# RLSA-2026:69098: webkit2gtk3 security update

RLSA-2026:69098, released September 22, 2026, fixes 112 CVEs in webkit2gtk3 (version 0:2.54.0-1.el9_8). One of them is being exploited (CVE-2026-3909); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/rlsa-2026-69098
- Platform: Linux
- Released: Sep 22, 2026
- Priority: Patch now (Closes CVE-2026-3909, exploited (CISA KEV))
- CVEs: 112, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://errata.rockylinux.org/RLSA-2026:69098

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [webkit2gtk3](https://patchblox.com/security/data/product/linux/webkit2gtk3.md) | rocky 9 | 0:2.54.0-1.el9_8 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-3909](https://patchblox.com/security/data/cve/CVE-2026-3909.md) | Patch now | Chromium: CVE-2026-3909 Out of bounds write in Skia | 9.6 | 0.0233 | CISA KEV |
| [CVE-2026-13885](https://patchblox.com/security/data/cve/CVE-2026-13885.md) | Urgent | Chromium: CVE-2026-13885 Use after free in Skia | 9.6 | 0.0046 |  |
| [CVE-2026-13781](https://patchblox.com/security/data/cve/CVE-2026-13781.md) | Urgent | Chromium: CVE-2026-13781 Insufficient validation of untrusted input in Skia | 9.6 | 0.0043 |  |
| [CVE-2023-4860](https://patchblox.com/security/data/cve/CVE-2023-4860.md) | Urgent | chromium: Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compro... | 9.6 | 0.0037 |  |
| [CVE-2026-13820](https://patchblox.com/security/data/cve/CVE-2026-13820.md) | Urgent | Chromium: CVE-2026-13820 Out of bounds read in Skia | 9.6 | 0.0034 |  |
| [CVE-2026-14387](https://patchblox.com/security/data/cve/CVE-2026-14387.md) | Urgent | Google Chrome: Integer overflow | 9.6 | 0.0029 |  |
| [CVE-2026-14419](https://patchblox.com/security/data/cve/CVE-2026-14419.md) | Urgent | Chromium: CVE-2026-14419 Use after free in Skia | 9.6 | 0.0023 |  |
| [CVE-2026-11099](https://patchblox.com/security/data/cve/CVE-2026-11099.md) | Urgent | Chromium: CVE-2026-11099 Vulnerability in Skia | 9.6 | n/a |  |
| [CVE-2026-8510](https://patchblox.com/security/data/cve/CVE-2026-8510.md) | High | Chromium: CVE-2026-8510 Integer overflow in Skia | 9.6 | 0.0995 |  |
| [CVE-2026-3538](https://patchblox.com/security/data/cve/CVE-2026-3538.md) | High | Chromium: CVE-2026-3538 Integer overflow in Skia | 9.6 | 0.0078 |  |
| [CVE-2024-7966](https://patchblox.com/security/data/cve/CVE-2024-7966.md) | High | Chromium: CVE-2024-7966 Out of bounds memory access in Skia | 9.6 | 0.0071 |  |
| [CVE-2024-8636](https://patchblox.com/security/data/cve/CVE-2024-8636.md) | High | Chromium: CVE-2024-8636 Heap buffer overflow in Skia | 9.6 | 0.0065 |  |
| [CVE-2026-65331](https://patchblox.com/security/data/cve/CVE-2026-65331.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0065 |  |
| [CVE-2026-65332](https://patchblox.com/security/data/cve/CVE-2026-65332.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0065 |  |
| [CVE-2026-65337](https://patchblox.com/security/data/cve/CVE-2026-65337.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0065 |  |
| [CVE-2026-65340](https://patchblox.com/security/data/cve/CVE-2026-65340.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0065 |  |
| [CVE-2026-65351](https://patchblox.com/security/data/cve/CVE-2026-65351.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0065 |  |
| [CVE-2026-64780](https://patchblox.com/security/data/cve/CVE-2026-64780.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0063 |  |
| [CVE-2024-8198](https://patchblox.com/security/data/cve/CVE-2024-8198.md) | High | Chromium: CVE-2024-8198 Heap buffer overflow in Skia | 9.6 | 0.0061 |  |
| [CVE-2024-8193](https://patchblox.com/security/data/cve/CVE-2024-8193.md) | High | chromium: Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised t... | 9.6 | 0.0059 |  |
| [CVE-2026-43795](https://patchblox.com/security/data/cve/CVE-2026-43795.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0058 |  |
| [CVE-2026-64784](https://patchblox.com/security/data/cve/CVE-2026-64784.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0058 |  |
| [CVE-2026-65334](https://patchblox.com/security/data/cve/CVE-2026-65334.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0058 |  |
| [CVE-2026-65335](https://patchblox.com/security/data/cve/CVE-2026-65335.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0058 |  |
| [CVE-2026-65336](https://patchblox.com/security/data/cve/CVE-2026-65336.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0058 |  |
| [CVE-2026-65338](https://patchblox.com/security/data/cve/CVE-2026-65338.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0058 |  |
| [CVE-2025-0436](https://patchblox.com/security/data/cve/CVE-2025-0436.md) | High | Chromium: CVE-2025-0436 Integer overflow in Skia | 9.6 | 0.0058 |  |
| [CVE-2026-19176](https://patchblox.com/security/data/cve/CVE-2026-19176.md) | High | CVE-2026-19176 Use after free in Skia | 9.6 | 0.0053 |  |
| [CVE-2026-83596](https://patchblox.com/security/data/cve/CVE-2026-83596.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  Security Fix(es):  * chromium... | 9.6 | 0.0050 |  |
| [CVE-2026-17653](https://patchblox.com/security/data/cve/CVE-2026-17653.md) | High | Chromium: CVE-2026-17653 Use after free in Skia | 9.6 | 0.0049 |  |
| [CVE-2026-64730](https://patchblox.com/security/data/cve/CVE-2026-64730.md) | High | WebKit: Visiting a website that frames malicious content may lead to UI spoofing | 9.6 | 0.0049 |  |
| [CVE-2024-9123](https://patchblox.com/security/data/cve/CVE-2024-9123.md) | High | Chromium: CVE-2024-9123 Integer overflow in Skia | 9.6 | 0.0048 |  |
| [CVE-2026-6298](https://patchblox.com/security/data/cve/CVE-2026-6298.md) | High | Chromium: CVE-2026-6298 Heap buffer overflow in Skia | 9.6 | 0.0047 |  |
| [CVE-2026-78376](https://patchblox.com/security/data/cve/CVE-2026-78376.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  Security Fix(es):  * chromium... | 9.6 | 0.0047 |  |
| [CVE-2026-64715](https://patchblox.com/security/data/cve/CVE-2026-64715.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected process crash | 9.6 | 0.0047 |  |
| [CVE-2026-64757](https://patchblox.com/security/data/cve/CVE-2026-64757.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0047 |  |
| [CVE-2026-64713](https://patchblox.com/security/data/cve/CVE-2026-64713.md) | High | WebKit: Websites may know if the user has visited a given link | 9.6 | 0.0047 |  |
| [CVE-2025-0444](https://patchblox.com/security/data/cve/CVE-2025-0444.md) | High | Chromium: CVE-2025-0444 Use after free in Skia | 9.6 | 0.0046 |  |
| [CVE-2026-17712](https://patchblox.com/security/data/cve/CVE-2026-17712.md) | High | Chromium: CVE-2026-17712 Race in Skia | 9.6 | 0.0045 |  |
| [CVE-2026-9893](https://patchblox.com/security/data/cve/CVE-2026-9893.md) | High | Chromium: CVE-2026-9893 Use after free in Skia | 9.6 | 0.0044 |  |
| [CVE-2026-10941](https://patchblox.com/security/data/cve/CVE-2026-10941.md) | High | Chromium: CVE-2026-10941 Out of bounds memory access in Skia | 9.6 | 0.0044 |  |
| [CVE-2026-43804](https://patchblox.com/security/data/cve/CVE-2026-43804.md) | High | WebKit: Visiting a website may lead to an app denial-of-service | 9.6 | 0.0043 |  |
| [CVE-2026-64782](https://patchblox.com/security/data/cve/CVE-2026-64782.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0043 |  |
| [CVE-2026-64783](https://patchblox.com/security/data/cve/CVE-2026-64783.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0043 |  |
| [CVE-2026-15766](https://patchblox.com/security/data/cve/CVE-2026-15766.md) | High | Chromium: CVE-2026-15766 Uninitialized Use in Skia | 9.6 | 0.0040 |  |
| [CVE-2026-19160](https://patchblox.com/security/data/cve/CVE-2026-19160.md) | High | CVE-2026-19160 Uninitialized Use in Skia | 9.6 | 0.0040 |  |
| [CVE-2026-17757](https://patchblox.com/security/data/cve/CVE-2026-17757.md) | High | Chromium: CVE-2026-17757 Uninitialized Use in Skia | 9.6 | 0.0039 |  |
| [CVE-2026-17771](https://patchblox.com/security/data/cve/CVE-2026-17771.md) | High | Chromium: CVE-2026-17771 Uninitialized Use in Skia | 9.6 | 0.0039 |  |
| [CVE-2026-13841](https://patchblox.com/security/data/cve/CVE-2026-13841.md) | High | Chromium: CVE-2026-13841 Integer overflow in Skia | 9.6 | 0.0039 |  |
| [CVE-2026-79020](https://patchblox.com/security/data/cve/CVE-2026-79020.md) | High | Chromium: CVE-2026-79020 Out of bounds read in Skia | 9.6 | 0.0038 |  |
| [CVE-2026-64779](https://patchblox.com/security/data/cve/CVE-2026-64779.md) | High | WebKit Storage: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0038 |  |
| [CVE-2026-13971](https://patchblox.com/security/data/cve/CVE-2026-13971.md) | High | Chromium: CVE-2026-13971 Uninitialized Use in Skia | 9.6 | 0.0038 |  |
| [CVE-2026-64728](https://patchblox.com/security/data/cve/CVE-2026-64728.md) | High | WebKit: Maliciously crafted web content may violate iframe sandboxing policy | 9.6 | 0.0037 |  |
| [CVE-2026-84635](https://patchblox.com/security/data/cve/CVE-2026-84635.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  Security Fix(es):  * chromium... | 9.6 | 0.0037 |  |
| [CVE-2026-11024](https://patchblox.com/security/data/cve/CVE-2026-11024.md) | High | Chromium: CVE-2026-11024 Stack buffer overflow in Skia | 9.6 | 0.0037 |  |
| [CVE-2026-64753](https://patchblox.com/security/data/cve/CVE-2026-64753.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform | 9.6 | 0.0037 |  |
| [CVE-2026-10977](https://patchblox.com/security/data/cve/CVE-2026-10977.md) | High | Chromium: CVE-2026-10977 Uninitialized Use in Skia | 9.6 | 0.0035 |  |
| [CVE-2026-76041](https://patchblox.com/security/data/cve/CVE-2026-76041.md) | High | Chromium: CVE-2026-76041 Information leak in Skia | 9.6 | 0.0035 |  |
| [CVE-2026-10993](https://patchblox.com/security/data/cve/CVE-2026-10993.md) | High | Chromium: CVE-2026-10993 Heap buffer overflow in Skia | 9.6 | 0.0035 |  |
| [CVE-2026-19154](https://patchblox.com/security/data/cve/CVE-2026-19154.md) | High | chromium: Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromi... | 9.6 | 0.0035 |  |
| [CVE-2026-19173](https://patchblox.com/security/data/cve/CVE-2026-19173.md) | High | CVE-2026-19173 Out of bounds write in Skia | 9.6 | 0.0034 |  |
| [CVE-2026-64778](https://patchblox.com/security/data/cve/CVE-2026-64778.md) | High | WebKit History: Visiting a maliciously crafted website may leak sensitive data | 9.6 | 0.0034 |  |
| [CVE-2026-19161](https://patchblox.com/security/data/cve/CVE-2026-19161.md) | High | CVE-2026-19161 Uninitialized Use in Skia | 9.6 | 0.0034 |  |
| [CVE-2026-78958](https://patchblox.com/security/data/cve/CVE-2026-78958.md) | High | Chromium: CVE-2026-78958 Uninitialized resource in Skia | 9.6 | 0.0034 |  |
| [CVE-2026-7353](https://patchblox.com/security/data/cve/CVE-2026-7353.md) | High | Google Chrome: Heap buffer overflow | 9.6 | 0.0034 |  |
| [CVE-2026-64787](https://patchblox.com/security/data/cve/CVE-2026-64787.md) | High | WebKit: Processing maliciously crafted web content may lead to an unexpected process termination | 9.6 | 0.0033 |  |
| [CVE-2026-5870](https://patchblox.com/security/data/cve/CVE-2026-5870.md) | High | Chromium: CVE-2026-5870 Integer overflow in Skia | 9.6 | 0.0033 |  |
| [CVE-2026-10985](https://patchblox.com/security/data/cve/CVE-2026-10985.md) | High | Chromium: CVE-2026-10985 Out of bounds read in Skia | 9.6 | 0.0032 |  |
| [CVE-2026-3931](https://patchblox.com/security/data/cve/CVE-2026-3931.md) | High | Chromium: CVE-2026-3931 Heap buffer overflow in Skia | 9.6 | 0.0032 |  |
| [CVE-2026-17702](https://patchblox.com/security/data/cve/CVE-2026-17702.md) | High | Chromium: CVE-2026-17702 Inappropriate implementation in Skia | 9.6 | 0.0031 |  |
| [CVE-2026-65341](https://patchblox.com/security/data/cve/CVE-2026-65341.md) | High | WebKit: Processing maliciously crafted web content may lead to memory corruption | 9.6 | 0.0030 |  |
| [CVE-2026-15774](https://patchblox.com/security/data/cve/CVE-2026-15774.md) | High | Chromium: CVE-2026-15774 Use after free in Skia | 9.6 | 0.0029 |  |
| [CVE-2026-10925](https://patchblox.com/security/data/cve/CVE-2026-10925.md) | High | Chromium: CVE-2026-10925 Out of bounds write in Skia | 9.6 | 0.0029 |  |
| [CVE-2026-4460](https://patchblox.com/security/data/cve/CVE-2026-4460.md) | High | Chromium: CVE-2026-4460 Out of bounds read in Skia | 9.6 | 0.0028 |  |
| [CVE-2026-78914](https://patchblox.com/security/data/cve/CVE-2026-78914.md) | High | Chromium: CVE-2026-78914 Uninitialized resource in Skia | 9.6 | 0.0027 |  |
| [CVE-2026-9909](https://patchblox.com/security/data/cve/CVE-2026-9909.md) | High | Chromium: CVE-2026-9909 Integer overflow in Skia | 9.6 | 0.0027 |  |
| [CVE-2026-9983](https://patchblox.com/security/data/cve/CVE-2026-9983.md) | High | Chromium: CVE-2026-9983 Type Confusion in Skia | 9.6 | 0.0027 |  |
| [CVE-2026-17745](https://patchblox.com/security/data/cve/CVE-2026-17745.md) | High | Chromium: CVE-2026-17745 Out of bounds read in Skia | 9.6 | 0.0027 |  |
| [CVE-2026-9923](https://patchblox.com/security/data/cve/CVE-2026-9923.md) | High | Chromium: CVE-2026-9923 Use after free in Skia | 9.6 | 0.0027 |  |
| [CVE-2026-11039](https://patchblox.com/security/data/cve/CVE-2026-11039.md) | High | Chromium: CVE-2026-11039 Uninitialized Use in Skia | 9.6 | 0.0026 |  |
| [CVE-2026-11057](https://patchblox.com/security/data/cve/CVE-2026-11057.md) | High | Chromium: CVE-2026-11057 Uninitialized Use in Skia | 9.6 | 0.0026 |  |
| [CVE-2026-64718](https://patchblox.com/security/data/cve/CVE-2026-64718.md) | High | WebKit Canvas: Processing maliciously crafted web content may lead to an unexpected Safari crash | 9.6 | 0.0026 |  |
| [CVE-2026-14427](https://patchblox.com/security/data/cve/CVE-2026-14427.md) | High | Chromium: CVE-2026-14427 Heap buffer overflow in Skia | 9.6 | 0.0026 |  |
| [CVE-2026-17992](https://patchblox.com/security/data/cve/CVE-2026-17992.md) | High | Chromium: CVE-2026-17992 Uninitialized Use in Skia | 9.6 | 0.0026 |  |
| [CVE-2026-79144](https://patchblox.com/security/data/cve/CVE-2026-79144.md) | High | Chromium: CVE-2026-79144 Information leak in Skia | 9.6 | 0.0026 |  |
| [CVE-2026-79112](https://patchblox.com/security/data/cve/CVE-2026-79112.md) | High | Chromium: CVE-2026-79112 Out of bounds read in Skia | 9.6 | 0.0025 |  |
| [CVE-2026-14414](https://patchblox.com/security/data/cve/CVE-2026-14414.md) | High | Chromium: CVE-2026-14414 Insufficient validation of untrusted input in Skia | 9.6 | 0.0025 |  |
| [CVE-2026-11124](https://patchblox.com/security/data/cve/CVE-2026-11124.md) | High | Chromium: CVE-2026-11124 Heap buffer overflow in Skia | 9.6 | 0.0025 |  |
| [CVE-2026-6364](https://patchblox.com/security/data/cve/CVE-2026-6364.md) | High | Chromium: CVE-2026-6364 Out of bounds read in Skia | 9.6 | 0.0025 |  |
| [CVE-2026-14389](https://patchblox.com/security/data/cve/CVE-2026-14389.md) | High | Google Chrome: Integer overflow | 9.6 | 0.0025 |  |
| [CVE-2026-11121](https://patchblox.com/security/data/cve/CVE-2026-11121.md) | High | Chromium: CVE-2026-11121 Insufficient validation of untrusted input in Skia | 9.6 | 0.0024 |  |
| [CVE-2026-14429](https://patchblox.com/security/data/cve/CVE-2026-14429.md) | High | Chromium: CVE-2026-14429 Insufficient validation of untrusted input in Skia | 9.6 | 0.0024 |  |
| [CVE-2026-16417](https://patchblox.com/security/data/cve/CVE-2026-16417.md) | High | Chromium: CVE-2026-16417 Uninitialized Use in Skia | 9.6 | 0.0024 |  |
| [CVE-2026-11663](https://patchblox.com/security/data/cve/CVE-2026-11663.md) | High | Chromium: CVE-2026-11663 Use after free in Skia | 9.6 | 0.0023 |  |
| [CVE-2026-10009](https://patchblox.com/security/data/cve/CVE-2026-10009.md) | High | Chromium: CVE-2026-10009 Integer overflow in Skia | 9.6 | 0.0023 |  |
| [CVE-2026-11159](https://patchblox.com/security/data/cve/CVE-2026-11159.md) | High | Chromium: CVE-2026-11159 Uninitialized Use in Skia | 9.6 | 0.0023 |  |
| [CVE-2026-17914](https://patchblox.com/security/data/cve/CVE-2026-17914.md) | High | Chromium: CVE-2026-17914 Side-channel information leakage in Skia | 9.6 | 0.0023 |  |
| [CVE-2026-84359](https://patchblox.com/security/data/cve/CVE-2026-84359.md) | High | Chromium: CVE-2026-84359 Information leak in Skia | 9.6 | 0.0023 |  |
| [CVE-2026-79147](https://patchblox.com/security/data/cve/CVE-2026-79147.md) | High | Chromium: CVE-2026-79147 Information leak in Skia | 9.6 | 0.0022 |  |
| [CVE-2026-7920](https://patchblox.com/security/data/cve/CVE-2026-7920.md) | High | Chromium: CVE-2026-7920 Use after free in Skia | 9.6 | 0.0022 |  |
| [CVE-2026-7923](https://patchblox.com/security/data/cve/CVE-2026-7923.md) | High | Chromium: CVE-2026-7923 Out of bounds write in Skia | 9.6 | 0.0022 |  |
| [CVE-2026-28984](https://patchblox.com/security/data/cve/CVE-2026-28984.md) | High | webkit2gtk: The issue was addressed with improved memory handling | 9.6 | 0.0022 |  |
| [CVE-2026-11675](https://patchblox.com/security/data/cve/CVE-2026-11675.md) | High | Chromium: CVE-2026-11675 Insufficient validation of untrusted input in Skia | 9.6 | 0.0021 |  |
| [CVE-2026-9892](https://patchblox.com/security/data/cve/CVE-2026-9892.md) | High | Chromium: CVE-2026-9892 Inappropriate implementation in Skia | 9.6 | 0.0021 |  |
| [CVE-2026-14410](https://patchblox.com/security/data/cve/CVE-2026-14410.md) | High | Chromium: CVE-2026-14410 Inappropriate implementation in Skia | 9.6 | 0.0020 |  |
| [CVE-2026-9981](https://patchblox.com/security/data/cve/CVE-2026-9981.md) | High | Chromium: CVE-2026-9981 Inappropriate implementation in Skia | 9.6 | 0.0020 |  |
| [CVE-2026-10020](https://patchblox.com/security/data/cve/CVE-2026-10020.md) | High | Chromium: CVE-2026-10020 Insufficient validation of untrusted input in Skia | 9.6 | 0.0020 |  |
| [CVE-2026-7949](https://patchblox.com/security/data/cve/CVE-2026-7949.md) | High | Chromium: CVE-2026-7949 Out of bounds read in Skia | 9.6 | 0.0019 |  |
| [CVE-2026-10012](https://patchblox.com/security/data/cve/CVE-2026-10012.md) | High | Chromium: CVE-2026-10012 Use after free in Skia | 9.6 | 0.0018 |  |
| [CVE-2026-9998](https://patchblox.com/security/data/cve/CVE-2026-9998.md) | High | Chromium: CVE-2026-9998 Integer overflow in Skia | 9.6 | 0.0018 |  |
| [CVE-2026-10011](https://patchblox.com/security/data/cve/CVE-2026-10011.md) | High | Chromium: CVE-2026-10011 Inappropriate implementation in Skia | 9.6 | 0.0017 |  |
| [CVE-2026-8579](https://patchblox.com/security/data/cve/CVE-2026-8579.md) | High | Chromium: CVE-2026-8579 Insufficient validation of untrusted input in Skia | 9.6 | 0.0014 |  |

---

Data as of 2026-11-08T19:12:23Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.
