# OPENSUSE-SU-2026:22076-1: Security update for 3 packages OPENSUSE-SU-2026:22076-1, released November 7, 2026, fixes 243 CVEs across 3 products. 2 of them are being exploited (CVE-2025-6558); 2 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/opensuse-su-2026-22076-1 - Platform: Linux - Released: Nov 7, 2026 - Priority: Patch now (Closes CVE-2025-6558, exploited (CISA KEV)) - CVEs: 243, exploited: 2, on CISA KEV: 2 - Vendor advisory: https://osv.dev/vulnerability/openSUSE-SU-2026:22076-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [webkit2gtk3](https://patchblox.com/security/data/product/linux/webkit2gtk3.md) | opensuse-leap 16.0 | 2.54.1-160000.1.1 | | [webkit2gtk3-soup2](https://patchblox.com/security/data/product/linux/webkit2gtk3-soup2.md) | opensuse-leap 16.0 | 2.54.1-160000.1.1 | | [webkit2gtk4](https://patchblox.com/security/data/product/linux/webkit2gtk4.md) | opensuse-leap 16.0 | 2.54.1-160000.1.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-6558](https://patchblox.com/security/data/cve/CVE-2025-6558.md) | Patch now | Chromium: CVE-2025-6558 Incorrect validation of untrusted input in ANGLE and GPU | 8.8 | 0.1093 | CISA KEV | | [CVE-2026-3909](https://patchblox.com/security/data/cve/CVE-2026-3909.md) | Patch now | Chromium: CVE-2026-3909 Out of bounds write in Skia | 9.6 | 0.0233 | CISA KEV | | [CVE-2024-1283](https://patchblox.com/security/data/cve/CVE-2024-1283.md) | Urgent | Chromium: CVE-2024-1283 Heap buffer overflow in Skia | 9.8 | 0.2162 | | | [CVE-2024-43091](https://patchblox.com/security/data/cve/CVE-2024-43091.md) | Urgent | webkit2gtk3: This update for webkit2gtk3 fixes the following issues: Security issues fixed: WebKitGTK and WPE WebKit Security Ad... | 9.8 | 0.0073 | | | [CVE-2026-10881](https://patchblox.com/security/data/cve/CVE-2026-10881.md) | Urgent | Chromium: CVE-2026-10881 Out of bounds read and write in ANGLE | 9.6 | 0.0063 | | | [CVE-2026-78904](https://patchblox.com/security/data/cve/CVE-2026-78904.md) | Urgent | Chromium: CVE-2026-78904 Type confusion in ANGLE | 9.6 | 0.0062 | | | [CVE-2026-17687](https://patchblox.com/security/data/cve/CVE-2026-17687.md) | Urgent | Chromium: CVE-2026-17687 Type Confusion in ANGLE | 9.6 | 0.0056 | | | [CVE-2026-17655](https://patchblox.com/security/data/cve/CVE-2026-17655.md) | Urgent | Chromium: CVE-2026-17655 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0055 | | | [CVE-2026-17697](https://patchblox.com/security/data/cve/CVE-2026-17697.md) | Urgent | Chromium: CVE-2026-17697 Type Confusion in ANGLE | 9.6 | 0.0055 | | | [CVE-2025-26416](https://patchblox.com/security/data/cve/CVE-2025-26416.md) | Urgent | webkit2gtk: In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow | 9.8 | 0.0054 | | | [CVE-2026-17671](https://patchblox.com/security/data/cve/CVE-2026-17671.md) | Urgent | Chromium: CVE-2026-17671 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0051 | | | [CVE-2026-17682](https://patchblox.com/security/data/cve/CVE-2026-17682.md) | Urgent | Chromium: CVE-2026-17682 Integer overflow in ANGLE | 9.6 | 0.0051 | | | [CVE-2026-17704](https://patchblox.com/security/data/cve/CVE-2026-17704.md) | Urgent | Chromium: CVE-2026-17704 Use after free in ANGLE | 9.6 | 0.0051 | | | [CVE-2026-17717](https://patchblox.com/security/data/cve/CVE-2026-17717.md) | Urgent | Chromium: CVE-2026-17717 Integer overflow in ANGLE | 9.6 | 0.0051 | | | [CVE-2026-79131](https://patchblox.com/security/data/cve/CVE-2026-79131.md) | Urgent | Chromium: CVE-2026-79131 Out of bounds write in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-79149](https://patchblox.com/security/data/cve/CVE-2026-79149.md) | Urgent | Chromium: CVE-2026-79149 Use after free in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-79188](https://patchblox.com/security/data/cve/CVE-2026-79188.md) | Urgent | Chromium: CVE-2026-79188 Out of bounds write in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-79275](https://patchblox.com/security/data/cve/CVE-2026-79275.md) | Urgent | Chromium: CVE-2026-79275 Use after free in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-79043](https://patchblox.com/security/data/cve/CVE-2026-79043.md) | Urgent | Chromium: CVE-2026-79043 Out of bounds write in ANGLE | 9.6 | 0.0046 | | | [CVE-2026-17718](https://patchblox.com/security/data/cve/CVE-2026-17718.md) | Urgent | Chromium: CVE-2026-17718 Use after free in ANGLE | 9.6 | 0.0044 | | | [CVE-2026-17721](https://patchblox.com/security/data/cve/CVE-2026-17721.md) | Urgent | Chromium: CVE-2026-17721 Out of bounds write in ANGLE | 9.6 | 0.0044 | | | [CVE-2026-17675](https://patchblox.com/security/data/cve/CVE-2026-17675.md) | Urgent | Chromium: CVE-2026-17675 Out of bounds write in ANGLE | 9.6 | 0.0043 | | | [CVE-2026-17801](https://patchblox.com/security/data/cve/CVE-2026-17801.md) | Urgent | Chromium: CVE-2026-17801 Out of bounds memory access in ANGLE | 9.6 | 0.0043 | | | [CVE-2026-13780](https://patchblox.com/security/data/cve/CVE-2026-13780.md) | Urgent | Chromium: CVE-2026-13780 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0043 | | | [CVE-2026-13781](https://patchblox.com/security/data/cve/CVE-2026-13781.md) | Urgent | Chromium: CVE-2026-13781 Insufficient validation of untrusted input in Skia | 9.6 | 0.0043 | | | [CVE-2026-79130](https://patchblox.com/security/data/cve/CVE-2026-79130.md) | Urgent | Chromium: CVE-2026-79130 Buffer overflow in ANGLE | 9.6 | 0.0042 | | | [CVE-2026-13883](https://patchblox.com/security/data/cve/CVE-2026-13883.md) | Urgent | Chromium: CVE-2026-13883 Type Confusion in ANGLE | 9.6 | 0.0041 | | | [CVE-2026-13859](https://patchblox.com/security/data/cve/CVE-2026-13859.md) | Urgent | Chromium: CVE-2026-13859 Inappropriate implementation in ANGLE | 9.6 | 0.0038 | | | [CVE-2026-79189](https://patchblox.com/security/data/cve/CVE-2026-79189.md) | Urgent | Chromium: CVE-2026-79189 Out of bounds write in ANGLE | 9.6 | 0.0038 | | | [CVE-2026-17847](https://patchblox.com/security/data/cve/CVE-2026-17847.md) | Urgent | Chromium: CVE-2026-17847 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0037 | | | [CVE-2026-10974](https://patchblox.com/security/data/cve/CVE-2026-10974.md) | Urgent | Chromium: CVE-2026-10974 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-11065](https://patchblox.com/security/data/cve/CVE-2026-11065.md) | Urgent | Chromium: CVE-2026-11065 Use after free in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-11088](https://patchblox.com/security/data/cve/CVE-2026-11088.md) | Urgent | Chromium: CVE-2026-11088 Integer overflow in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-17832](https://patchblox.com/security/data/cve/CVE-2026-17832.md) | Urgent | Chromium: CVE-2026-17832 Use after free in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-14387](https://patchblox.com/security/data/cve/CVE-2026-14387.md) | Urgent | Google Chrome: Integer overflow | 9.6 | 0.0029 | | | [CVE-2026-11113](https://patchblox.com/security/data/cve/CVE-2026-11113.md) | Urgent | Chromium: CVE-2026-11113 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-14382](https://patchblox.com/security/data/cve/CVE-2026-14382.md) | Urgent | Chromium: CVE-2026-14382 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-14044](https://patchblox.com/security/data/cve/CVE-2026-14044.md) | Urgent | Chromium: CVE-2026-14044 Use after free in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-11061](https://patchblox.com/security/data/cve/CVE-2026-11061.md) | Urgent | Chromium: CVE-2026-11061 Out of bounds read in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-11066](https://patchblox.com/security/data/cve/CVE-2026-11066.md) | Urgent | Chromium: CVE-2026-11066 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-14411](https://patchblox.com/security/data/cve/CVE-2026-14411.md) | Urgent | Chromium: CVE-2026-14411 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-14390](https://patchblox.com/security/data/cve/CVE-2026-14390.md) | Urgent | Chromium: CVE-2026-14390 Use after free in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-14152](https://patchblox.com/security/data/cve/CVE-2026-14152.md) | Urgent | Chromium: CVE-2026-14152 Out of bounds write in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-14398](https://patchblox.com/security/data/cve/CVE-2026-14398.md) | Urgent | Chromium: CVE-2026-14398 Use after free in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-14419](https://patchblox.com/security/data/cve/CVE-2026-14419.md) | Urgent | Chromium: CVE-2026-14419 Use after free in Skia | 9.6 | 0.0023 | | | [CVE-2026-14425](https://patchblox.com/security/data/cve/CVE-2026-14425.md) | Urgent | Chromium: CVE-2026-14425 Use after free in ANGLE | 9.6 | 0.0023 | | | [CVE-2025-9478](https://patchblox.com/security/data/cve/CVE-2025-9478.md) | High | Chromium: CVE-2025-9478 Use after free in ANGLE | 9.6 | 0.0742 | | | [CVE-2026-3538](https://patchblox.com/security/data/cve/CVE-2026-3538.md) | High | Chromium: CVE-2026-3538 Integer overflow in Skia | 9.6 | 0.0078 | | | [CVE-2024-7966](https://patchblox.com/security/data/cve/CVE-2024-7966.md) | High | Chromium: CVE-2024-7966 Out of bounds memory access in Skia | 9.6 | 0.0071 | | | [CVE-2026-3536](https://patchblox.com/security/data/cve/CVE-2026-3536.md) | High | Chromium: CVE-2026-3536 Integer overflow in ANGLE | 9.6 | 0.0070 | | | [CVE-2024-8636](https://patchblox.com/security/data/cve/CVE-2024-8636.md) | High | Chromium: CVE-2024-8636 Heap buffer overflow in Skia | 9.6 | 0.0065 | | | [CVE-2026-65331](https://patchblox.com/security/data/cve/CVE-2026-65331.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0065 | | | [CVE-2026-65332](https://patchblox.com/security/data/cve/CVE-2026-65332.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0065 | | | [CVE-2026-65337](https://patchblox.com/security/data/cve/CVE-2026-65337.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0065 | | | [CVE-2026-65340](https://patchblox.com/security/data/cve/CVE-2026-65340.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0065 | | | [CVE-2026-65351](https://patchblox.com/security/data/cve/CVE-2026-65351.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0065 | | | [CVE-2026-10883](https://patchblox.com/security/data/cve/CVE-2026-10883.md) | High | Chromium: CVE-2026-10883 Out of bounds write in ANGLE | 9.6 | 0.0063 | | | [CVE-2026-64780](https://patchblox.com/security/data/cve/CVE-2026-64780.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0063 | | | [CVE-2026-78905](https://patchblox.com/security/data/cve/CVE-2026-78905.md) | High | Chromium: CVE-2026-78905 Type confusion in ANGLE | 9.6 | 0.0062 | | | [CVE-2024-8198](https://patchblox.com/security/data/cve/CVE-2024-8198.md) | High | Chromium: CVE-2024-8198 Heap buffer overflow in Skia | 9.6 | 0.0061 | | | [CVE-2024-8193](https://patchblox.com/security/data/cve/CVE-2024-8193.md) | High | chromium: Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised t... | 9.6 | 0.0059 | | | [CVE-2026-64784](https://patchblox.com/security/data/cve/CVE-2026-64784.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0058 | | | [CVE-2026-65333](https://patchblox.com/security/data/cve/CVE-2026-65333.md) | High | webkit2gtk: This issue was addressed through improved state management | 9.6 | 0.0058 | | | [CVE-2026-65334](https://patchblox.com/security/data/cve/CVE-2026-65334.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0058 | | | [CVE-2026-65336](https://patchblox.com/security/data/cve/CVE-2026-65336.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0058 | | | [CVE-2026-65338](https://patchblox.com/security/data/cve/CVE-2026-65338.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0058 | | | [CVE-2025-0436](https://patchblox.com/security/data/cve/CVE-2025-0436.md) | High | Chromium: CVE-2025-0436 Integer overflow in Skia | 9.6 | 0.0058 | | | [CVE-2026-6296](https://patchblox.com/security/data/cve/CVE-2026-6296.md) | High | Chromium: CVE-2026-6296 Heap buffer overflow in ANGLE | 9.6 | 0.0056 | | | [CVE-2026-19176](https://patchblox.com/security/data/cve/CVE-2026-19176.md) | High | CVE-2026-19176 Use after free in Skia | 9.6 | 0.0053 | | | [CVE-2026-17667](https://patchblox.com/security/data/cve/CVE-2026-17667.md) | High | Chromium: CVE-2026-17667 Uninitialized Use in ANGLE | 9.6 | 0.0052 | | | [CVE-2026-17668](https://patchblox.com/security/data/cve/CVE-2026-17668.md) | High | Chromium: CVE-2026-17668 Uninitialized Use in ANGLE | 9.6 | 0.0052 | | | [CVE-2026-17714](https://patchblox.com/security/data/cve/CVE-2026-17714.md) | High | Chromium: CVE-2026-17714 Uninitialized Use in ANGLE | 9.6 | 0.0052 | | | [CVE-2026-17678](https://patchblox.com/security/data/cve/CVE-2026-17678.md) | High | Chromium: CVE-2026-17678 Out of bounds read in ANGLE | 9.6 | 0.0051 | | | [CVE-2024-43767](https://patchblox.com/security/data/cve/CVE-2024-43767.md) | High | webkit2gtk3: This update for webkit2gtk3 fixes the following issues: Security issues fixed: WebKitGTK and WPE WebKit Security Ad... | 8.8 | 0.0050 | | | [CVE-2026-17653](https://patchblox.com/security/data/cve/CVE-2026-17653.md) | High | Chromium: CVE-2026-17653 Use after free in Skia | 9.6 | 0.0049 | | | [CVE-2026-64730](https://patchblox.com/security/data/cve/CVE-2026-64730.md) | High | WebKit: Visiting a website that frames malicious content may lead to UI spoofing | 9.6 | 0.0049 | | | [CVE-2024-9123](https://patchblox.com/security/data/cve/CVE-2024-9123.md) | High | Chromium: CVE-2024-9123 Integer overflow in Skia | 9.6 | 0.0048 | | | [CVE-2026-79127](https://patchblox.com/security/data/cve/CVE-2026-79127.md) | High | Chromium: CVE-2026-79127 Out of bounds write in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-17683](https://patchblox.com/security/data/cve/CVE-2026-17683.md) | High | Chromium: CVE-2026-17683 Inappropriate implementation in ANGLE | 9.6 | 0.0047 | | | [CVE-2026-6298](https://patchblox.com/security/data/cve/CVE-2026-6298.md) | High | Chromium: CVE-2026-6298 Heap buffer overflow in Skia | 9.6 | 0.0047 | | | [CVE-2026-64715](https://patchblox.com/security/data/cve/CVE-2026-64715.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected process crash | 9.6 | 0.0047 | | | [CVE-2026-64757](https://patchblox.com/security/data/cve/CVE-2026-64757.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0047 | | | [CVE-2026-64713](https://patchblox.com/security/data/cve/CVE-2026-64713.md) | High | WebKit: Websites may know if the user has visited a given link | 9.6 | 0.0047 | | | [CVE-2025-0444](https://patchblox.com/security/data/cve/CVE-2025-0444.md) | High | Chromium: CVE-2025-0444 Use after free in Skia | 9.6 | 0.0046 | | | [CVE-2026-17689](https://patchblox.com/security/data/cve/CVE-2026-17689.md) | High | Chromium: CVE-2026-17689 Uninitialized Use in ANGLE | 9.6 | 0.0045 | | | [CVE-2026-78965](https://patchblox.com/security/data/cve/CVE-2026-78965.md) | High | Chromium: CVE-2026-78965 Uninitialized resource in ANGLE | 9.6 | 0.0045 | | | [CVE-2026-9893](https://patchblox.com/security/data/cve/CVE-2026-9893.md) | High | Chromium: CVE-2026-9893 Use after free in Skia | 9.6 | 0.0044 | | | [CVE-2026-10941](https://patchblox.com/security/data/cve/CVE-2026-10941.md) | High | Chromium: CVE-2026-10941 Out of bounds memory access in Skia | 9.6 | 0.0044 | | | [CVE-2026-43804](https://patchblox.com/security/data/cve/CVE-2026-43804.md) | High | WebKit: Visiting a website may lead to an app denial-of-service | 9.6 | 0.0043 | | | [CVE-2026-64782](https://patchblox.com/security/data/cve/CVE-2026-64782.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0043 | | | [CVE-2026-64783](https://patchblox.com/security/data/cve/CVE-2026-64783.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0043 | | | [CVE-2026-78906](https://patchblox.com/security/data/cve/CVE-2026-78906.md) | High | Chromium: CVE-2026-78906 Race condition in ANGLE | 9.6 | 0.0042 | | | [CVE-2026-13834](https://patchblox.com/security/data/cve/CVE-2026-13834.md) | High | Chromium: CVE-2026-13834 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0041 | | | [CVE-2026-15766](https://patchblox.com/security/data/cve/CVE-2026-15766.md) | High | Chromium: CVE-2026-15766 Uninitialized Use in Skia | 9.6 | 0.0040 | | | [CVE-2026-64719](https://patchblox.com/security/data/cve/CVE-2026-64719.md) | High | WebRTC: Processing maliciously crafted web content may lead to an unexpected Safari crash | 8.1 | 0.0040 | | | [CVE-2026-19160](https://patchblox.com/security/data/cve/CVE-2026-19160.md) | High | CVE-2026-19160 Uninitialized Use in Skia | 9.6 | 0.0040 | | | [CVE-2026-79229](https://patchblox.com/security/data/cve/CVE-2026-79229.md) | High | Chromium: CVE-2026-79229 Uninitialized resource in ANGLE | 9.6 | 0.0039 | | | [CVE-2026-79270](https://patchblox.com/security/data/cve/CVE-2026-79270.md) | High | Chromium: CVE-2026-79270 Uninitialized resource in ANGLE | 9.6 | 0.0039 | | | [CVE-2026-17740](https://patchblox.com/security/data/cve/CVE-2026-17740.md) | High | Chromium: CVE-2026-17740 Uninitialized Use in ANGLE | 9.6 | 0.0039 | | | [CVE-2026-17757](https://patchblox.com/security/data/cve/CVE-2026-17757.md) | High | Chromium: CVE-2026-17757 Uninitialized Use in Skia | 9.6 | 0.0039 | | | [CVE-2026-17771](https://patchblox.com/security/data/cve/CVE-2026-17771.md) | High | Chromium: CVE-2026-17771 Uninitialized Use in Skia | 9.6 | 0.0039 | | | [CVE-2026-17785](https://patchblox.com/security/data/cve/CVE-2026-17785.md) | High | Chromium: CVE-2026-17785 Uninitialized Use in ANGLE | 9.6 | 0.0039 | | | [CVE-2026-13841](https://patchblox.com/security/data/cve/CVE-2026-13841.md) | High | Chromium: CVE-2026-13841 Integer overflow in Skia | 9.6 | 0.0039 | | | [CVE-2026-79020](https://patchblox.com/security/data/cve/CVE-2026-79020.md) | High | Chromium: CVE-2026-79020 Out of bounds read in Skia | 9.6 | 0.0038 | | | [CVE-2026-64779](https://patchblox.com/security/data/cve/CVE-2026-64779.md) | High | WebKit Storage: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0038 | | | [CVE-2026-13971](https://patchblox.com/security/data/cve/CVE-2026-13971.md) | High | Chromium: CVE-2026-13971 Uninitialized Use in Skia | 9.6 | 0.0038 | | | [CVE-2026-64728](https://patchblox.com/security/data/cve/CVE-2026-64728.md) | High | WebKit: Maliciously crafted web content may violate iframe sandboxing policy | 9.6 | 0.0037 | | | [CVE-2026-84635](https://patchblox.com/security/data/cve/CVE-2026-84635.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium... | 9.6 | 0.0037 | | | [CVE-2026-13877](https://patchblox.com/security/data/cve/CVE-2026-13877.md) | High | Chromium: CVE-2026-13877 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0037 | | | [CVE-2026-11024](https://patchblox.com/security/data/cve/CVE-2026-11024.md) | High | Chromium: CVE-2026-11024 Stack buffer overflow in Skia | 9.6 | 0.0037 | | | [CVE-2026-64753](https://patchblox.com/security/data/cve/CVE-2026-64753.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0037 | | | [CVE-2024-43097](https://patchblox.com/security/data/cve/CVE-2024-43097.md) | High | webkit2gtk3: This update for webkit2gtk3 fixes the following issues: Security issues fixed: WebKitGTK and WPE WebKit Security Ad... | 7.8 | 0.0036 | | | [CVE-2026-7354](https://patchblox.com/security/data/cve/CVE-2026-7354.md) | High | Google Chrome: Out-of-bounds Read | 9.6 | 0.0035 | | | [CVE-2026-7359](https://patchblox.com/security/data/cve/CVE-2026-7359.md) | High | Google Chrome: Use after free | 9.6 | 0.0035 | | | [CVE-2026-10977](https://patchblox.com/security/data/cve/CVE-2026-10977.md) | High | Chromium: CVE-2026-10977 Uninitialized Use in Skia | 9.6 | 0.0035 | | | [CVE-2026-10994](https://patchblox.com/security/data/cve/CVE-2026-10994.md) | High | Chromium: CVE-2026-10994 Uninitialized Use in ANGLE | 9.6 | 0.0035 | | | [CVE-2026-76041](https://patchblox.com/security/data/cve/CVE-2026-76041.md) | High | Chromium: CVE-2026-76041 Information leak in Skia | 9.6 | 0.0035 | | | [CVE-2026-10993](https://patchblox.com/security/data/cve/CVE-2026-10993.md) | High | Chromium: CVE-2026-10993 Heap buffer overflow in Skia | 9.6 | 0.0035 | | | [CVE-2026-9910](https://patchblox.com/security/data/cve/CVE-2026-9910.md) | High | Chromium: CVE-2026-9910 Out of bounds memory access in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-19173](https://patchblox.com/security/data/cve/CVE-2026-19173.md) | High | CVE-2026-19173 Out of bounds write in Skia | 9.6 | 0.0034 | | | [CVE-2026-10907](https://patchblox.com/security/data/cve/CVE-2026-10907.md) | High | Chromium: CVE-2026-10907 Out of bounds write in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-64778](https://patchblox.com/security/data/cve/CVE-2026-64778.md) | High | WebKit History: Visiting a maliciously crafted website may leak sensitive data | 9.6 | 0.0034 | | | [CVE-2026-19161](https://patchblox.com/security/data/cve/CVE-2026-19161.md) | High | CVE-2026-19161 Uninitialized Use in Skia | 9.6 | 0.0034 | | | [CVE-2026-78958](https://patchblox.com/security/data/cve/CVE-2026-78958.md) | High | Chromium: CVE-2026-78958 Uninitialized resource in Skia | 9.6 | 0.0034 | | | [CVE-2026-7353](https://patchblox.com/security/data/cve/CVE-2026-7353.md) | High | Google Chrome: Heap buffer overflow | 9.6 | 0.0034 | | | [CVE-2025-8901](https://patchblox.com/security/data/cve/CVE-2025-8901.md) | High | Chromium: CVE-2025-8901 Out of bounds write in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-64787](https://patchblox.com/security/data/cve/CVE-2026-64787.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected process termination | 9.6 | 0.0033 | | | [CVE-2026-5870](https://patchblox.com/security/data/cve/CVE-2026-5870.md) | High | Chromium: CVE-2026-5870 Integer overflow in Skia | 9.6 | 0.0033 | | | [CVE-2026-9878](https://patchblox.com/security/data/cve/CVE-2026-9878.md) | High | Chromium: CVE-2026-9878 Use after free in ANGLE | 9.6 | 0.0033 | | | [CVE-2026-0908](https://patchblox.com/security/data/cve/CVE-2026-0908.md) | High | Chromium: CVE-2026-0908 Use after free in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-10979](https://patchblox.com/security/data/cve/CVE-2026-10979.md) | High | Chromium: CVE-2026-10979 Out of bounds read in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-10985](https://patchblox.com/security/data/cve/CVE-2026-10985.md) | High | Chromium: CVE-2026-10985 Out of bounds read in Skia | 9.6 | 0.0032 | | | [CVE-2026-9927](https://patchblox.com/security/data/cve/CVE-2026-9927.md) | High | Chromium: CVE-2026-9927 Use after free in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-9941](https://patchblox.com/security/data/cve/CVE-2026-9941.md) | High | Chromium: CVE-2026-9941 Use after free in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-79120](https://patchblox.com/security/data/cve/CVE-2026-79120.md) | High | Chromium: CVE-2026-79120 Uninitialized resource in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-3931](https://patchblox.com/security/data/cve/CVE-2026-3931.md) | High | Chromium: CVE-2026-3931 Heap buffer overflow in Skia | 9.6 | 0.0032 | | | [CVE-2026-17702](https://patchblox.com/security/data/cve/CVE-2026-17702.md) | High | Chromium: CVE-2026-17702 Inappropriate implementation in Skia | 9.6 | 0.0031 | | | [CVE-2026-9879](https://patchblox.com/security/data/cve/CVE-2026-9879.md) | High | Chromium: CVE-2026-9879 Out of bounds write in ANGLE | 9.6 | 0.0031 | | | [CVE-2026-9969](https://patchblox.com/security/data/cve/CVE-2026-9969.md) | High | Chromium: CVE-2026-9969 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0031 | | | [CVE-2026-10889](https://patchblox.com/security/data/cve/CVE-2026-10889.md) | High | Chromium: CVE-2026-10889 Out of bounds read in ANGLE | 9.6 | 0.0030 | | | [CVE-2026-10919](https://patchblox.com/security/data/cve/CVE-2026-10919.md) | High | Chromium: CVE-2026-10919 Use after free in ANGLE | 9.6 | 0.0030 | | | [CVE-2026-65341](https://patchblox.com/security/data/cve/CVE-2026-65341.md) | High | WebKit: Processing maliciously crafted web content may lead to memory corruption | 9.6 | 0.0030 | | | [CVE-2026-4448](https://patchblox.com/security/data/cve/CVE-2026-4448.md) | High | Chromium: CVE-2026-4448 Heap buffer overflow in ANGLE | 9.6 | 0.0030 | | | [CVE-2025-32318](https://patchblox.com/security/data/cve/CVE-2025-32318.md) | High | webkit2gtk: In Skia, there is a possible out of bounds write due to a heap buffer overflow | 8.8 | 0.0030 | | | [CVE-2026-17750](https://patchblox.com/security/data/cve/CVE-2026-17750.md) | High | Chromium: CVE-2026-17750 Use after free in ANGLE | 9.6 | 0.0029 | | | [CVE-2026-79269](https://patchblox.com/security/data/cve/CVE-2026-79269.md) | High | Chromium: CVE-2026-79269 Uninitialized resource in ANGLE | 9.6 | 0.0029 | | | [CVE-2026-15774](https://patchblox.com/security/data/cve/CVE-2026-15774.md) | High | Chromium: CVE-2026-15774 Use after free in Skia | 9.6 | 0.0029 | | | [CVE-2026-11191](https://patchblox.com/security/data/cve/CVE-2026-11191.md) | High | Chromium: CVE-2026-11191 Out of bounds memory access in ANGLE | 9.6 | 0.0029 | | | [CVE-2026-15109](https://patchblox.com/security/data/cve/CVE-2026-15109.md) | High | Chromium: CVE-2026-15109 Uninitialized Use in ANGLE | 9.6 | 0.0029 | | | [CVE-2026-11004](https://patchblox.com/security/data/cve/CVE-2026-11004.md) | High | Chromium: CVE-2026-11004 Out of bounds read in ANGLE | 9.6 | 0.0029 | | | [CVE-2025-10502](https://patchblox.com/security/data/cve/CVE-2025-10502.md) | High | Chromium: CVE-2025-10502 Heap buffer overflow in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-14125](https://patchblox.com/security/data/cve/CVE-2026-14125.md) | High | Chromium: CVE-2026-14125 Uninitialized Use in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-79118](https://patchblox.com/security/data/cve/CVE-2026-79118.md) | High | Chromium: CVE-2026-79118 Uninitialized resource in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-14386](https://patchblox.com/security/data/cve/CVE-2026-14386.md) | High | Chromium: CVE-2026-14386 Out of bounds read in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-14388](https://patchblox.com/security/data/cve/CVE-2026-14388.md) | High | Chromium: CVE-2026-14388 Out of bounds read in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-4460](https://patchblox.com/security/data/cve/CVE-2026-4460.md) | High | Chromium: CVE-2026-4460 Out of bounds read in Skia | 9.6 | 0.0028 | | | [CVE-2026-4464](https://patchblox.com/security/data/cve/CVE-2026-4464.md) | High | Chromium: CVE-2026-4464 Integer overflow in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-78914](https://patchblox.com/security/data/cve/CVE-2026-78914.md) | High | Chromium: CVE-2026-78914 Uninitialized resource in Skia | 9.6 | 0.0027 | | | [CVE-2026-9940](https://patchblox.com/security/data/cve/CVE-2026-9940.md) | High | Chromium: CVE-2026-9940 Heap buffer overflow in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-16413](https://patchblox.com/security/data/cve/CVE-2026-16413.md) | High | Chromium: CVE-2026-16413 Out of bounds write in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-43660](https://patchblox.com/security/data/cve/CVE-2026-43660.md) | High | WebKit: Processing maliciously crafted web content may prevent Content Security Policy from being enforced | 8.8 | 0.0027 | | | [CVE-2026-9901](https://patchblox.com/security/data/cve/CVE-2026-9901.md) | High | Chromium: CVE-2026-9901 Use after free in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-9909](https://patchblox.com/security/data/cve/CVE-2026-9909.md) | High | Chromium: CVE-2026-9909 Integer overflow in Skia | 9.6 | 0.0027 | | | [CVE-2026-9983](https://patchblox.com/security/data/cve/CVE-2026-9983.md) | High | Chromium: CVE-2026-9983 Type Confusion in Skia | 9.6 | 0.0027 | | | [CVE-2026-17745](https://patchblox.com/security/data/cve/CVE-2026-17745.md) | High | Chromium: CVE-2026-17745 Out of bounds read in Skia | 9.6 | 0.0027 | | | [CVE-2026-9923](https://patchblox.com/security/data/cve/CVE-2026-9923.md) | High | Chromium: CVE-2026-9923 Use after free in Skia | 9.6 | 0.0027 | | | [CVE-2026-5283](https://patchblox.com/security/data/cve/CVE-2026-5283.md) | High | Chromium: CVE-2026-5283 Inappropriate implementation in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-11039](https://patchblox.com/security/data/cve/CVE-2026-11039.md) | High | Chromium: CVE-2026-11039 Uninitialized Use in Skia | 9.6 | 0.0026 | | | [CVE-2026-11057](https://patchblox.com/security/data/cve/CVE-2026-11057.md) | High | Chromium: CVE-2026-11057 Uninitialized Use in Skia | 9.6 | 0.0026 | | | [CVE-2026-11087](https://patchblox.com/security/data/cve/CVE-2026-11087.md) | High | Chromium: CVE-2026-11087 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-11090](https://patchblox.com/security/data/cve/CVE-2026-11090.md) | High | Chromium: CVE-2026-11090 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-11104](https://patchblox.com/security/data/cve/CVE-2026-11104.md) | High | Chromium: CVE-2026-11104 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-11109](https://patchblox.com/security/data/cve/CVE-2026-11109.md) | High | Chromium: CVE-2026-11109 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-11110](https://patchblox.com/security/data/cve/CVE-2026-11110.md) | High | Chromium: CVE-2026-11110 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-11123](https://patchblox.com/security/data/cve/CVE-2026-11123.md) | High | Chromium: CVE-2026-11123 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-11137](https://patchblox.com/security/data/cve/CVE-2026-11137.md) | High | Chromium: CVE-2026-11137 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-11138](https://patchblox.com/security/data/cve/CVE-2026-11138.md) | High | Chromium: CVE-2026-11138 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-9953](https://patchblox.com/security/data/cve/CVE-2026-9953.md) | High | Chromium: CVE-2026-9953 Out of bounds read in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-14427](https://patchblox.com/security/data/cve/CVE-2026-14427.md) | High | Chromium: CVE-2026-14427 Heap buffer overflow in Skia | 9.6 | 0.0026 | | | [CVE-2026-9915](https://patchblox.com/security/data/cve/CVE-2026-9915.md) | High | Chromium: CVE-2026-9915 Heap buffer overflow in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-9926](https://patchblox.com/security/data/cve/CVE-2026-9926.md) | High | Chromium: CVE-2026-9926 Heap buffer overflow in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-79144](https://patchblox.com/security/data/cve/CVE-2026-79144.md) | High | Chromium: CVE-2026-79144 Information leak in Skia | 9.6 | 0.0026 | | | [CVE-2026-9965](https://patchblox.com/security/data/cve/CVE-2026-9965.md) | High | Chromium: CVE-2026-9965 Out of bounds write in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-14396](https://patchblox.com/security/data/cve/CVE-2026-14396.md) | High | Chromium: CVE-2026-14396 Out of bounds read in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-14412](https://patchblox.com/security/data/cve/CVE-2026-14412.md) | High | Chromium: CVE-2026-14412 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-79112](https://patchblox.com/security/data/cve/CVE-2026-79112.md) | High | Chromium: CVE-2026-79112 Out of bounds read in Skia | 9.6 | 0.0025 | | | [CVE-2026-9908](https://patchblox.com/security/data/cve/CVE-2026-9908.md) | High | Chromium: CVE-2026-9908 Out of bounds read in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-9914](https://patchblox.com/security/data/cve/CVE-2026-9914.md) | High | Chromium: CVE-2026-9914 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-9935](https://patchblox.com/security/data/cve/CVE-2026-9935.md) | High | Chromium: CVE-2026-9935 Uninitialized Use in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-14414](https://patchblox.com/security/data/cve/CVE-2026-14414.md) | High | Chromium: CVE-2026-14414 Insufficient validation of untrusted input in Skia | 9.6 | 0.0025 | | | [CVE-2026-11124](https://patchblox.com/security/data/cve/CVE-2026-11124.md) | High | Chromium: CVE-2026-11124 Heap buffer overflow in Skia | 9.6 | 0.0025 | | | [CVE-2026-6364](https://patchblox.com/security/data/cve/CVE-2026-6364.md) | High | Chromium: CVE-2026-6364 Out of bounds read in Skia | 9.6 | 0.0025 | | | [CVE-2026-9913](https://patchblox.com/security/data/cve/CVE-2026-9913.md) | High | Chromium: CVE-2026-9913 Inappropriate implementation in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-14389](https://patchblox.com/security/data/cve/CVE-2026-14389.md) | High | Google Chrome: Integer overflow | 9.6 | 0.0025 | | | [CVE-2025-54627](https://patchblox.com/security/data/cve/CVE-2025-54627.md) | High | webkit2gtk: Out-of-bounds write vulnerability in the skia module | 8.8 | 0.0024 | | | [CVE-2026-11051](https://patchblox.com/security/data/cve/CVE-2026-11051.md) | High | Chromium: CVE-2026-11051 Out of bounds read in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-11121](https://patchblox.com/security/data/cve/CVE-2026-11121.md) | High | Chromium: CVE-2026-11121 Insufficient validation of untrusted input in Skia | 9.6 | 0.0024 | | | [CVE-2026-14429](https://patchblox.com/security/data/cve/CVE-2026-14429.md) | High | Chromium: CVE-2026-14429 Insufficient validation of untrusted input in Skia | 9.6 | 0.0024 | | | [CVE-2026-11111](https://patchblox.com/security/data/cve/CVE-2026-11111.md) | High | Chromium: CVE-2026-11111 Out of bounds read in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-7900](https://patchblox.com/security/data/cve/CVE-2026-7900.md) | High | Chromium: CVE-2026-7900 Heap buffer overflow in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-11040](https://patchblox.com/security/data/cve/CVE-2026-11040.md) | High | Chromium: CVE-2026-11040 Use after free in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-14400](https://patchblox.com/security/data/cve/CVE-2026-14400.md) | High | Chromium: CVE-2026-14400 Out of bounds write in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-16417](https://patchblox.com/security/data/cve/CVE-2026-16417.md) | High | Chromium: CVE-2026-16417 Uninitialized Use in Skia | 9.6 | 0.0024 | | | [CVE-2026-9877](https://patchblox.com/security/data/cve/CVE-2026-9877.md) | High | Chromium: CVE-2026-9877 Use after free in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-9916](https://patchblox.com/security/data/cve/CVE-2026-9916.md) | High | Chromium: CVE-2026-9916 Out of bounds write in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-9925](https://patchblox.com/security/data/cve/CVE-2026-9925.md) | High | Chromium: CVE-2026-9925 Use after free in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-11663](https://patchblox.com/security/data/cve/CVE-2026-11663.md) | High | Chromium: CVE-2026-11663 Use after free in Skia | 9.6 | 0.0023 | | | [CVE-2026-10009](https://patchblox.com/security/data/cve/CVE-2026-10009.md) | High | Chromium: CVE-2026-10009 Integer overflow in Skia | 9.6 | 0.0023 | | | [CVE-2026-9882](https://patchblox.com/security/data/cve/CVE-2026-9882.md) | High | Chromium: CVE-2026-9882 Integer overflow in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-11159](https://patchblox.com/security/data/cve/CVE-2026-11159.md) | High | Chromium: CVE-2026-11159 Uninitialized Use in Skia | 9.6 | 0.0023 | | | [CVE-2026-17914](https://patchblox.com/security/data/cve/CVE-2026-17914.md) | High | Chromium: CVE-2026-17914 Side-channel information leakage in Skia | 9.6 | 0.0023 | | | [CVE-2024-43768](https://patchblox.com/security/data/cve/CVE-2024-43768.md) | High | webkit2gtk3: This update for webkit2gtk3 fixes the following issues: Security issues fixed: WebKitGTK and WPE WebKit Security Ad... | 7.8 | 0.0023 | | | [CVE-2026-9899](https://patchblox.com/security/data/cve/CVE-2026-9899.md) | High | Chromium: CVE-2026-9899 Use after free in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-9900](https://patchblox.com/security/data/cve/CVE-2026-9900.md) | High | Chromium: CVE-2026-9900 Out of bounds write in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-9904](https://patchblox.com/security/data/cve/CVE-2026-9904.md) | High | Chromium: CVE-2026-9904 Use after free in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-9975](https://patchblox.com/security/data/cve/CVE-2026-9975.md) | High | Chromium: CVE-2026-9975 Out of bounds read and write in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-43670](https://patchblox.com/security/data/cve/CVE-2026-43670.md) | High | WebKit: Processing maliciously crafted web content may bypass Content Security Policy | 8.8 | 0.0023 | | | [CVE-2026-79147](https://patchblox.com/security/data/cve/CVE-2026-79147.md) | High | Chromium: CVE-2026-79147 Information leak in Skia | 9.6 | 0.0022 | | | [CVE-2026-9911](https://patchblox.com/security/data/cve/CVE-2026-9911.md) | High | Chromium: CVE-2026-9911 Integer overflow in ANGLE | 9.6 | 0.0022 | | | [CVE-2026-9946](https://patchblox.com/security/data/cve/CVE-2026-9946.md) | High | Chromium: CVE-2026-9946 Use after free in ANGLE | 9.6 | 0.0022 | | | [CVE-2026-7920](https://patchblox.com/security/data/cve/CVE-2026-7920.md) | High | Chromium: CVE-2026-7920 Use after free in Skia | 9.6 | 0.0022 | | | [CVE-2026-7923](https://patchblox.com/security/data/cve/CVE-2026-7923.md) | High | Chromium: CVE-2026-7923 Out of bounds write in Skia | 9.6 | 0.0022 | | | [CVE-2026-28984](https://patchblox.com/security/data/cve/CVE-2026-28984.md) | High | webkit2gtk: The issue was addressed with improved memory handling | 9.6 | 0.0022 | | | [CVE-2026-14413](https://patchblox.com/security/data/cve/CVE-2026-14413.md) | High | Chromium: CVE-2026-14413 Uninitialized Use in ANGLE | 9.6 | 0.0021 | | | [CVE-2026-11675](https://patchblox.com/security/data/cve/CVE-2026-11675.md) | High | Chromium: CVE-2026-11675 Insufficient validation of untrusted input in Skia | 9.6 | 0.0021 | | | [CVE-2026-9942](https://patchblox.com/security/data/cve/CVE-2026-9942.md) | High | Chromium: CVE-2026-9942 Uninitialized Use in ANGLE | 9.6 | 0.0021 | | | [CVE-2026-9944](https://patchblox.com/security/data/cve/CVE-2026-9944.md) | High | Chromium: CVE-2026-9944 Uninitialized Use in ANGLE | 9.6 | 0.0021 | | | [CVE-2026-7942](https://patchblox.com/security/data/cve/CVE-2026-7942.md) | High | Chromium: CVE-2026-7942 Integer overflow in ANGLE | 9.6 | 0.0020 | | | [CVE-2026-10018](https://patchblox.com/security/data/cve/CVE-2026-10018.md) | High | Chromium: CVE-2026-10018 Integer overflow in ANGLE | 9.6 | 0.0020 | | | [CVE-2026-14410](https://patchblox.com/security/data/cve/CVE-2026-14410.md) | High | Chromium: CVE-2026-14410 Inappropriate implementation in Skia | 9.6 | 0.0020 | | | [CVE-2026-9981](https://patchblox.com/security/data/cve/CVE-2026-9981.md) | High | Chromium: CVE-2026-9981 Inappropriate implementation in Skia | 9.6 | 0.0020 | | | [CVE-2026-10019](https://patchblox.com/security/data/cve/CVE-2026-10019.md) | High | Chromium: CVE-2026-10019 Integer overflow in ANGLE | 9.6 | 0.0020 | | | [CVE-2026-14418](https://patchblox.com/security/data/cve/CVE-2026-14418.md) | High | Chromium: CVE-2026-14418 Uninitialized Use in ANGLE | 9.6 | 0.0020 | | | [CVE-2026-9982](https://patchblox.com/security/data/cve/CVE-2026-9982.md) | High | Chromium: CVE-2026-9982 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0020 | | | [CVE-2026-7949](https://patchblox.com/security/data/cve/CVE-2026-7949.md) | High | Chromium: CVE-2026-7949 Out of bounds read in Skia | 9.6 | 0.0019 | | | [CVE-2026-10012](https://patchblox.com/security/data/cve/CVE-2026-10012.md) | High | Chromium: CVE-2026-10012 Use after free in Skia | 9.6 | 0.0018 | | | [CVE-2026-9998](https://patchblox.com/security/data/cve/CVE-2026-9998.md) | High | Chromium: CVE-2026-9998 Integer overflow in Skia | 9.6 | 0.0018 | | | [CVE-2026-10011](https://patchblox.com/security/data/cve/CVE-2026-10011.md) | High | Chromium: CVE-2026-10011 Inappropriate implementation in Skia | 9.6 | 0.0017 | | | [CVE-2026-7943](https://patchblox.com/security/data/cve/CVE-2026-7943.md) | High | Chromium: CVE-2026-7943 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0017 | | | [CVE-2026-8579](https://patchblox.com/security/data/cve/CVE-2026-8579.md) | High | Chromium: CVE-2026-8579 Insufficient validation of untrusted input in Skia | 9.6 | 0.0014 | | | [CVE-2026-64781](https://patchblox.com/security/data/cve/CVE-2026-64781.md) | Routine | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 4.3 | 0.0053 | | | [CVE-2026-86898](https://patchblox.com/security/data/cve/CVE-2026-86898.md) | Routine | webkit2gtk: A logic issue was addressed with improved state management | 5.4 | 0.0035 | | | [CVE-2025-48622](https://patchblox.com/security/data/cve/CVE-2025-48622.md) | Routine | webkit2gtk: In ProcessArea of dng_misc_opcodes.cpp, there is a possible out of bounds read due to a buffer overflow | 5.5 | 0.0011 | | --- Data as of 2026-11-10T13:56:55Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.