# RHSA-2026:74084: Security update for 4 packages RHSA-2026:74084, released July 21, 2026, fixes 323 CVEs across 4 products. One of them is being exploited (CVE-2026-3909); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/rhsa-2026-74084 - Platform: Linux - Released: Jul 21, 2026 - Priority: Patch now (Closes CVE-2026-3909, exploited (CISA KEV)) - CVEs: 323, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://access.redhat.com/errata/RHSA-2026:74084 ## Applies to | Product | Release | Fixed in | |---|---|---| | [webkit2gtk3](https://patchblox.com/security/data/product/linux/webkit2gtk3.md) | RHEL 8 | 0:2.54.0-1.el8_10 | | [webkit2gtk3-devel](https://patchblox.com/security/data/product/linux/webkit2gtk3-devel.md) | RHEL 8 | 0:2.54.0-1.el8_10 | | [webkit2gtk3-jsc](https://patchblox.com/security/data/product/linux/webkit2gtk3-jsc.md) | RHEL 8 | 0:2.54.0-1.el8_10 | | [webkit2gtk3-jsc-devel](https://patchblox.com/security/data/product/linux/webkit2gtk3-jsc-devel.md) | RHEL 8 | 0:2.54.0-1.el8_10 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-3909](https://patchblox.com/security/data/cve/CVE-2026-3909.md) | Patch now | Chromium: CVE-2026-3909 Out of bounds write in Skia | 9.6 | 0.0233 | CISA KEV | | [CVE-2026-10881](https://patchblox.com/security/data/cve/CVE-2026-10881.md) | Urgent | Chromium: CVE-2026-10881 Out of bounds read and write in ANGLE | 9.6 | 0.0063 | | | [CVE-2026-78904](https://patchblox.com/security/data/cve/CVE-2026-78904.md) | Urgent | Chromium: CVE-2026-78904 Type confusion in ANGLE | 9.6 | 0.0062 | | | [CVE-2026-78989](https://patchblox.com/security/data/cve/CVE-2026-78989.md) | Urgent | Chromium: CVE-2026-78989 Out of bounds read in ANGLE | 9.6 | 0.0056 | | | [CVE-2026-17687](https://patchblox.com/security/data/cve/CVE-2026-17687.md) | Urgent | Chromium: CVE-2026-17687 Type Confusion in ANGLE | 9.6 | 0.0056 | | | [CVE-2026-17655](https://patchblox.com/security/data/cve/CVE-2026-17655.md) | Urgent | Chromium: CVE-2026-17655 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0055 | | | [CVE-2026-17697](https://patchblox.com/security/data/cve/CVE-2026-17697.md) | Urgent | Chromium: CVE-2026-17697 Type Confusion in ANGLE | 9.6 | 0.0055 | | | [CVE-2026-17671](https://patchblox.com/security/data/cve/CVE-2026-17671.md) | Urgent | Chromium: CVE-2026-17671 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0051 | | | [CVE-2026-17682](https://patchblox.com/security/data/cve/CVE-2026-17682.md) | Urgent | Chromium: CVE-2026-17682 Integer overflow in ANGLE | 9.6 | 0.0051 | | | [CVE-2026-17704](https://patchblox.com/security/data/cve/CVE-2026-17704.md) | Urgent | Chromium: CVE-2026-17704 Use after free in ANGLE | 9.6 | 0.0051 | | | [CVE-2026-17717](https://patchblox.com/security/data/cve/CVE-2026-17717.md) | Urgent | Chromium: CVE-2026-17717 Integer overflow in ANGLE | 9.6 | 0.0051 | | | [CVE-2026-17676](https://patchblox.com/security/data/cve/CVE-2026-17676.md) | Urgent | Chromium: CVE-2026-17676 Inappropriate implementation in ANGLE | 9.6 | 0.0049 | | | [CVE-2026-79282](https://patchblox.com/security/data/cve/CVE-2026-79282.md) | Urgent | chromium: Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute ar... | 9.6 | 0.0048 | | | [CVE-2026-79131](https://patchblox.com/security/data/cve/CVE-2026-79131.md) | Urgent | Chromium: CVE-2026-79131 Out of bounds write in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-79149](https://patchblox.com/security/data/cve/CVE-2026-79149.md) | Urgent | Chromium: CVE-2026-79149 Use after free in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-79188](https://patchblox.com/security/data/cve/CVE-2026-79188.md) | Urgent | Chromium: CVE-2026-79188 Out of bounds write in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-79275](https://patchblox.com/security/data/cve/CVE-2026-79275.md) | Urgent | Chromium: CVE-2026-79275 Use after free in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-79019](https://patchblox.com/security/data/cve/CVE-2026-79019.md) | Urgent | Chromium: CVE-2026-79019 Out of bounds write in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-17691](https://patchblox.com/security/data/cve/CVE-2026-17691.md) | Urgent | Chromium: CVE-2026-17691 Out of bounds write in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-17695](https://patchblox.com/security/data/cve/CVE-2026-17695.md) | Urgent | Chromium: CVE-2026-17695 Inappropriate implementation in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-17701](https://patchblox.com/security/data/cve/CVE-2026-17701.md) | Urgent | Chromium: CVE-2026-17701 Out of bounds read in ANGLE | 9.6 | 0.0047 | | | [CVE-2026-13885](https://patchblox.com/security/data/cve/CVE-2026-13885.md) | Urgent | Chromium: CVE-2026-13885 Use after free in Skia | 9.6 | 0.0046 | | | [CVE-2026-79043](https://patchblox.com/security/data/cve/CVE-2026-79043.md) | Urgent | Chromium: CVE-2026-79043 Out of bounds write in ANGLE | 9.6 | 0.0046 | | | [CVE-2026-17718](https://patchblox.com/security/data/cve/CVE-2026-17718.md) | Urgent | Chromium: CVE-2026-17718 Use after free in ANGLE | 9.6 | 0.0044 | | | [CVE-2026-17721](https://patchblox.com/security/data/cve/CVE-2026-17721.md) | Urgent | Chromium: CVE-2026-17721 Out of bounds write in ANGLE | 9.6 | 0.0044 | | | [CVE-2026-17675](https://patchblox.com/security/data/cve/CVE-2026-17675.md) | Urgent | Chromium: CVE-2026-17675 Out of bounds write in ANGLE | 9.6 | 0.0043 | | | [CVE-2026-17801](https://patchblox.com/security/data/cve/CVE-2026-17801.md) | Urgent | Chromium: CVE-2026-17801 Out of bounds memory access in ANGLE | 9.6 | 0.0043 | | | [CVE-2026-13780](https://patchblox.com/security/data/cve/CVE-2026-13780.md) | Urgent | Chromium: CVE-2026-13780 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0043 | | | [CVE-2026-13781](https://patchblox.com/security/data/cve/CVE-2026-13781.md) | Urgent | Chromium: CVE-2026-13781 Insufficient validation of untrusted input in Skia | 9.6 | 0.0043 | | | [CVE-2026-79130](https://patchblox.com/security/data/cve/CVE-2026-79130.md) | Urgent | Chromium: CVE-2026-79130 Buffer overflow in ANGLE | 9.6 | 0.0042 | | | [CVE-2026-13883](https://patchblox.com/security/data/cve/CVE-2026-13883.md) | Urgent | Chromium: CVE-2026-13883 Type Confusion in ANGLE | 9.6 | 0.0041 | | | [CVE-2026-13819](https://patchblox.com/security/data/cve/CVE-2026-13819.md) | Urgent | Chromium: CVE-2026-13819 Out of bounds read in ANGLE | 9.6 | 0.0040 | | | [CVE-2026-19157](https://patchblox.com/security/data/cve/CVE-2026-19157.md) | Urgent | CVE-2026-19157 Out of bounds write in ANGLE | 9.6 | 0.0038 | | | [CVE-2026-13859](https://patchblox.com/security/data/cve/CVE-2026-13859.md) | Urgent | Chromium: CVE-2026-13859 Inappropriate implementation in ANGLE | 9.6 | 0.0038 | | | [CVE-2026-79189](https://patchblox.com/security/data/cve/CVE-2026-79189.md) | Urgent | Chromium: CVE-2026-79189 Out of bounds write in ANGLE | 9.6 | 0.0038 | | | [CVE-2026-13833](https://patchblox.com/security/data/cve/CVE-2026-13833.md) | Urgent | Chromium: CVE-2026-13833 Uninitialized Use in ANGLE | 9.6 | 0.0038 | | | [CVE-2023-4860](https://patchblox.com/security/data/cve/CVE-2023-4860.md) | Urgent | chromium: Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compro... | 9.6 | 0.0037 | | | [CVE-2026-17847](https://patchblox.com/security/data/cve/CVE-2026-17847.md) | Urgent | Chromium: CVE-2026-17847 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0037 | | | [CVE-2026-79138](https://patchblox.com/security/data/cve/CVE-2026-79138.md) | Urgent | Chromium: CVE-2026-79138 Out of bounds write in ANGLE | 9.6 | 0.0036 | | | [CVE-2026-13820](https://patchblox.com/security/data/cve/CVE-2026-13820.md) | Urgent | Chromium: CVE-2026-13820 Out of bounds read in Skia | 9.6 | 0.0034 | | | [CVE-2026-10974](https://patchblox.com/security/data/cve/CVE-2026-10974.md) | Urgent | Chromium: CVE-2026-10974 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-11065](https://patchblox.com/security/data/cve/CVE-2026-11065.md) | Urgent | Chromium: CVE-2026-11065 Use after free in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-11088](https://patchblox.com/security/data/cve/CVE-2026-11088.md) | Urgent | Chromium: CVE-2026-11088 Integer overflow in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-17832](https://patchblox.com/security/data/cve/CVE-2026-17832.md) | Urgent | Chromium: CVE-2026-17832 Use after free in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-14385](https://patchblox.com/security/data/cve/CVE-2026-14385.md) | Urgent | Chromium: CVE-2026-14385 Heap buffer overflow in ANGLE | 9.6 | 0.0033 | | | [CVE-2026-11043](https://patchblox.com/security/data/cve/CVE-2026-11043.md) | Urgent | Chromium: CVE-2026-11043 Out of bounds write in ANGLE | 9.6 | 0.0030 | | | [CVE-2026-14387](https://patchblox.com/security/data/cve/CVE-2026-14387.md) | Urgent | Google Chrome: Integer overflow | 9.6 | 0.0029 | | | [CVE-2026-11113](https://patchblox.com/security/data/cve/CVE-2026-11113.md) | Urgent | Chromium: CVE-2026-11113 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-14382](https://patchblox.com/security/data/cve/CVE-2026-14382.md) | Urgent | Chromium: CVE-2026-14382 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-14044](https://patchblox.com/security/data/cve/CVE-2026-14044.md) | Urgent | Chromium: CVE-2026-14044 Use after free in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-11061](https://patchblox.com/security/data/cve/CVE-2026-11061.md) | Urgent | Chromium: CVE-2026-11061 Out of bounds read in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-11066](https://patchblox.com/security/data/cve/CVE-2026-11066.md) | Urgent | Chromium: CVE-2026-11066 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-14411](https://patchblox.com/security/data/cve/CVE-2026-14411.md) | Urgent | Chromium: CVE-2026-14411 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-14384](https://patchblox.com/security/data/cve/CVE-2026-14384.md) | Urgent | Google Chrome: Out of bounds read | 9.6 | 0.0026 | | | [CVE-2026-13975](https://patchblox.com/security/data/cve/CVE-2026-13975.md) | Urgent | Chromium: CVE-2026-13975 Out of bounds read in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-16419](https://patchblox.com/security/data/cve/CVE-2026-16419.md) | Urgent | Chromium: CVE-2026-16419 Out of bounds read and write in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-14390](https://patchblox.com/security/data/cve/CVE-2026-14390.md) | Urgent | Chromium: CVE-2026-14390 Use after free in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-14152](https://patchblox.com/security/data/cve/CVE-2026-14152.md) | Urgent | Chromium: CVE-2026-14152 Out of bounds write in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-14397](https://patchblox.com/security/data/cve/CVE-2026-14397.md) | Urgent | Chromium: CVE-2026-14397 Out of bounds write in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-14401](https://patchblox.com/security/data/cve/CVE-2026-14401.md) | Urgent | Chromium: CVE-2026-14401 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-14391](https://patchblox.com/security/data/cve/CVE-2026-14391.md) | Urgent | Chromium: CVE-2026-14391 Integer overflow in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-14398](https://patchblox.com/security/data/cve/CVE-2026-14398.md) | Urgent | Chromium: CVE-2026-14398 Use after free in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-14419](https://patchblox.com/security/data/cve/CVE-2026-14419.md) | Urgent | Chromium: CVE-2026-14419 Use after free in Skia | 9.6 | 0.0023 | | | [CVE-2026-14425](https://patchblox.com/security/data/cve/CVE-2026-14425.md) | Urgent | Chromium: CVE-2026-14425 Use after free in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-14402](https://patchblox.com/security/data/cve/CVE-2026-14402.md) | Urgent | Chromium: CVE-2026-14402 Uninitialized Use in ANGLE | 9.6 | 0.0022 | | | [CVE-2026-11099](https://patchblox.com/security/data/cve/CVE-2026-11099.md) | Urgent | Chromium: CVE-2026-11099 Vulnerability in Skia | 9.6 | n/a | | | [CVE-2026-8510](https://patchblox.com/security/data/cve/CVE-2026-8510.md) | High | Chromium: CVE-2026-8510 Integer overflow in Skia | 9.6 | 0.0995 | | | [CVE-2025-9478](https://patchblox.com/security/data/cve/CVE-2025-9478.md) | High | Chromium: CVE-2025-9478 Use after free in ANGLE | 9.6 | 0.0742 | | | [CVE-2026-43715](https://patchblox.com/security/data/cve/CVE-2026-43715.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * Mozilla:... | 9.6 | 0.0126 | | | [CVE-2024-7532](https://patchblox.com/security/data/cve/CVE-2024-7532.md) | High | Chromium: CVE-2024-7533 Use after free in Sharing | 9.6 | 0.0104 | | | [CVE-2026-43725](https://patchblox.com/security/data/cve/CVE-2026-43725.md) | High | WebKit: A malicious website may be able to process restricted web content outside the sandbox | 9.6 | 0.0091 | | | [CVE-2026-3538](https://patchblox.com/security/data/cve/CVE-2026-3538.md) | High | Chromium: CVE-2026-3538 Integer overflow in Skia | 9.6 | 0.0078 | | | [CVE-2024-7966](https://patchblox.com/security/data/cve/CVE-2024-7966.md) | High | Chromium: CVE-2024-7966 Out of bounds memory access in Skia | 9.6 | 0.0071 | | | [CVE-2026-3536](https://patchblox.com/security/data/cve/CVE-2026-3536.md) | High | Chromium: CVE-2026-3536 Integer overflow in ANGLE | 9.6 | 0.0070 | | | [CVE-2026-43707](https://patchblox.com/security/data/cve/CVE-2026-43707.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected process crash | 9.6 | 0.0069 | | | [CVE-2026-43745](https://patchblox.com/security/data/cve/CVE-2026-43745.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0068 | | | [CVE-2026-43720](https://patchblox.com/security/data/cve/CVE-2026-43720.md) | High | WebKit Canvas: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0066 | | | [CVE-2026-65331](https://patchblox.com/security/data/cve/CVE-2026-65331.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0065 | | | [CVE-2026-65332](https://patchblox.com/security/data/cve/CVE-2026-65332.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0065 | | | [CVE-2026-65337](https://patchblox.com/security/data/cve/CVE-2026-65337.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0065 | | | [CVE-2026-65340](https://patchblox.com/security/data/cve/CVE-2026-65340.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0065 | | | [CVE-2026-65351](https://patchblox.com/security/data/cve/CVE-2026-65351.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0065 | | | [CVE-2024-8636](https://patchblox.com/security/data/cve/CVE-2024-8636.md) | High | Chromium: CVE-2024-8636 Heap buffer overflow in Skia | 9.6 | 0.0065 | | | [CVE-2026-10883](https://patchblox.com/security/data/cve/CVE-2026-10883.md) | High | Chromium: CVE-2026-10883 Out of bounds write in ANGLE | 9.6 | 0.0063 | | | [CVE-2026-64780](https://patchblox.com/security/data/cve/CVE-2026-64780.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0063 | | | [CVE-2026-78905](https://patchblox.com/security/data/cve/CVE-2026-78905.md) | High | Chromium: CVE-2026-78905 Type confusion in ANGLE | 9.6 | 0.0062 | | | [CVE-2024-8198](https://patchblox.com/security/data/cve/CVE-2024-8198.md) | High | Chromium: CVE-2024-8198 Heap buffer overflow in Skia | 9.6 | 0.0061 | | | [CVE-2026-43716](https://patchblox.com/security/data/cve/CVE-2026-43716.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0060 | | | [CVE-2024-8193](https://patchblox.com/security/data/cve/CVE-2024-8193.md) | High | chromium: Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised t... | 9.6 | 0.0059 | | | [CVE-2025-0436](https://patchblox.com/security/data/cve/CVE-2025-0436.md) | High | Chromium: CVE-2025-0436 Integer overflow in Skia | 9.6 | 0.0059 | | | [CVE-2026-43795](https://patchblox.com/security/data/cve/CVE-2026-43795.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0058 | | | [CVE-2026-64784](https://patchblox.com/security/data/cve/CVE-2026-64784.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0058 | | | [CVE-2026-65333](https://patchblox.com/security/data/cve/CVE-2026-65333.md) | High | webkit2gtk: This issue was addressed through improved state management | 9.6 | 0.0058 | | | [CVE-2026-65334](https://patchblox.com/security/data/cve/CVE-2026-65334.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0058 | | | [CVE-2026-65335](https://patchblox.com/security/data/cve/CVE-2026-65335.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0058 | | | [CVE-2026-65336](https://patchblox.com/security/data/cve/CVE-2026-65336.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0058 | | | [CVE-2026-65338](https://patchblox.com/security/data/cve/CVE-2026-65338.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0058 | | | [CVE-2026-79048](https://patchblox.com/security/data/cve/CVE-2026-79048.md) | High | Chromium: CVE-2026-79048 Out of bounds write in ANGLE | 9.6 | 0.0056 | | | [CVE-2026-6296](https://patchblox.com/security/data/cve/CVE-2026-6296.md) | High | Chromium: CVE-2026-6296 Heap buffer overflow in ANGLE | 9.6 | 0.0056 | | | [CVE-2026-43701](https://patchblox.com/security/data/cve/CVE-2026-43701.md) | High | WebKit: A malicious website may be able to process restricted web content outside the sandbox | 9.6 | 0.0055 | | | [CVE-2026-43713](https://patchblox.com/security/data/cve/CVE-2026-43713.md) | High | WebKit: Visiting a website may leak sensitive data | 9.6 | 0.0053 | | | [CVE-2026-19176](https://patchblox.com/security/data/cve/CVE-2026-19176.md) | High | CVE-2026-19176 Use after free in Skia | 9.6 | 0.0053 | | | [CVE-2026-17667](https://patchblox.com/security/data/cve/CVE-2026-17667.md) | High | Chromium: CVE-2026-17667 Uninitialized Use in ANGLE | 9.6 | 0.0052 | | | [CVE-2026-17668](https://patchblox.com/security/data/cve/CVE-2026-17668.md) | High | Chromium: CVE-2026-17668 Uninitialized Use in ANGLE | 9.6 | 0.0052 | | | [CVE-2026-17714](https://patchblox.com/security/data/cve/CVE-2026-17714.md) | High | Chromium: CVE-2026-17714 Uninitialized Use in ANGLE | 9.6 | 0.0052 | | | [CVE-2026-17678](https://patchblox.com/security/data/cve/CVE-2026-17678.md) | High | Chromium: CVE-2026-17678 Out of bounds read in ANGLE | 9.6 | 0.0051 | | | [CVE-2026-83596](https://patchblox.com/security/data/cve/CVE-2026-83596.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium... | 9.6 | 0.0050 | | | [CVE-2026-17653](https://patchblox.com/security/data/cve/CVE-2026-17653.md) | High | Chromium: CVE-2026-17653 Use after free in Skia | 9.6 | 0.0049 | | | [CVE-2026-64730](https://patchblox.com/security/data/cve/CVE-2026-64730.md) | High | WebKit: Visiting a website that frames malicious content may lead to UI spoofing | 9.6 | 0.0049 | | | [CVE-2024-9123](https://patchblox.com/security/data/cve/CVE-2024-9123.md) | High | Chromium: CVE-2024-9123 Integer overflow in Skia | 9.6 | 0.0048 | | | [CVE-2026-79127](https://patchblox.com/security/data/cve/CVE-2026-79127.md) | High | Chromium: CVE-2026-79127 Out of bounds write in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-43732](https://patchblox.com/security/data/cve/CVE-2026-43732.md) | High | WebKit: Processing maliciously crafted web content may disclose sensitive user information | 9.6 | 0.0048 | | | [CVE-2026-17677](https://patchblox.com/security/data/cve/CVE-2026-17677.md) | High | Chromium: CVE-2026-17677 Inappropriate implementation in ANGLE | 9.6 | 0.0048 | | | [CVE-2026-17683](https://patchblox.com/security/data/cve/CVE-2026-17683.md) | High | Chromium: CVE-2026-17683 Inappropriate implementation in ANGLE | 9.6 | 0.0047 | | | [CVE-2026-43676](https://patchblox.com/security/data/cve/CVE-2026-43676.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0047 | | | [CVE-2026-6298](https://patchblox.com/security/data/cve/CVE-2026-6298.md) | High | Chromium: CVE-2026-6298 Heap buffer overflow in Skia | 9.6 | 0.0047 | | | [CVE-2026-78376](https://patchblox.com/security/data/cve/CVE-2026-78376.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium... | 9.6 | 0.0047 | | | [CVE-2026-64715](https://patchblox.com/security/data/cve/CVE-2026-64715.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected process crash | 9.6 | 0.0047 | | | [CVE-2026-64757](https://patchblox.com/security/data/cve/CVE-2026-64757.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0047 | | | [CVE-2026-64713](https://patchblox.com/security/data/cve/CVE-2026-64713.md) | High | WebKit: Websites may know if the user has visited a given link | 9.6 | 0.0047 | | | [CVE-2025-0444](https://patchblox.com/security/data/cve/CVE-2025-0444.md) | High | Chromium: CVE-2025-0444 Use after free in Skia | 9.6 | 0.0046 | | | [CVE-2026-78978](https://patchblox.com/security/data/cve/CVE-2026-78978.md) | High | Chromium: CVE-2026-78978 Out of bounds read in ANGLE | 9.6 | 0.0046 | | | [CVE-2026-17689](https://patchblox.com/security/data/cve/CVE-2026-17689.md) | High | Chromium: CVE-2026-17689 Uninitialized Use in ANGLE | 9.6 | 0.0045 | | | [CVE-2026-78965](https://patchblox.com/security/data/cve/CVE-2026-78965.md) | High | Chromium: CVE-2026-78965 Uninitialized resource in ANGLE | 9.6 | 0.0045 | | | [CVE-2026-5275](https://patchblox.com/security/data/cve/CVE-2026-5275.md) | High | Chromium: CVE-2026-5275 Heap buffer overflow in ANGLE | 9.6 | 0.0045 | | | [CVE-2026-17712](https://patchblox.com/security/data/cve/CVE-2026-17712.md) | High | Chromium: CVE-2026-17712 Race in Skia | 9.6 | 0.0045 | | | [CVE-2026-9893](https://patchblox.com/security/data/cve/CVE-2026-9893.md) | High | Chromium: CVE-2026-9893 Use after free in Skia | 9.6 | 0.0044 | | | [CVE-2026-10941](https://patchblox.com/security/data/cve/CVE-2026-10941.md) | High | Chromium: CVE-2026-10941 Out of bounds memory access in Skia | 9.6 | 0.0044 | | | [CVE-2026-43721](https://patchblox.com/security/data/cve/CVE-2026-43721.md) | High | WebKit Storage: A malicious website may be able to silently hijack clipboard data | 9.6 | 0.0044 | | | [CVE-2026-43804](https://patchblox.com/security/data/cve/CVE-2026-43804.md) | High | WebKit: Visiting a website may lead to an app denial-of-service | 9.6 | 0.0043 | | | [CVE-2026-64782](https://patchblox.com/security/data/cve/CVE-2026-64782.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0043 | | | [CVE-2026-64783](https://patchblox.com/security/data/cve/CVE-2026-64783.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0043 | | | [CVE-2026-43712](https://patchblox.com/security/data/cve/CVE-2026-43712.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * Mozilla:... | 9.6 | 0.0043 | | | [CVE-2026-78906](https://patchblox.com/security/data/cve/CVE-2026-78906.md) | High | Chromium: CVE-2026-78906 Race condition in ANGLE | 9.6 | 0.0042 | | | [CVE-2026-13834](https://patchblox.com/security/data/cve/CVE-2026-13834.md) | High | Chromium: CVE-2026-13834 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0041 | | | [CVE-2026-43731](https://patchblox.com/security/data/cve/CVE-2026-43731.md) | High | WebKit: Processing maliciously crafted web content may lead to memory corruption | 9.6 | 0.0041 | | | [CVE-2026-15766](https://patchblox.com/security/data/cve/CVE-2026-15766.md) | High | Chromium: CVE-2026-15766 Uninitialized Use in Skia | 9.6 | 0.0040 | | | [CVE-2026-79142](https://patchblox.com/security/data/cve/CVE-2026-79142.md) | High | Chromium: CVE-2026-79142 Buffer overflow in ANGLE | 9.6 | 0.0040 | | | [CVE-2026-19160](https://patchblox.com/security/data/cve/CVE-2026-19160.md) | High | CVE-2026-19160 Uninitialized Use in Skia | 9.6 | 0.0040 | | | [CVE-2026-43740](https://patchblox.com/security/data/cve/CVE-2026-43740.md) | High | WebKit: Processing maliciously crafted web content may result in the disclosure of process memory | 9.6 | 0.0040 | | | [CVE-2026-43699](https://patchblox.com/security/data/cve/CVE-2026-43699.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * Mozilla:... | 9.6 | 0.0039 | | | [CVE-2026-43734](https://patchblox.com/security/data/cve/CVE-2026-43734.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected process crash | 9.6 | 0.0039 | | | [CVE-2026-43742](https://patchblox.com/security/data/cve/CVE-2026-43742.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * Mozilla:... | 9.6 | 0.0039 | | | [CVE-2026-10913](https://patchblox.com/security/data/cve/CVE-2026-10913.md) | High | Chromium: CVE-2026-10913 Use after free in ANGLE | 9.6 | 0.0039 | | | [CVE-2026-10914](https://patchblox.com/security/data/cve/CVE-2026-10914.md) | High | Chromium: CVE-2026-10914 Use after free in ANGLE | 9.6 | 0.0039 | | | [CVE-2026-79229](https://patchblox.com/security/data/cve/CVE-2026-79229.md) | High | Chromium: CVE-2026-79229 Uninitialized resource in ANGLE | 9.6 | 0.0039 | | | [CVE-2026-79270](https://patchblox.com/security/data/cve/CVE-2026-79270.md) | High | Chromium: CVE-2026-79270 Uninitialized resource in ANGLE | 9.6 | 0.0039 | | | [CVE-2026-17740](https://patchblox.com/security/data/cve/CVE-2026-17740.md) | High | Chromium: CVE-2026-17740 Uninitialized Use in ANGLE | 9.6 | 0.0039 | | | [CVE-2026-17757](https://patchblox.com/security/data/cve/CVE-2026-17757.md) | High | Chromium: CVE-2026-17757 Uninitialized Use in Skia | 9.6 | 0.0039 | | | [CVE-2026-17771](https://patchblox.com/security/data/cve/CVE-2026-17771.md) | High | Chromium: CVE-2026-17771 Uninitialized Use in Skia | 9.6 | 0.0039 | | | [CVE-2026-17785](https://patchblox.com/security/data/cve/CVE-2026-17785.md) | High | Chromium: CVE-2026-17785 Uninitialized Use in ANGLE | 9.6 | 0.0039 | | | [CVE-2026-13841](https://patchblox.com/security/data/cve/CVE-2026-13841.md) | High | Chromium: CVE-2026-13841 Integer overflow in Skia | 9.6 | 0.0039 | | | [CVE-2026-79020](https://patchblox.com/security/data/cve/CVE-2026-79020.md) | High | Chromium: CVE-2026-79020 Out of bounds read in Skia | 9.6 | 0.0038 | | | [CVE-2026-10955](https://patchblox.com/security/data/cve/CVE-2026-10955.md) | High | Chromium: CVE-2026-10955 Type Confusion in ANGLE | 9.6 | 0.0038 | | | [CVE-2026-64779](https://patchblox.com/security/data/cve/CVE-2026-64779.md) | High | WebKit Storage: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0038 | | | [CVE-2026-13971](https://patchblox.com/security/data/cve/CVE-2026-13971.md) | High | Chromium: CVE-2026-13971 Uninitialized Use in Skia | 9.6 | 0.0038 | | | [CVE-2026-17790](https://patchblox.com/security/data/cve/CVE-2026-17790.md) | High | Chromium: CVE-2026-17790 Uninitialized Use in ANGLE | 9.6 | 0.0037 | | | [CVE-2026-64728](https://patchblox.com/security/data/cve/CVE-2026-64728.md) | High | WebKit: Maliciously crafted web content may violate iframe sandboxing policy | 9.6 | 0.0037 | | | [CVE-2026-79285](https://patchblox.com/security/data/cve/CVE-2026-79285.md) | High | Chromium: CVE-2026-79285 Uninitialized resource in ANGLE | 9.6 | 0.0037 | | | [CVE-2026-84635](https://patchblox.com/security/data/cve/CVE-2026-84635.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * chromium... | 9.6 | 0.0037 | | | [CVE-2026-13877](https://patchblox.com/security/data/cve/CVE-2026-13877.md) | High | Chromium: CVE-2026-13877 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0037 | | | [CVE-2026-39872](https://patchblox.com/security/data/cve/CVE-2026-39872.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * Mozilla:... | 9.6 | 0.0037 | | | [CVE-2026-43663](https://patchblox.com/security/data/cve/CVE-2026-43663.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected process crash | 9.6 | 0.0037 | | | [CVE-2026-11024](https://patchblox.com/security/data/cve/CVE-2026-11024.md) | High | Chromium: CVE-2026-11024 Stack buffer overflow in Skia | 9.6 | 0.0037 | | | [CVE-2026-76046](https://patchblox.com/security/data/cve/CVE-2026-76046.md) | High | chromium: Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had com... | 9.6 | 0.0037 | | | [CVE-2026-64753](https://patchblox.com/security/data/cve/CVE-2026-64753.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0037 | | | [CVE-2026-79240](https://patchblox.com/security/data/cve/CVE-2026-79240.md) | High | Chromium: CVE-2026-79240 Out of bounds write in ANGLE | 9.6 | 0.0036 | | | [CVE-2026-43726](https://patchblox.com/security/data/cve/CVE-2026-43726.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * Mozilla:... | 9.6 | 0.0036 | | | [CVE-2026-5868](https://patchblox.com/security/data/cve/CVE-2026-5868.md) | High | Chromium: CVE-2026-5868 Heap buffer overflow in ANGLE | 9.6 | 0.0035 | | | [CVE-2026-7354](https://patchblox.com/security/data/cve/CVE-2026-7354.md) | High | Google Chrome: Out-of-bounds Read | 9.6 | 0.0035 | | | [CVE-2026-7359](https://patchblox.com/security/data/cve/CVE-2026-7359.md) | High | Google Chrome: Use after free | 9.6 | 0.0035 | | | [CVE-2026-10977](https://patchblox.com/security/data/cve/CVE-2026-10977.md) | High | Chromium: CVE-2026-10977 Uninitialized Use in Skia | 9.6 | 0.0035 | | | [CVE-2026-10994](https://patchblox.com/security/data/cve/CVE-2026-10994.md) | High | Chromium: CVE-2026-10994 Uninitialized Use in ANGLE | 9.6 | 0.0035 | | | [CVE-2026-43727](https://patchblox.com/security/data/cve/CVE-2026-43727.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0035 | | | [CVE-2026-76041](https://patchblox.com/security/data/cve/CVE-2026-76041.md) | High | Chromium: CVE-2026-76041 Information leak in Skia | 9.6 | 0.0035 | | | [CVE-2026-10993](https://patchblox.com/security/data/cve/CVE-2026-10993.md) | High | Chromium: CVE-2026-10993 Heap buffer overflow in Skia | 9.6 | 0.0035 | | | [CVE-2026-19154](https://patchblox.com/security/data/cve/CVE-2026-19154.md) | High | chromium: Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromi... | 9.6 | 0.0035 | | | [CVE-2026-9910](https://patchblox.com/security/data/cve/CVE-2026-9910.md) | High | Chromium: CVE-2026-9910 Out of bounds memory access in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-19173](https://patchblox.com/security/data/cve/CVE-2026-19173.md) | High | CVE-2026-19173 Out of bounds write in Skia | 9.6 | 0.0034 | | | [CVE-2026-10907](https://patchblox.com/security/data/cve/CVE-2026-10907.md) | High | Chromium: CVE-2026-10907 Out of bounds write in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-64778](https://patchblox.com/security/data/cve/CVE-2026-64778.md) | High | WebKit History: Visiting a maliciously crafted website may leak sensitive data | 9.6 | 0.0034 | | | [CVE-2026-19161](https://patchblox.com/security/data/cve/CVE-2026-19161.md) | High | CVE-2026-19161 Uninitialized Use in Skia | 9.6 | 0.0034 | | | [CVE-2026-78958](https://patchblox.com/security/data/cve/CVE-2026-78958.md) | High | Chromium: CVE-2026-78958 Uninitialized resource in Skia | 9.6 | 0.0034 | | | [CVE-2026-7353](https://patchblox.com/security/data/cve/CVE-2026-7353.md) | High | Google Chrome: Heap buffer overflow | 9.6 | 0.0034 | | | [CVE-2025-8901](https://patchblox.com/security/data/cve/CVE-2025-8901.md) | High | Chromium: CVE-2025-8901 Out of bounds write in ANGLE | 9.6 | 0.0034 | | | [CVE-2026-5277](https://patchblox.com/security/data/cve/CVE-2026-5277.md) | High | Chromium: CVE-2026-5277 Integer overflow in ANGLE | 9.6 | 0.0033 | | | [CVE-2026-64787](https://patchblox.com/security/data/cve/CVE-2026-64787.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected process termination | 9.6 | 0.0033 | | | [CVE-2026-5870](https://patchblox.com/security/data/cve/CVE-2026-5870.md) | High | Chromium: CVE-2026-5870 Integer overflow in Skia | 9.6 | 0.0033 | | | [CVE-2026-9878](https://patchblox.com/security/data/cve/CVE-2026-9878.md) | High | Chromium: CVE-2026-9878 Use after free in ANGLE | 9.6 | 0.0033 | | | [CVE-2026-0908](https://patchblox.com/security/data/cve/CVE-2026-0908.md) | High | Chromium: CVE-2026-0908 Use after free in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-10979](https://patchblox.com/security/data/cve/CVE-2026-10979.md) | High | Chromium: CVE-2026-10979 Out of bounds read in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-10985](https://patchblox.com/security/data/cve/CVE-2026-10985.md) | High | Chromium: CVE-2026-10985 Out of bounds read in Skia | 9.6 | 0.0032 | | | [CVE-2026-9927](https://patchblox.com/security/data/cve/CVE-2026-9927.md) | High | Chromium: CVE-2026-9927 Use after free in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-9941](https://patchblox.com/security/data/cve/CVE-2026-9941.md) | High | Chromium: CVE-2026-9941 Use after free in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-79120](https://patchblox.com/security/data/cve/CVE-2026-79120.md) | High | Chromium: CVE-2026-79120 Uninitialized resource in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-10930](https://patchblox.com/security/data/cve/CVE-2026-10930.md) | High | Chromium: CVE-2026-10930 Out of bounds read in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-3931](https://patchblox.com/security/data/cve/CVE-2026-3931.md) | High | Chromium: CVE-2026-3931 Heap buffer overflow in Skia | 9.6 | 0.0032 | | | [CVE-2026-5879](https://patchblox.com/security/data/cve/CVE-2026-5879.md) | High | Chromium: CVE-2026-5879 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0032 | | | [CVE-2026-10929](https://patchblox.com/security/data/cve/CVE-2026-10929.md) | High | Chromium: CVE-2026-10929 Heap buffer overflow in ANGLE | 9.6 | 0.0031 | | | [CVE-2026-17702](https://patchblox.com/security/data/cve/CVE-2026-17702.md) | High | Chromium: CVE-2026-17702 Inappropriate implementation in Skia | 9.6 | 0.0031 | | | [CVE-2026-9879](https://patchblox.com/security/data/cve/CVE-2026-9879.md) | High | Chromium: CVE-2026-9879 Out of bounds write in ANGLE | 9.6 | 0.0031 | | | [CVE-2026-9969](https://patchblox.com/security/data/cve/CVE-2026-9969.md) | High | Chromium: CVE-2026-9969 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0031 | | | [CVE-2026-9928](https://patchblox.com/security/data/cve/CVE-2026-9928.md) | High | Chromium: CVE-2026-9928 Out of bounds read in ANGLE | 9.6 | 0.0030 | | | [CVE-2026-10889](https://patchblox.com/security/data/cve/CVE-2026-10889.md) | High | Chromium: CVE-2026-10889 Out of bounds read in ANGLE | 9.6 | 0.0030 | | | [CVE-2026-10919](https://patchblox.com/security/data/cve/CVE-2026-10919.md) | High | Chromium: CVE-2026-10919 Use after free in ANGLE | 9.6 | 0.0030 | | | [CVE-2026-65341](https://patchblox.com/security/data/cve/CVE-2026-65341.md) | High | WebKit: Processing maliciously crafted web content may lead to memory corruption | 9.6 | 0.0030 | | | [CVE-2026-4448](https://patchblox.com/security/data/cve/CVE-2026-4448.md) | High | Chromium: CVE-2026-4448 Heap buffer overflow in ANGLE | 9.6 | 0.0030 | | | [CVE-2026-17750](https://patchblox.com/security/data/cve/CVE-2026-17750.md) | High | Chromium: CVE-2026-17750 Use after free in ANGLE | 9.6 | 0.0029 | | | [CVE-2026-79230](https://patchblox.com/security/data/cve/CVE-2026-79230.md) | High | Chromium: CVE-2026-79230 Improper input validation in ANGLE | 9.6 | 0.0029 | | | [CVE-2026-79269](https://patchblox.com/security/data/cve/CVE-2026-79269.md) | High | Chromium: CVE-2026-79269 Uninitialized resource in ANGLE | 9.6 | 0.0029 | | | [CVE-2026-15774](https://patchblox.com/security/data/cve/CVE-2026-15774.md) | High | Chromium: CVE-2026-15774 Use after free in Skia | 9.6 | 0.0029 | | | [CVE-2026-10999](https://patchblox.com/security/data/cve/CVE-2026-10999.md) | High | Chromium: CVE-2026-10999 Out of bounds memory access in ANGLE | 9.6 | 0.0029 | | | [CVE-2026-11191](https://patchblox.com/security/data/cve/CVE-2026-11191.md) | High | Chromium: CVE-2026-11191 Out of bounds memory access in ANGLE | 9.6 | 0.0029 | | | [CVE-2026-15109](https://patchblox.com/security/data/cve/CVE-2026-15109.md) | High | Chromium: CVE-2026-15109 Uninitialized Use in ANGLE | 9.6 | 0.0029 | | | [CVE-2025-10502](https://patchblox.com/security/data/cve/CVE-2025-10502.md) | High | Chromium: CVE-2025-10502 Heap buffer overflow in ANGLE | 9.6 | 0.0029 | | | [CVE-2026-10925](https://patchblox.com/security/data/cve/CVE-2026-10925.md) | High | Chromium: CVE-2026-10925 Out of bounds write in Skia | 9.6 | 0.0029 | | | [CVE-2026-11004](https://patchblox.com/security/data/cve/CVE-2026-11004.md) | High | Chromium: CVE-2026-11004 Out of bounds read in ANGLE | 9.6 | 0.0029 | | | [CVE-2026-11044](https://patchblox.com/security/data/cve/CVE-2026-11044.md) | High | Chromium: CVE-2026-11044 Integer overflow in ANGLE | 9.6 | 0.0029 | | | [CVE-2026-11055](https://patchblox.com/security/data/cve/CVE-2026-11055.md) | High | Chromium: CVE-2026-11055 Use after free in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-14125](https://patchblox.com/security/data/cve/CVE-2026-14125.md) | High | Chromium: CVE-2026-14125 Uninitialized Use in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-79118](https://patchblox.com/security/data/cve/CVE-2026-79118.md) | High | Chromium: CVE-2026-79118 Uninitialized resource in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-14386](https://patchblox.com/security/data/cve/CVE-2026-14386.md) | High | Chromium: CVE-2026-14386 Out of bounds read in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-14388](https://patchblox.com/security/data/cve/CVE-2026-14388.md) | High | Chromium: CVE-2026-14388 Out of bounds read in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-4460](https://patchblox.com/security/data/cve/CVE-2026-4460.md) | High | Chromium: CVE-2026-4460 Out of bounds read in Skia | 9.6 | 0.0028 | | | [CVE-2026-4464](https://patchblox.com/security/data/cve/CVE-2026-4464.md) | High | Chromium: CVE-2026-4464 Integer overflow in ANGLE | 9.6 | 0.0028 | | | [CVE-2026-11005](https://patchblox.com/security/data/cve/CVE-2026-11005.md) | High | Chromium: CVE-2026-11005 Out of bounds read in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-78914](https://patchblox.com/security/data/cve/CVE-2026-78914.md) | High | Chromium: CVE-2026-78914 Uninitialized resource in Skia | 9.6 | 0.0027 | | | [CVE-2026-9940](https://patchblox.com/security/data/cve/CVE-2026-9940.md) | High | Chromium: CVE-2026-9940 Heap buffer overflow in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-16413](https://patchblox.com/security/data/cve/CVE-2026-16413.md) | High | Chromium: CVE-2026-16413 Out of bounds write in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-9901](https://patchblox.com/security/data/cve/CVE-2026-9901.md) | High | Chromium: CVE-2026-9901 Use after free in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-9909](https://patchblox.com/security/data/cve/CVE-2026-9909.md) | High | Chromium: CVE-2026-9909 Integer overflow in Skia | 9.6 | 0.0027 | | | [CVE-2026-9983](https://patchblox.com/security/data/cve/CVE-2026-9983.md) | High | Chromium: CVE-2026-9983 Type Confusion in Skia | 9.6 | 0.0027 | | | [CVE-2026-17745](https://patchblox.com/security/data/cve/CVE-2026-17745.md) | High | Chromium: CVE-2026-17745 Out of bounds read in Skia | 9.6 | 0.0027 | | | [CVE-2026-7901](https://patchblox.com/security/data/cve/CVE-2026-7901.md) | High | Chromium: CVE-2026-7901 Use after free in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-9923](https://patchblox.com/security/data/cve/CVE-2026-9923.md) | High | Chromium: CVE-2026-9923 Use after free in Skia | 9.6 | 0.0027 | | | [CVE-2026-5283](https://patchblox.com/security/data/cve/CVE-2026-5283.md) | High | Chromium: CVE-2026-5283 Inappropriate implementation in ANGLE | 9.6 | 0.0027 | | | [CVE-2026-11039](https://patchblox.com/security/data/cve/CVE-2026-11039.md) | High | Chromium: CVE-2026-11039 Uninitialized Use in Skia | 9.6 | 0.0026 | | | [CVE-2026-11057](https://patchblox.com/security/data/cve/CVE-2026-11057.md) | High | Chromium: CVE-2026-11057 Uninitialized Use in Skia | 9.6 | 0.0026 | | | [CVE-2026-11087](https://patchblox.com/security/data/cve/CVE-2026-11087.md) | High | Chromium: CVE-2026-11087 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-11090](https://patchblox.com/security/data/cve/CVE-2026-11090.md) | High | Chromium: CVE-2026-11090 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-11104](https://patchblox.com/security/data/cve/CVE-2026-11104.md) | High | Chromium: CVE-2026-11104 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-11109](https://patchblox.com/security/data/cve/CVE-2026-11109.md) | High | Chromium: CVE-2026-11109 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-11110](https://patchblox.com/security/data/cve/CVE-2026-11110.md) | High | Chromium: CVE-2026-11110 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-11123](https://patchblox.com/security/data/cve/CVE-2026-11123.md) | High | Chromium: CVE-2026-11123 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-11137](https://patchblox.com/security/data/cve/CVE-2026-11137.md) | High | Chromium: CVE-2026-11137 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-11138](https://patchblox.com/security/data/cve/CVE-2026-11138.md) | High | Chromium: CVE-2026-11138 Uninitialized Use in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-4452](https://patchblox.com/security/data/cve/CVE-2026-4452.md) | High | Chromium: CVE-2026-4452 Integer overflow in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-64718](https://patchblox.com/security/data/cve/CVE-2026-64718.md) | High | WebKit Canvas: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0026 | | | [CVE-2026-7340](https://patchblox.com/security/data/cve/CVE-2026-7340.md) | High | Google Chrome: Integer overflow | 9.6 | 0.0026 | | | [CVE-2026-9953](https://patchblox.com/security/data/cve/CVE-2026-9953.md) | High | Chromium: CVE-2026-9953 Out of bounds read in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-14427](https://patchblox.com/security/data/cve/CVE-2026-14427.md) | High | Chromium: CVE-2026-14427 Heap buffer overflow in Skia | 9.6 | 0.0026 | | | [CVE-2026-9915](https://patchblox.com/security/data/cve/CVE-2026-9915.md) | High | Chromium: CVE-2026-9915 Heap buffer overflow in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-9926](https://patchblox.com/security/data/cve/CVE-2026-9926.md) | High | Chromium: CVE-2026-9926 Heap buffer overflow in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-79144](https://patchblox.com/security/data/cve/CVE-2026-79144.md) | High | Chromium: CVE-2026-79144 Information leak in Skia | 9.6 | 0.0026 | | | [CVE-2026-9965](https://patchblox.com/security/data/cve/CVE-2026-9965.md) | High | Chromium: CVE-2026-9965 Out of bounds write in ANGLE | 9.6 | 0.0026 | | | [CVE-2026-14396](https://patchblox.com/security/data/cve/CVE-2026-14396.md) | High | Chromium: CVE-2026-14396 Out of bounds read in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-14412](https://patchblox.com/security/data/cve/CVE-2026-14412.md) | High | Chromium: CVE-2026-14412 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-79112](https://patchblox.com/security/data/cve/CVE-2026-79112.md) | High | Chromium: CVE-2026-79112 Out of bounds read in Skia | 9.6 | 0.0025 | | | [CVE-2026-9908](https://patchblox.com/security/data/cve/CVE-2026-9908.md) | High | Chromium: CVE-2026-9908 Out of bounds read in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-9914](https://patchblox.com/security/data/cve/CVE-2026-9914.md) | High | Chromium: CVE-2026-9914 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-9935](https://patchblox.com/security/data/cve/CVE-2026-9935.md) | High | Chromium: CVE-2026-9935 Uninitialized Use in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-11268](https://patchblox.com/security/data/cve/CVE-2026-11268.md) | High | Chromium: CVE-2026-11268 Uninitialized Use in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-9999](https://patchblox.com/security/data/cve/CVE-2026-9999.md) | High | Chromium: CVE-2026-9999 Inappropriate implementation in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-14414](https://patchblox.com/security/data/cve/CVE-2026-14414.md) | High | Chromium: CVE-2026-14414 Insufficient validation of untrusted input in Skia | 9.6 | 0.0025 | | | [CVE-2026-11124](https://patchblox.com/security/data/cve/CVE-2026-11124.md) | High | Chromium: CVE-2026-11124 Heap buffer overflow in Skia | 9.6 | 0.0025 | | | [CVE-2026-6364](https://patchblox.com/security/data/cve/CVE-2026-6364.md) | High | Chromium: CVE-2026-6364 Out of bounds read in Skia | 9.6 | 0.0025 | | | [CVE-2026-9913](https://patchblox.com/security/data/cve/CVE-2026-9913.md) | High | Chromium: CVE-2026-9913 Inappropriate implementation in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-14389](https://patchblox.com/security/data/cve/CVE-2026-14389.md) | High | Google Chrome: Integer overflow | 9.6 | 0.0025 | | | [CVE-2026-9924](https://patchblox.com/security/data/cve/CVE-2026-9924.md) | High | Chromium: CVE-2026-9924 Heap buffer overflow in ANGLE | 9.6 | 0.0025 | | | [CVE-2026-11051](https://patchblox.com/security/data/cve/CVE-2026-11051.md) | High | Chromium: CVE-2026-11051 Out of bounds read in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-11121](https://patchblox.com/security/data/cve/CVE-2026-11121.md) | High | Chromium: CVE-2026-11121 Insufficient validation of untrusted input in Skia | 9.6 | 0.0024 | | | [CVE-2026-14429](https://patchblox.com/security/data/cve/CVE-2026-14429.md) | High | Chromium: CVE-2026-14429 Insufficient validation of untrusted input in Skia | 9.6 | 0.0024 | | | [CVE-2026-11111](https://patchblox.com/security/data/cve/CVE-2026-11111.md) | High | Chromium: CVE-2026-11111 Out of bounds read in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-7900](https://patchblox.com/security/data/cve/CVE-2026-7900.md) | High | Chromium: CVE-2026-7900 Heap buffer overflow in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-11040](https://patchblox.com/security/data/cve/CVE-2026-11040.md) | High | Chromium: CVE-2026-11040 Use after free in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-14400](https://patchblox.com/security/data/cve/CVE-2026-14400.md) | High | Chromium: CVE-2026-14400 Out of bounds write in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-16417](https://patchblox.com/security/data/cve/CVE-2026-16417.md) | High | Chromium: CVE-2026-16417 Uninitialized Use in Skia | 9.6 | 0.0024 | | | [CVE-2026-9877](https://patchblox.com/security/data/cve/CVE-2026-9877.md) | High | Chromium: CVE-2026-9877 Use after free in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-9916](https://patchblox.com/security/data/cve/CVE-2026-9916.md) | High | Chromium: CVE-2026-9916 Out of bounds write in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-9925](https://patchblox.com/security/data/cve/CVE-2026-9925.md) | High | Chromium: CVE-2026-9925 Use after free in ANGLE | 9.6 | 0.0024 | | | [CVE-2026-11663](https://patchblox.com/security/data/cve/CVE-2026-11663.md) | High | Chromium: CVE-2026-11663 Use after free in Skia | 9.6 | 0.0023 | | | [CVE-2026-8519](https://patchblox.com/security/data/cve/CVE-2026-8519.md) | High | Chromium: CVE-2026-8519 Integer overflow in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-10009](https://patchblox.com/security/data/cve/CVE-2026-10009.md) | High | Chromium: CVE-2026-10009 Integer overflow in Skia | 9.6 | 0.0023 | | | [CVE-2026-9882](https://patchblox.com/security/data/cve/CVE-2026-9882.md) | High | Chromium: CVE-2026-9882 Integer overflow in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-11159](https://patchblox.com/security/data/cve/CVE-2026-11159.md) | High | Chromium: CVE-2026-11159 Uninitialized Use in Skia | 9.6 | 0.0023 | | | [CVE-2026-17914](https://patchblox.com/security/data/cve/CVE-2026-17914.md) | High | Chromium: CVE-2026-17914 Side-channel information leakage in Skia | 9.6 | 0.0023 | | | [CVE-2026-8525](https://patchblox.com/security/data/cve/CVE-2026-8525.md) | High | Chromium: CVE-2026-8525 Heap buffer overflow in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-17811](https://patchblox.com/security/data/cve/CVE-2026-17811.md) | High | Chromium: CVE-2026-17811 Use after free in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-9899](https://patchblox.com/security/data/cve/CVE-2026-9899.md) | High | Chromium: CVE-2026-9899 Use after free in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-9900](https://patchblox.com/security/data/cve/CVE-2026-9900.md) | High | Chromium: CVE-2026-9900 Out of bounds write in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-9904](https://patchblox.com/security/data/cve/CVE-2026-9904.md) | High | Chromium: CVE-2026-9904 Use after free in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-9975](https://patchblox.com/security/data/cve/CVE-2026-9975.md) | High | Chromium: CVE-2026-9975 Out of bounds read and write in ANGLE | 9.6 | 0.0023 | | | [CVE-2026-7903](https://patchblox.com/security/data/cve/CVE-2026-7903.md) | High | Chromium: CVE-2026-7903 Integer overflow in ANGLE | 9.6 | 0.0022 | | | [CVE-2026-79147](https://patchblox.com/security/data/cve/CVE-2026-79147.md) | High | Chromium: CVE-2026-79147 Information leak in Skia | 9.6 | 0.0022 | | | [CVE-2026-9932](https://patchblox.com/security/data/cve/CVE-2026-9932.md) | High | Chromium: CVE-2026-9932 Use after free in ANGLE | 9.6 | 0.0022 | | | [CVE-2026-9911](https://patchblox.com/security/data/cve/CVE-2026-9911.md) | High | Chromium: CVE-2026-9911 Integer overflow in ANGLE | 9.6 | 0.0022 | | | [CVE-2026-9946](https://patchblox.com/security/data/cve/CVE-2026-9946.md) | High | Chromium: CVE-2026-9946 Use after free in ANGLE | 9.6 | 0.0022 | | | [CVE-2026-7920](https://patchblox.com/security/data/cve/CVE-2026-7920.md) | High | Chromium: CVE-2026-7920 Use after free in Skia | 9.6 | 0.0022 | | | [CVE-2026-7923](https://patchblox.com/security/data/cve/CVE-2026-7923.md) | High | Chromium: CVE-2026-7923 Out of bounds write in Skia | 9.6 | 0.0022 | | | [CVE-2026-28984](https://patchblox.com/security/data/cve/CVE-2026-28984.md) | High | webkit2gtk: The issue was addressed with improved memory handling | 9.6 | 0.0022 | | | [CVE-2026-14413](https://patchblox.com/security/data/cve/CVE-2026-14413.md) | High | Chromium: CVE-2026-14413 Uninitialized Use in ANGLE | 9.6 | 0.0021 | | | [CVE-2026-11675](https://patchblox.com/security/data/cve/CVE-2026-11675.md) | High | Chromium: CVE-2026-11675 Insufficient validation of untrusted input in Skia | 9.6 | 0.0021 | | | [CVE-2026-9942](https://patchblox.com/security/data/cve/CVE-2026-9942.md) | High | Chromium: CVE-2026-9942 Uninitialized Use in ANGLE | 9.6 | 0.0021 | | | [CVE-2026-9944](https://patchblox.com/security/data/cve/CVE-2026-9944.md) | High | Chromium: CVE-2026-9944 Uninitialized Use in ANGLE | 9.6 | 0.0021 | | | [CVE-2026-9892](https://patchblox.com/security/data/cve/CVE-2026-9892.md) | High | Chromium: CVE-2026-9892 Inappropriate implementation in Skia | 9.6 | 0.0021 | | | [CVE-2026-7942](https://patchblox.com/security/data/cve/CVE-2026-7942.md) | High | Chromium: CVE-2026-7942 Integer overflow in ANGLE | 9.6 | 0.0020 | | | [CVE-2026-10018](https://patchblox.com/security/data/cve/CVE-2026-10018.md) | High | Chromium: CVE-2026-10018 Integer overflow in ANGLE | 9.6 | 0.0020 | | | [CVE-2026-14410](https://patchblox.com/security/data/cve/CVE-2026-14410.md) | High | Chromium: CVE-2026-14410 Inappropriate implementation in Skia | 9.6 | 0.0020 | | | [CVE-2026-9981](https://patchblox.com/security/data/cve/CVE-2026-9981.md) | High | Chromium: CVE-2026-9981 Inappropriate implementation in Skia | 9.6 | 0.0020 | | | [CVE-2026-10019](https://patchblox.com/security/data/cve/CVE-2026-10019.md) | High | Chromium: CVE-2026-10019 Integer overflow in ANGLE | 9.6 | 0.0020 | | | [CVE-2026-8556](https://patchblox.com/security/data/cve/CVE-2026-8556.md) | High | Chromium: CVE-2026-8556 Inappropriate implementation in ANGLE | 9.6 | 0.0020 | | | [CVE-2026-10020](https://patchblox.com/security/data/cve/CVE-2026-10020.md) | High | Chromium: CVE-2026-10020 Insufficient validation of untrusted input in Skia | 9.6 | 0.0020 | | | [CVE-2026-14418](https://patchblox.com/security/data/cve/CVE-2026-14418.md) | High | Chromium: CVE-2026-14418 Uninitialized Use in ANGLE | 9.6 | 0.0020 | | | [CVE-2026-9982](https://patchblox.com/security/data/cve/CVE-2026-9982.md) | High | Chromium: CVE-2026-9982 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0020 | | | [CVE-2026-7949](https://patchblox.com/security/data/cve/CVE-2026-7949.md) | High | Chromium: CVE-2026-7949 Out of bounds read in Skia | 9.6 | 0.0019 | | | [CVE-2026-8567](https://patchblox.com/security/data/cve/CVE-2026-8567.md) | High | Chromium: CVE-2026-8567 Integer overflow in ANGLE | 9.6 | 0.0018 | | | [CVE-2026-10012](https://patchblox.com/security/data/cve/CVE-2026-10012.md) | High | Chromium: CVE-2026-10012 Use after free in Skia | 9.6 | 0.0018 | | | [CVE-2026-9998](https://patchblox.com/security/data/cve/CVE-2026-9998.md) | High | Chromium: CVE-2026-9998 Integer overflow in Skia | 9.6 | 0.0018 | | | [CVE-2026-10011](https://patchblox.com/security/data/cve/CVE-2026-10011.md) | High | Chromium: CVE-2026-10011 Inappropriate implementation in Skia | 9.6 | 0.0017 | | | [CVE-2026-7943](https://patchblox.com/security/data/cve/CVE-2026-7943.md) | High | Chromium: CVE-2026-7943 Insufficient validation of untrusted input in ANGLE | 9.6 | 0.0017 | | | [CVE-2026-8554](https://patchblox.com/security/data/cve/CVE-2026-8554.md) | High | Chromium: CVE-2026-8554 Type Confusion in ANGLE | 9.6 | 0.0017 | | | [CVE-2026-17891](https://patchblox.com/security/data/cve/CVE-2026-17891.md) | High | Chromium: CVE-2026-17891 Use after free in ANGLE | 9.6 | 0.0016 | | | [CVE-2026-8579](https://patchblox.com/security/data/cve/CVE-2026-8579.md) | High | Chromium: CVE-2026-8579 Insufficient validation of untrusted input in Skia | 9.6 | 0.0014 | | --- Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.