026-9932.md) | High | Chromium: CVE-2026-9932 Use after free in ANGLE | 9.6 | 0.0022 | | | [CVE-2026-9911](https://patchblox.com/security/data/cve/CVE-2026-9911.md) | High | Chromium: CVE-2026-9911 Integer overflow in ANGLE | 9.6 | 0.0022 | | | [CVE-2026-9946](https://patchblox.com/security/data/cve/CVE-2026-9946.md) | High | Chromium: CVE-2026-9946 Use after free in ANGLE | 9.6 | 0.0022 | | | [CVE-2026-7920](https://patchblox.com/security/data/cve/CVE-2026-7920.md) | High | Chromium: CVE-2026-7920 Use after free in Skia | 9.6 | 0.0022 | | | [CVE-2026-7923](https://patchblox.com/security/data/cve/CVE-2026-7923.md) | High | Chromium: CVE-2026-7923 Out of bounds write in Skia | 9.6 | 0.0022 | | | [CVE-2026-28984](https://patchblox.com/security/data/cve/CVE-2026-28984.md) | High | webkit2gtk: The issue was addressed with improved memory handling | 9.6 | 0.0022 | | | [CVE-2026-14413](https://patchblox.com/security/data/cve/CVE-2026-14413.md) | High | Chromium: CVE-2026-14413 Uninitialized Use in ANGLE | 9.6 | 0.0021 | | | [CVE-2026-11675](https://patchblox.com/security/data/cve/CVE-2026-11675.md) | High | Chromium: CVE-2026-11675 Insufficient validation of untrusted input in Skia | 9.6 | 0.0021 | | | [CVE-2026-9942](https://patchblox.com/security/data/cve/CVE-2026-9942.md) | High | Chromium: CVE-2026-9942 Uninitialized Use in ANGLE | 9.6 | 0.0021 | | | [CVE-2026-9944](https://patchblox.com/security/data/cve/CVE-2026-9944.md) | High | Chromium: CVE-2026-9944 Uninitialized Use in ANGLE | 9.6 | 0.0021 | | | [CVE-2026-9892](https://patchblox.com/security/data/cve/CVE-2026-9892.md) | High | Chromium: CVE-2026-9892 Inappropriate implementation in Skia | 9.6 | 0.0021 | | | [CVE-2026-7942](https://patchblox.com/security/data/cve/CVE-2026-7942.md) | High | Chromium: CVE-2026-7942 Integer overflow in ANGLE | 9.6 | 0.0020 | | | [CVE-2026-10018](https://patchblox.com/security/data/cve/CVE-2026-10018.md) | High | Chromium: CVE-2026-10018 Integer overflow in ANGLE | 9.6 | 0.0020 | | | [CVE-2026-14410](https://patchblox.com/security/data/cve/CVE-2026-14410.md) | High | Chromium: CVE-2026-14410 Inappropriate implementation in Skia | 9.6 | 0.0020 | | | [CVE-2026-9981](https://patchblox.com/security/data/cve/CVE-2026-9981.md) | High | Chromium: CVE-2026-9981 Inappropriate implementation in Skia | 9.6 | 0.0020 | | | [CVE-2026-10019](https://patchblox.com/security/data/cve/CVE-2026-10019.md) | High | Chromium: CVE-2026-10019 Integer overflow in ANGLE | 9.6 | 0.0020 | | | [CVE-2026-8556](https://patchblox.com/security/data/cve/CVE-2026-8556.md) | High | Chromium: CVE-2026-8556 Inappropriate implementation in ANGLE | 9.6 | 0.0020 | | | [CVE-2026-10020](https://patchblox.com/security/data/cve/CVE-2026-10020.md) | High | Chromium: CVE-2026-10020 Insufficient validation of untrusted input in Skia | 9.6 | 0.0020 | | | [CVE-2026-14418](https://patchblox.com/security/data/cve/CVE-2026-14418.md) | High | Chromium: CVE-2026-14418 Uninitialized Use in ANGLE | 9.6 | 0.0020 | | | [CVE-2026-9982](https://patchblox.com/security/data/cve/CVE-2026-9982.md) | High | Chromium: CVE-2026-9982 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0020 | | | [CVE-2026-7949](https://patchblox.com/security/data/cve/CVE-2026-7949.md) | High | Chromium: CVE-2026-7949 Out of bounds read in Skia | 9.6 | 0.0019 | | | [CVE-2026-8567](https://patchblox.com/security/data/cve/CVE-2026-8567.md) | High | Chromium: CVE-2026-8567 Integer overflow in ANGLE | 9.6 | 0.0018 | | | [CVE-2026-10012](https://patchblox.com/security/data/cve/CVE-2026-10012.md) | High | Chromium: CVE-2026-10012 Use after free in Skia | 9.6 | 0.0018 | | | [CVE-2026-9998](https://patchblox.com/security/data/cve/CVE-2026-9998.md) | High | Chromium: CVE-2026-9998 Integer overflow in Skia | 9.6 | 0.0018 | | | [CVE-2026-10011](https://patchblox.com/security/data/cve/CVE-2026-10011.md) | High | Chromium: CVE-2026-10011 Inappropriate implementation in Skia | 9.6 | 0.0017 | | | [CVE-2026-7943](https://patchblox.com/security/data/cve/CVE-2026-7943.md) | High | Chromium: CVE-2026-7943 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0017 | | | [CVE-2026-8554](https://patchblox.com/security/data/cve/CVE-2026-8554.md) | High | Chromium: CVE-2026-8554 Type Confusion in ANGLE | 9.6 | 0.0017 | | | [CVE-2026-17891](https://patchblox.com/security/data/cve/CVE-2026-17891.md) | High | Chromium: CVE-2026-17891 Use after free in ANGLE | 9.6 | 0.0016 | | | [CVE-2026-8579](https://patchblox.com/security/data/cve/CVE-2026-8579.md) | High | Chromium: CVE-2026-8579 Insufficient validation of untrusted input in Skia | 9.6 | 0.0014 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo